Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
File:                     lNmOj-xoB3WhVyZuDGt4sUGjT14.mft (raw, json)
Hash identifier:          wO8fZVqNvemitTgbgBHMeUjFJL+uJTCNWsN+Np3PrZM=
Subject key identifier:   A0:4E:2B:9C:D3:02:F2:65:46:5C:10:91:65:59:EF:07:D6:1B:4D:A9
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Certificate issuer:       /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial:       018F874868806576CF6D6D9C31BDED74A291
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
Manifest number:          0A4F
Signing time:             Fri 17 May 2024 16:00:20 +0000
Manifest this update:     Fri 17 May 2024 16:00:20 +0000
Manifest next update:     Sat 18 May 2024 16:00:20 +0000
Files and hashes:         1: MPqLlzPZkckZ8HBQ-wifsRcIKS0.roa (hash: k6UKE+Cud0XJBNjjFbnmCzWO+EXLzG38OEmvfDQYhYU=)
                          2: T5Y_PDzH82fpiNieppcA5Z8n2pw.roa (hash: h8LTNfJVXdjrYGM9nQVlaNa9iM3CZ1A6pq0/xb1cw5s=)
                          3: _1AX2V1oMHRqMLMhDlzI513k2LE.roa (hash: KTDrRJ69792t4fjiFLhTyRdhxG8hVFxDGSz9EvYMm54=)
                          4: hc6xUAbezua8TTaQnHcCpYQ8tmM.roa (hash: jM0xzuo9lhkc+I9Xbv4OzTyiQdwGOsRi1hEf7S07tZI=)
                          5: lNmOj-xoB3WhVyZuDGt4sUGjT14.crl (hash: wFJWOENPWbjymHbsR+aQMzpUQsNgLcuRTbHyRyDT9+I=)
                          6: v4z5Ez-NN-DEvbZaUDhQtfh6mI0.roa (hash: iYmzuoNhvitPqQQb3reqF3E0UQXPjfLhqoT+3aAaJWI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:68:80:65:76:cf:6d:6d:9c:31:bd:ed:74:a2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
        Validity
            Not Before: May 17 16:00:20 2024 GMT
            Not After : May 18 16:00:20 2024 GMT
        Subject: CN=a04e2b9cd302f265465c10916559ef07d61b4da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5c:97:01:6a:2a:37:36:67:57:8b:e5:7c:89:
                    66:d1:ca:65:e9:c0:14:83:b7:1e:ec:91:15:c7:bd:
                    92:f3:fc:df:f8:82:1b:04:63:18:97:07:bd:8e:26:
                    24:60:51:fe:93:7a:7f:7b:e9:bf:08:c6:78:28:1d:
                    43:b9:b5:cf:4a:3c:78:6b:f6:68:5e:f9:24:da:ff:
                    12:fb:b9:e5:32:a7:83:c9:3b:19:e2:21:6e:00:40:
                    df:d8:32:7f:7e:e0:43:88:59:92:bb:b4:67:59:89:
                    5c:43:8f:3c:7a:59:d3:6b:45:ec:7a:e8:0a:6e:7e:
                    19:c4:4a:8e:7c:ab:eb:16:94:f1:65:1e:d3:9f:b5:
                    13:64:9f:de:ac:9d:02:7b:5d:6c:0f:62:6d:ce:29:
                    0b:84:a4:ad:75:4a:fb:09:ef:ca:4a:bf:c7:0b:b4:
                    6a:4f:68:65:89:17:ad:67:1d:ab:d4:d4:7b:2f:e7:
                    12:1c:26:3c:9c:29:c2:41:aa:68:bb:60:7e:bb:71:
                    d4:ab:c3:69:08:60:cd:af:1a:23:7c:95:f5:4d:4a:
                    37:df:7e:1f:2b:19:f8:26:3d:c6:a7:e7:cf:43:4a:
                    2f:6f:ce:2e:e7:cf:2b:d6:65:9e:b2:88:56:65:2c:
                    8b:88:38:70:e6:66:8c:20:98:12:ae:62:15:c1:9e:
                    ac:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4E:2B:9C:D3:02:F2:65:46:5C:10:91:65:59:EF:07:D6:1B:4D:A9
            X509v3 Authority Key Identifier:
                keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:18:48:0f:2d:d7:ac:a9:9f:d2:2c:51:fd:65:22:3d:30:f6:
         f7:af:94:7e:2e:99:72:08:5d:a1:df:51:b8:4d:c4:da:cd:7f:
         f7:0a:4e:76:2d:d6:0d:fc:e7:0b:25:cf:30:4c:63:b2:05:5a:
         df:91:ec:43:4f:ba:5d:af:8f:c5:fa:dc:5e:02:2f:de:2d:dd:
         08:45:70:b2:a0:c3:67:b2:90:28:22:ba:08:ed:76:c3:11:2c:
         97:48:82:6f:82:2d:57:5c:7d:c0:10:4a:fa:3e:be:79:82:86:
         07:fc:33:23:57:3c:77:7c:93:f3:b1:d8:52:0b:eb:af:dc:3f:
         7a:2c:9c:bf:40:2d:79:8c:47:fb:bc:a5:62:cc:1e:4d:31:6e:
         6b:1b:88:ae:05:d3:8f:b8:cf:ca:5c:4a:7f:bf:4b:2c:33:03:
         2b:d1:42:c6:0b:57:62:c7:34:94:ab:59:37:6e:2e:01:ff:14:
         a8:cc:f2:d4:ca:91:98:5b:bf:f9:12:13:c1:ee:fc:d6:ee:82:
         ff:18:45:24:a5:8d:97:a8:1f:1e:ad:12:4d:e2:7b:92:23:6e:
         d2:be:0c:56:45:72:7e:97:ea:e5:97:ed:19:a6:62:62:e2:7e:
         2a:d8:77:92:9b:a3:75:b2:97:3c:e6:81:93:db:83:73:b0:d3:
         4f:e5:fa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:02:06 2024 by rpki-client on console-ams.rpki-client.org