Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
File:                     LDsK5bf3gRIscJomUK35cpGH4eE.mft (raw, json)
Hash identifier:          BtmS4a5EGTphv4flJa0b1gRVJxVJAK59gyk8Xq4UL5A=
Subject key identifier:   ED:97:FB:47:EF:EF:5F:CC:84:1F:5E:8B:B2:60:5D:2F:47:A3:50:13
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Certificate issuer:       /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial:       018F85FF4EB270F52A259A2DBB1A37D4B651
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 10:00:52 +0000
Manifest this update:     Fri 17 May 2024 10:00:52 +0000
Manifest next update:     Sat 18 May 2024 10:00:52 +0000
Files and hashes:         1: 0B653Bwp-T7zyVMlFO97lNzyR8U.roa (hash: Qic65GI8SChWv9eQHoHZmDGA7LbQqFyyQqLRUTkWFbk=)
                          2: LDsK5bf3gRIscJomUK35cpGH4eE.crl (hash: hvx1XWvCAhx86oCQNl9tekPLmgN65UzFoaF63pBuPHc=)
                          3: QqhOJbfGenuz499uz-NQad_VE3w.roa (hash: ZCb6gvkEKHIIKinysK85i6bSBPMTiYy1mmkoVuDadoE=)
                          4: R_Lza2jrfSNLrULh7JcQaui8SEw.roa (hash: TNpTRKYXupuzHxQSBg2g/5aMkBjvKGfrKIMQqKH5Jfw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:ff:4e:b2:70:f5:2a:25:9a:2d:bb:1a:37:d4:b6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
        Validity
            Not Before: May 17 10:00:52 2024 GMT
            Not After : May 18 10:00:52 2024 GMT
        Subject: CN=ed97fb47efef5fcc841f5e8bb2605d2f47a35013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:84:38:fd:b5:0a:43:77:09:55:05:f4:16:
                    6a:8a:97:93:48:b0:24:50:86:13:38:f0:b4:da:07:
                    13:19:7f:9d:09:61:22:3b:c9:7a:fb:be:bc:d7:31:
                    dd:a0:29:26:6a:b4:9b:8b:99:a0:dd:42:a9:f1:47:
                    f2:f9:8a:4e:10:2a:2f:a7:28:0a:52:7e:f6:23:ce:
                    2c:cd:57:cb:7a:fb:e7:5d:c5:3f:48:db:a2:d2:00:
                    da:89:d6:b6:9c:ac:0a:e8:c0:2a:16:67:05:e3:90:
                    4f:03:ff:6d:49:18:84:01:16:f0:f2:ad:a1:5c:63:
                    05:57:d3:5f:67:96:e4:c2:c3:2d:f3:74:12:72:67:
                    74:46:ab:57:53:d7:b8:93:8e:a7:50:04:ab:3d:0f:
                    49:5e:57:76:5c:33:b8:21:30:b7:4e:16:cc:10:47:
                    e2:e4:25:94:b8:d7:f9:70:e2:29:05:b3:9a:0a:ae:
                    0d:f5:3a:bb:7d:2d:b3:69:2e:ad:6f:cb:84:ae:1e:
                    af:f9:ae:e4:cf:e6:65:85:f0:e1:ad:bc:6e:89:11:
                    fa:be:a9:0a:3c:8f:3d:0e:c3:43:ac:da:c8:f0:8a:
                    29:12:6d:81:fa:22:5e:40:da:2e:e3:4b:df:b8:e2:
                    04:92:d4:4c:24:3b:6e:91:58:0a:fc:e4:cf:33:09:
                    96:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:97:FB:47:EF:EF:5F:CC:84:1F:5E:8B:B2:60:5D:2F:47:A3:50:13
            X509v3 Authority Key Identifier:
                keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:ca:70:58:e8:d1:46:a0:4e:30:fc:91:09:99:98:ad:ca:68:
         e9:45:09:a6:8b:e7:64:f6:30:25:1e:97:74:93:37:14:bc:2c:
         d2:e3:2e:a9:ae:ac:31:4d:65:14:a9:49:66:b3:32:9a:ea:62:
         a7:1e:72:5c:39:7e:e5:f4:42:e0:ed:38:dc:16:6e:1a:2b:61:
         8b:c6:6c:2a:dc:a4:64:31:d3:e7:6c:bd:91:64:ab:67:b7:2c:
         d6:74:20:94:fc:f8:34:28:f2:ab:c4:01:1e:a7:7f:ea:26:5b:
         e7:0e:94:26:06:24:06:e9:27:43:b2:e1:18:4e:7f:75:77:ca:
         32:1c:cd:ff:5d:b0:6e:e9:85:31:42:5d:04:ff:a3:30:3b:14:
         ac:6d:c8:6e:6a:48:42:bb:f5:60:29:fc:3b:a9:fc:f4:fd:4a:
         8f:05:22:b1:e1:e2:fc:f7:22:03:d1:da:34:e9:de:65:f0:50:
         69:eb:56:7c:54:4e:46:03:ae:a0:89:df:54:ec:60:74:b5:ae:
         ef:4e:c5:9b:ec:75:0d:71:a7:24:11:65:da:ad:9b:35:8f:2d:
         0a:4d:a9:9a:bc:34:4f:06:03:a7:6f:af:50:9b:8c:03:44:7e:
         00:b0:8f:a6:48:0f:66:5f:d1:a8:b6:32:ec:2b:12:ba:25:b9:
         22:28:a4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:20 2024 by rpki-client on console-fra.rpki-client.org