Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
File:                     lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft (raw, json)
Hash identifier:          nxuYtcPjaB8exypg4TKIwVUcEZRu51fcZVW6oJXPsP0=
Subject key identifier:   A1:4A:D6:5B:01:8A:CF:81:9A:EB:C9:61:97:12:34:67:59:B8:98:08
Authority key identifier: 94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
Certificate issuer:       /CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Certificate serial:       018F885B2A007848F308C59376AB29C869C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
Manifest number:          0F1A
Signing time:             Fri 17 May 2024 21:00:26 +0000
Manifest this update:     Fri 17 May 2024 21:00:26 +0000
Manifest next update:     Sat 18 May 2024 21:00:26 +0000
Files and hashes:         1: lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl (hash: BNa8t+9svjEGEENZGzol5DEkDnnYzXUze2MqqLh+fk8=)
                          2: y4SyQdqFhJ812FqUrPrdPiTBHmM.roa (hash: Rbse77pAajQLy6aJy88P4ZVEHj+MSe1wS+Rf3/6pD4s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:2a:00:78:48:f3:08:c5:93:76:ab:29:c8:69:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
        Validity
            Not Before: May 17 21:00:26 2024 GMT
            Not After : May 18 21:00:26 2024 GMT
        Subject: CN=a14ad65b018acf819aebc9619712346759b89808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cf:10:70:45:6e:f7:c6:75:08:0e:2c:70:cf:
                    59:4d:f3:04:ec:18:5a:32:64:7a:c1:4a:81:ec:70:
                    db:1c:b4:4f:6a:83:de:ea:2b:a5:fb:1f:e9:48:32:
                    a9:4e:62:e4:fe:59:1c:72:0f:97:e7:10:90:50:30:
                    80:6a:f0:f2:78:19:b9:3f:ef:f6:6e:70:10:ce:ba:
                    57:00:f1:e3:4c:cb:fd:9a:17:af:38:39:91:27:0a:
                    a2:85:2a:c8:5a:cc:1b:5d:6b:12:3a:a9:c0:e8:16:
                    dd:ab:7a:7c:c6:de:9f:77:c7:9e:99:c0:32:c6:3f:
                    e9:db:d9:93:bc:e4:3f:48:51:cc:bf:68:70:4b:c5:
                    6c:df:58:e0:33:9a:9d:cb:13:bd:ee:ed:c7:f9:0f:
                    91:0d:77:0f:ee:b3:9e:9b:3d:1d:96:f0:42:38:85:
                    52:21:e5:3c:16:e0:49:04:05:d9:6a:03:4f:b0:91:
                    9d:5f:45:9c:2e:03:35:50:30:28:e1:7c:3c:6f:fc:
                    50:36:a2:43:1c:3c:ad:f1:95:4f:83:ba:b5:37:ca:
                    fc:4e:1d:4f:eb:61:7b:3e:09:7e:69:bd:d8:6f:31:
                    3f:56:d9:5b:90:07:1d:bc:c7:d8:d6:a0:fc:f7:c1:
                    dc:11:bd:90:90:17:5f:85:e3:f2:eb:b2:52:6c:fd:
                    2b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4A:D6:5B:01:8A:CF:81:9A:EB:C9:61:97:12:34:67:59:B8:98:08
            X509v3 Authority Key Identifier:
                keyid:94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:10:38:59:95:37:bb:c3:e5:53:5c:49:68:45:16:32:ef:a1:
         bd:ce:41:43:7e:5d:17:7d:4f:0d:c5:b6:5d:5e:06:a4:ae:6e:
         6f:9a:c1:bc:9f:7c:e1:03:3b:32:94:fb:84:6f:cc:99:79:d3:
         3b:43:80:52:26:16:7c:be:82:60:ba:37:3b:9b:23:81:90:1f:
         79:7f:ec:d4:02:87:6a:2f:47:19:e8:10:ee:ea:6a:33:10:e7:
         c0:2d:14:c7:49:f4:95:67:6f:06:e8:2f:c8:e6:4f:4a:86:1c:
         ba:12:9a:45:fe:48:71:e1:80:8a:90:1d:3c:86:a7:c4:29:dd:
         ea:9e:a7:26:c9:6b:8c:92:08:13:c2:79:eb:b7:f1:20:23:24:
         12:79:4f:da:3a:c5:f6:c7:72:b7:44:a4:4b:cf:bc:3e:e9:27:
         11:08:46:c8:f6:60:0f:d5:87:99:53:0a:de:8b:8d:bc:40:81:
         78:23:e5:c3:f5:4c:9b:41:8d:9f:e5:7c:c6:66:9e:f8:33:46:
         db:53:a6:f6:91:1a:da:8a:13:be:75:6b:58:7b:34:3b:4b:01:
         2e:ff:e1:eb:3a:dc:aa:7e:f8:69:63:2f:48:15:08:99:96:fd:
         6e:b3:ed:33:00:55:0a:c7:68:d9:ef:8b:0b:36:d7:90:7a:31:
         cb:8d:2b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:58:28 2024 by rpki-client on console-fra.rpki-client.org