Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
File:                     lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json)
Hash identifier:          5dWp0O0oHyoYXP6bL5jOHOPsK6RB2yqnL+tpDcW/hHI=
Subject key identifier:   34:E2:81:1B:82:DA:3E:CE:BC:5D:56:7C:0D:80:0C:41:ED:C3:5C:FC
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Certificate issuer:       /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial:       018F8DEFB564F9B9E6B320E777AED341436A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
Manifest number:          0DA5
Signing time:             Sat 18 May 2024 23:00:47 +0000
Manifest this update:     Sat 18 May 2024 23:00:47 +0000
Manifest next update:     Sun 19 May 2024 23:00:47 +0000
Files and hashes:         1: O6la6v66tJUK1nvrXYuEyNEX52w.roa (hash: 5sIqpnuSrG+CKokkaCSwpP4vl/V7xzFw4GLj2V2lGsI=)
                          2: RMChs2fNq_joitEhMfCp1crAR0g.roa (hash: JGMIUji+jtOkbrxSwFnZYVpcTRA+YM3YLGtTOasQVZA=)
                          3: ekXAJs9ln0KogD5rZelScpzpKw0.roa (hash: z7wdq5m/icdZPGNgM/tFXqTButN0DAyz2YqjxEBbDrc=)
                          4: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: yUgNdRSsIkXBm5eeIaLhCgsW3IWbwrzu1oJDj1d8oM0=)
                          5: uaEB4-lTmaTjqs5M5wB5QXYtgSI.roa (hash: MIkS+VNSrNsz8TgRMmQNoTDvCDL+nRHCyaH79hCqt7U=)
                          6: uhPs9NEjSkjkXZoHb-HaROAUp-k.roa (hash: TILq5aCCFJsvoUpVY5d5aNjGmJP66bBGJo8rmnvNZ2s=)
                          7: zkzr2l1aP0Uzlf7G7ROTnD5S774.roa (hash: CYTLmjqCLjv28b2fBHu9e2JY/s6S3Lw+3COyJhVmoFQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:ef:b5:64:f9:b9:e6:b3:20:e7:77:ae:d3:41:43:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
        Validity
            Not Before: May 18 23:00:47 2024 GMT
            Not After : May 19 23:00:47 2024 GMT
        Subject: CN=34e2811b82da3ecebc5d567c0d800c41edc35cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e5:0d:41:54:8e:39:7c:fb:36:72:ee:95:f9:
                    43:91:2b:92:c7:62:6a:dc:ca:43:66:b9:81:89:7f:
                    7e:18:90:b7:f8:90:62:52:78:77:b6:92:d3:4a:1e:
                    86:46:f2:8d:49:47:ae:cd:45:73:b0:a8:ae:32:d1:
                    a2:fb:3c:05:09:f7:02:ad:70:eb:62:93:ab:12:33:
                    04:13:c0:94:39:44:4f:e9:12:dc:06:40:fc:23:19:
                    73:7c:06:a2:b1:f5:01:77:eb:9b:b9:55:6f:41:27:
                    24:cc:42:77:d4:30:b4:e8:7e:3d:39:de:d4:3b:7b:
                    d0:02:2a:e6:45:1e:4e:5d:0b:30:b7:2e:4b:31:34:
                    f3:66:20:6d:5f:4d:6a:77:a0:c7:be:4a:4b:61:62:
                    af:c7:ae:37:0e:9b:ea:61:3f:bd:3e:bb:24:7c:c2:
                    78:53:36:9c:a2:93:e9:5c:d6:3f:bf:47:fc:e1:3e:
                    80:93:16:54:a7:c6:b8:a5:70:6c:9d:64:11:77:42:
                    cc:c4:ea:53:16:fd:7c:34:6e:bd:73:9f:53:ec:24:
                    d3:a4:fc:6b:89:23:1f:e3:11:ef:c6:1a:06:d6:9c:
                    af:79:26:cd:26:d1:62:6b:7b:49:3e:5b:ea:73:24:
                    a1:0e:26:ba:e2:2e:77:50:4b:db:12:a9:ca:85:85:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E2:81:1B:82:DA:3E:CE:BC:5D:56:7C:0D:80:0C:41:ED:C3:5C:FC
            X509v3 Authority Key Identifier:
                keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b1:d3:f5:7a:ab:31:1e:8f:cc:b8:75:0d:5b:db:0c:4f:1f:
         a2:27:bf:e8:2a:6c:96:86:ae:08:13:50:73:3f:ca:24:7a:b9:
         e1:da:8c:8e:c7:24:51:af:ef:55:23:6b:b7:49:26:7d:1f:03:
         b7:62:9b:35:0f:29:f2:07:4a:5e:83:0e:45:53:c3:59:3f:36:
         f0:c5:12:68:74:ef:9c:b8:96:d3:b7:4c:03:22:04:73:2d:9f:
         36:a6:26:b4:e9:5e:e1:8b:7e:8f:d8:5b:e7:79:d3:5f:78:49:
         89:25:f9:9c:6c:6c:5d:aa:fe:c4:3b:aa:83:48:05:d5:a9:6d:
         5e:e1:8c:26:e8:a5:85:43:51:ee:4f:e9:19:68:c3:f4:e5:20:
         92:53:2d:50:fb:82:ab:2c:59:aa:02:18:61:b8:ab:6c:b3:36:
         c0:00:43:44:72:a8:67:ed:bd:88:e8:f9:0b:96:36:45:0a:81:
         ca:73:76:f0:fe:0a:23:b6:b1:ef:2f:0e:b0:2e:b6:50:68:a0:
         b9:bf:9a:ef:83:ae:28:37:a8:7d:5a:c7:00:12:a1:07:c8:3a:
         56:f1:c6:b1:a9:52:50:32:c9:5f:ea:c0:15:c8:9d:ec:3d:99:
         6e:57:ee:3c:c4:db:4d:8a:49:ea:f6:e1:34:80:82:fa:65:24:
         44:d2:f2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:45:36 2024 by rpki-client on console-ams.rpki-client.org