Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File:                     lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier:          hrhR6kf5XXHyT66Il0BPtEUhn0kwBLUeSjeQRej3aDc=
Subject key identifier:   91:99:D1:8B:7E:63:92:1C:DA:74:28:35:5D:F0:D2:07:03:38:D7:E6
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer:       /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial:       018F5D71E6F474F791F6263ACCF8D3BAE9C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number:          116E
Signing time:             Thu 09 May 2024 13:01:36 +0000
Manifest this update:     Thu 09 May 2024 13:01:36 +0000
Manifest next update:     Fri 10 May 2024 13:01:36 +0000
Files and hashes:         1: 4piEbtp5w2e3LNr_ullUnTg5PZY.roa (hash: LtXVG3ActQxP643mqM3hPNnrnp8JUHPfGXPLFtJ/VHI=)
                          2: 9Vg_8xu94u1tov7QUAhMw3ufRMU.roa (hash: 2jArj7Jj8OWy1fdjQtt5ABnV+wAcoYy0j5wZpDZ/nLs=)
                          3: BYKSsUcLFdUZ28YbIH5kSzKFlmM.roa (hash: sVBdfgtkq7JdpG1+6biNfkgvr6V5VB6Yf2k9ITZ+9xE=)
                          4: U8qy5gAB0dAxKVI21EPKkmzJq2k.roa (hash: 5J/Kf/rrEvkZxiJNYUUSRfd4y6NUaYNNcBhlt/v/PDQ=)
                          5: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: oRWwBtrLzf1YxbMQlErAfww4a70p8A98RZ6Bdr+zOsk=)
                          6: oF3tLW6W2taiqhTBm75QIk5aKKI.roa (hash: nbE23GmYtyG9gpfyd8mZ4N0C1ughqFu4eJ/brnltgB0=)
                          7: wmJLXi2EDm8FiGMINxp3Ci-UmAA.roa (hash: 14IUkLlfuNM0HPAIwSfD4gNEATlpJvp9Tc8kQ7iIOJ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5d:71:e6:f4:74:f7:91:f6:26:3a:cc:f8:d3:ba:e9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
        Validity
            Not Before: May  9 13:01:36 2024 GMT
            Not After : May 10 13:01:36 2024 GMT
        Subject: CN=9199d18b7e63921cda7428355df0d2070338d7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f4:1d:31:ab:ae:a8:49:d8:7a:ce:6f:df:11:
                    f1:10:0b:48:db:04:d4:17:c9:8e:99:0c:1c:7d:db:
                    0c:85:13:8a:ac:90:5a:98:8c:7f:ea:09:5e:ae:e8:
                    30:c5:ea:69:d8:4f:51:69:7c:88:0f:55:3a:31:a2:
                    1a:ad:c4:00:b2:69:52:17:93:16:ee:d0:c5:4b:22:
                    b8:99:87:d1:e2:d4:1d:00:a3:4c:94:94:40:dc:8e:
                    63:d7:39:2b:8e:21:33:28:0b:38:21:f0:6b:ec:5b:
                    12:5d:d9:17:cf:7f:52:f6:f9:e9:db:dd:20:b6:50:
                    72:26:1d:c5:45:78:0e:18:2e:ab:67:3f:b7:9f:a5:
                    5c:5d:0b:30:24:ff:b2:bf:c1:b3:ac:2e:e9:88:4b:
                    36:6e:82:3e:7a:c3:0b:45:5b:94:f7:2e:39:8f:d2:
                    1a:2d:15:e0:4c:34:73:43:b0:90:b2:28:8b:64:aa:
                    0c:b0:09:ae:06:d1:f4:00:28:ab:0b:92:5e:81:18:
                    41:db:b0:ba:65:2b:be:1f:d4:7f:17:ae:89:fe:c9:
                    1f:59:ab:85:fd:49:26:03:bc:b7:9f:4d:f1:e7:8f:
                    4b:b0:1f:73:62:2c:a0:5c:60:37:58:a6:a1:03:d0:
                    4c:fd:55:34:2c:17:17:42:8f:e3:67:9c:a5:87:7a:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:99:D1:8B:7E:63:92:1C:DA:74:28:35:5D:F0:D2:07:03:38:D7:E6
            X509v3 Authority Key Identifier:
                keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:47:fb:89:cc:52:83:26:cc:34:89:02:be:95:c3:a4:92:7b:
         13:10:d7:a5:69:08:a5:67:6c:08:f6:0b:78:6e:b7:1e:38:d2:
         f5:40:dc:d0:f2:fc:c6:d7:b8:34:01:f4:12:41:61:4f:1f:9c:
         ed:c3:b4:eb:55:39:80:f7:e4:75:cd:f5:b2:86:27:4a:9a:83:
         86:d7:32:e6:8f:70:ce:5a:a4:27:46:a5:7c:4d:41:3a:13:3c:
         42:08:3a:49:8f:ff:91:40:2a:7b:2c:c5:47:d6:51:99:dc:cd:
         84:ba:fe:5d:03:bb:2a:ef:65:45:af:c8:df:8a:7d:fd:0c:4a:
         42:66:34:12:20:88:9a:5c:64:fc:06:92:5b:ff:4c:58:ac:3a:
         0d:cc:e8:3c:71:3b:72:1f:c2:88:5f:09:07:ce:dd:20:32:b5:
         5b:6e:2b:26:96:5c:a1:62:3c:d4:c8:17:68:68:d8:65:5a:df:
         98:bb:28:11:bf:8c:16:92:3d:72:1e:9b:6a:1f:9e:52:f9:66:
         7a:41:30:1e:ea:87:2b:94:18:af:e2:a5:5b:f8:aa:60:f3:2c:
         bd:d7:f5:50:68:5e:1b:5a:81:c0:7c:46:27:59:75:54:aa:02:
         06:38:77:fb:0a:62:7a:62:8f:4e:02:9d:9e:35:57:de:02:4c:
         41:da:2c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 18:15:07 2024 by rpki-client on console-ams.rpki-client.org