Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.mft
File:                     lYg5DPMh3EPOOsC8j7CVVNX8Lnc.mft (raw, json)
Hash identifier:          0ZB/TnFUwjHGPvTizZmudNuRCxnaR/zXmoWReoqrzto=
Subject key identifier:   12:DE:89:E8:41:1C:FD:B8:2C:FC:C8:C2:A9:EE:7E:BE:44:96:8A:65
Authority key identifier: 95:88:39:0C:F3:21:DC:43:CE:3A:C0:BC:8F:B0:95:54:D5:FC:2E:77
Certificate issuer:       /CN=9588390cf321dc43ce3ac0bc8fb09554d5fc2e77
Certificate serial:       018F866C91E3D6FEAD725C2C425C3A7032D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.mft
Manifest number:          0FC7
Signing time:             Fri 17 May 2024 12:00:13 +0000
Manifest this update:     Fri 17 May 2024 12:00:13 +0000
Manifest next update:     Sat 18 May 2024 12:00:13 +0000
Files and hashes:         1: d01pCOjz5O9DzKkmMb8_ayfrWXY.roa (hash: j5Eas3zqGBp5HX2QeMvzI5of0G4ZX/uflUt4sKSUxNE=)
                          2: lYg5DPMh3EPOOsC8j7CVVNX8Lnc.crl (hash: 7MLPgdBZH3yg3bHy9a4QnBkU+OTlkC8yYFQZa5eMva8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:91:e3:d6:fe:ad:72:5c:2c:42:5c:3a:70:32:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9588390cf321dc43ce3ac0bc8fb09554d5fc2e77
        Validity
            Not Before: May 17 12:00:13 2024 GMT
            Not After : May 18 12:00:13 2024 GMT
        Subject: CN=12de89e8411cfdb82cfcc8c2a9ee7ebe44968a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:ca:2f:55:9c:6f:9b:3d:75:12:76:03:51:
                    3a:e3:1a:99:ad:b2:1b:ea:40:2e:dd:24:81:75:11:
                    9d:6f:15:11:ae:93:b6:ea:de:b1:dc:ac:78:e0:43:
                    28:27:f5:fd:70:4d:f1:35:1b:87:61:d0:d9:03:09:
                    ca:07:c6:97:c3:a3:29:1f:84:51:a8:b4:15:13:05:
                    29:f4:b4:2d:a0:b5:11:dc:13:d5:77:fb:af:91:94:
                    5b:0b:82:6c:c3:0a:de:e2:29:b2:84:b7:45:db:8f:
                    60:f7:17:60:66:b6:36:ae:a5:e9:92:67:c2:0c:7d:
                    b7:9f:33:8d:96:ec:bf:87:48:e7:7c:4b:0c:69:e4:
                    9b:7d:5a:52:38:7f:fb:19:90:ac:03:a5:3b:db:92:
                    b7:23:72:b0:0c:da:08:39:07:10:7f:03:40:5d:f9:
                    cc:d4:ae:e5:3e:80:02:87:32:82:f6:29:4e:9a:47:
                    b8:5a:a9:64:59:d1:7d:f9:ce:7a:ba:81:b5:77:5e:
                    d8:ab:9a:f4:7a:f1:9a:ad:0d:7c:f3:e6:18:ef:5b:
                    50:d5:b2:d4:f1:d0:6c:56:86:cc:d0:6a:ab:10:8d:
                    d0:7e:3f:9d:87:2d:62:15:4f:56:63:d1:34:ee:51:
                    82:a3:35:8f:fc:83:86:74:79:b0:84:52:ea:a5:ad:
                    73:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DE:89:E8:41:1C:FD:B8:2C:FC:C8:C2:A9:EE:7E:BE:44:96:8A:65
            X509v3 Authority Key Identifier:
                keyid:95:88:39:0C:F3:21:DC:43:CE:3A:C0:BC:8F:B0:95:54:D5:FC:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ee:e3:68:17:54:1f:78:d2:9b:60:b1:9c:8a:6f:b7:4e:9a:
         02:7c:0c:da:bc:cd:48:81:7d:6a:19:f1:3b:de:91:eb:f1:56:
         3d:90:8c:85:c9:06:9d:64:9c:33:ef:d9:35:9f:b8:fe:c6:76:
         a0:1d:88:1b:b0:ae:3d:72:d1:18:77:d3:8e:c2:2d:ed:5f:e5:
         b6:6d:3c:34:f3:b9:7a:2c:c1:01:f6:b5:90:09:0c:e1:66:a8:
         4f:f5:89:68:30:a9:13:cd:f5:7c:b7:7e:01:bf:c4:31:c6:9b:
         8f:7e:da:83:71:bd:f8:89:0c:0f:ea:06:45:b3:20:7d:58:63:
         de:cf:03:87:95:f4:80:a2:eb:56:bc:41:2f:b5:5d:d7:6c:1e:
         df:ce:9a:e1:61:0f:75:f2:b2:b0:47:fe:96:52:2a:7d:23:68:
         25:89:c7:ea:2c:36:ff:d0:0c:4f:b9:83:52:55:fe:fe:9c:ce:
         d4:52:45:f5:05:9e:cc:a2:8f:b7:78:e7:d5:ed:6e:40:67:84:
         f1:e9:1f:09:5d:5f:bc:f8:68:b2:50:44:42:e4:46:50:df:07:
         4e:be:3c:2b:b5:de:30:88:c5:02:c8:3d:fa:b8:a1:fb:8b:01:
         45:b5:63:62:93:4b:c4:6a:4c:d4:d9:26:72:2d:f3:3b:9f:56:
         e0:cb:46:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:14:06 2024 by rpki-client on console-ams.rpki-client.org