Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
File:                     LHwKdxsw0nQoUIDdxC42eYOW8iw.mft (raw, json)
Hash identifier:          SE8UpDQl664rSIRhrbn64oEIJLGgDHzxDSv9llR6q3M=
Subject key identifier:   21:59:A9:3F:71:8D:B4:B6:09:DE:EA:98:4D:0F:BB:13:9A:20:E5:BB
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Certificate issuer:       /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial:       018F4C476783FF806016ADC97E620A207223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
Manifest number:          0E7B
Signing time:             Mon 06 May 2024 05:01:38 +0000
Manifest this update:     Mon 06 May 2024 05:01:38 +0000
Manifest next update:     Tue 07 May 2024 05:01:38 +0000
Files and hashes:         1: LHwKdxsw0nQoUIDdxC42eYOW8iw.crl (hash: eiHbSg9nEcUSaWYWDaQuccd155/7gX2Ul1RTOs03AS4=)
                          2: jAQHkJVXme8TuGwWYIEe0kbxIvM.roa (hash: p1Sbv/yE7LawYxfYoh/N1ESHlGdePl3zsNucxGR7ZmE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:47:67:83:ff:80:60:16:ad:c9:7e:62:0a:20:72:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
        Validity
            Not Before: May  6 05:01:38 2024 GMT
            Not After : May  7 05:01:38 2024 GMT
        Subject: CN=2159a93f718db4b609deea984d0fbb139a20e5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:05:df:38:cf:7a:9c:9c:4a:80:2d:47:7b:
                    c9:b7:4d:e3:54:37:4b:d8:76:94:5e:58:ed:56:46:
                    1c:b9:78:04:e9:58:9f:4d:f1:41:7e:db:2b:ab:b6:
                    19:ac:38:a0:f1:22:d6:08:9d:f5:a2:38:e6:45:56:
                    63:ac:d7:ae:98:12:0c:9a:fe:a7:34:b7:8b:a9:22:
                    db:c5:c8:2e:04:92:7a:62:30:7f:61:e0:67:c7:f9:
                    f5:dc:83:d2:29:03:b8:dd:fb:62:fa:f5:ca:c8:72:
                    d1:b6:9b:f3:f8:d9:76:bb:20:83:3e:5d:49:4c:e9:
                    a8:f0:27:f9:b5:61:d4:a1:95:63:2b:ad:3a:51:cc:
                    56:09:4e:04:d3:3c:20:4f:c8:3d:71:10:f1:60:a7:
                    fb:1a:8c:6d:15:84:3a:3d:e4:ee:01:29:14:c2:5c:
                    93:2d:3a:0f:0a:73:7d:63:6d:76:ef:ad:6b:7a:e5:
                    79:cd:ff:f6:6f:6f:e2:de:75:01:3d:88:1b:d7:fe:
                    36:c7:82:6a:30:f6:45:f3:b4:12:26:42:36:a8:da:
                    35:e7:e2:a2:95:cf:91:82:56:c0:b0:86:8d:d5:fe:
                    34:bb:54:63:3f:77:e8:a6:7f:97:c1:0b:40:fb:87:
                    1a:a8:01:03:c0:f8:ed:20:db:7d:87:1c:ef:31:f9:
                    f4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:59:A9:3F:71:8D:B4:B6:09:DE:EA:98:4D:0F:BB:13:9A:20:E5:BB
            X509v3 Authority Key Identifier:
                keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c7:8a:35:b9:a0:b0:c4:aa:5a:52:c3:15:06:9b:3c:3e:15:
         e2:6c:7b:c5:83:72:38:a1:70:9f:48:7d:a8:c0:da:ee:1c:72:
         50:e1:4c:52:3e:70:6d:7c:69:eb:42:1d:cf:3b:a6:e3:bd:22:
         23:1c:f8:10:c3:01:db:ec:4a:b8:d3:a0:72:53:5f:f5:ca:62:
         1b:f9:0d:e6:40:20:ac:08:1a:b6:60:9f:37:04:e2:e2:07:b4:
         d2:61:67:d9:64:d8:2b:e1:49:2a:90:e7:21:b2:6d:9e:ee:3c:
         8f:9d:ca:9a:5a:cb:67:c0:a7:8a:6f:de:42:28:fb:54:f3:d1:
         1c:f3:16:b0:13:8b:3a:5c:ed:99:e2:d8:96:5b:e5:24:48:29:
         fc:86:ec:9a:b8:21:90:f2:0a:cf:7d:40:3b:16:2d:10:d5:de:
         0a:01:e4:ba:b6:9b:1e:a7:2b:d1:eb:00:01:71:7f:db:2e:c7:
         67:46:a9:69:a4:74:37:ed:ec:6d:94:64:4b:a2:b4:4a:5e:a0:
         b0:3c:32:4f:87:87:0c:87:86:ce:fd:35:c6:00:b2:72:f3:05:
         46:f1:b0:c7:dd:41:3b:39:99:27:13:c1:2b:af:70:3d:68:75:
         01:d7:f0:a5:18:19:20:45:06:3b:d9:65:da:92:18:3c:13:00:
         4a:02:ff:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:51:55 2024 by rpki-client on console-ams.rpki-client.org