Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
File:                     L74q18xpqV46gHH7M9-a96N5kos.mft (raw, json)
Hash identifier:          rIZU1y0CxwiSqbdwkVnTjEiwOfy6tnyn7RZS1DT7wW0=
Subject key identifier:   53:EF:38:85:3A:02:3C:0D:74:5B:AE:4C:38:BF:A6:47:76:B6:4B:9A
Authority key identifier: 2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B
Certificate issuer:       /CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b
Certificate serial:       018F98056B69DB95BB4CDD0E401CCA6B6445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
Manifest number:          1122
Signing time:             Mon 20 May 2024 22:00:42 +0000
Manifest this update:     Mon 20 May 2024 22:00:42 +0000
Manifest next update:     Tue 21 May 2024 22:00:42 +0000
Files and hashes:         1: L74q18xpqV46gHH7M9-a96N5kos.crl (hash: JBSPIXotP2noA2QW3W0dSEBLNnpsnMN6onjNxrarrJI=)
                          2: ci6rnIoVhIYkMukcetBXm4IEy7U.roa (hash: g7G5kgquM18dj9x/YcbFUYu9EyjPw6q63aMyW64HR2M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:05:6b:69:db:95:bb:4c:dd:0e:40:1c:ca:6b:64:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b
        Validity
            Not Before: May 20 22:00:42 2024 GMT
            Not After : May 21 22:00:42 2024 GMT
        Subject: CN=53ef38853a023c0d745bae4c38bfa64776b64b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:9b:b1:3b:d9:86:0e:52:93:e0:4d:e8:60:38:
                    09:5b:d8:4d:c8:0b:f6:cc:0b:df:3e:14:15:5b:eb:
                    29:6b:12:05:f9:1a:c0:a9:2c:72:da:ce:02:3e:de:
                    20:d1:d4:b3:6c:46:53:e0:44:6c:48:c7:b6:9b:d5:
                    94:ff:16:da:ab:2b:58:0e:ba:f4:76:9f:48:59:27:
                    62:84:ba:c2:81:46:f0:71:53:91:4a:99:50:b5:ef:
                    fe:b4:bc:95:7a:32:00:30:5c:d4:ca:bb:b0:40:39:
                    fa:d8:ad:d1:ff:74:a5:c1:ea:08:d4:9e:63:34:f1:
                    d1:76:f4:02:02:dd:e0:23:45:48:ab:b2:76:6b:61:
                    19:0d:cf:79:06:1d:3a:60:cd:0a:11:68:19:67:49:
                    3d:47:cf:e5:d9:81:8a:c5:01:e4:c3:a0:04:e5:56:
                    62:16:e7:17:b6:a8:0c:39:02:8a:fb:b6:b7:68:1a:
                    bf:6f:0f:55:1f:bd:f6:35:ab:04:48:98:f7:26:24:
                    d1:ae:6a:13:82:7b:3a:41:8d:da:ec:46:cc:cc:30:
                    7c:c7:8e:3f:05:da:fd:ae:44:f4:8f:41:fd:75:15:
                    cc:22:66:14:ac:e5:37:ad:9b:17:6e:c8:bc:fe:01:
                    9b:e0:68:da:b3:04:60:63:62:83:e6:f7:46:a0:de:
                    24:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EF:38:85:3A:02:3C:0D:74:5B:AE:4C:38:BF:A6:47:76:B6:4B:9A
            X509v3 Authority Key Identifier:
                keyid:2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:3d:54:d1:aa:af:2d:c6:70:1a:7a:91:74:87:64:05:26:24:
         79:15:9c:d2:b2:86:3f:31:33:77:92:53:2c:4d:b9:04:44:bc:
         db:ca:72:3b:da:dc:c8:35:ce:2c:eb:8b:34:e5:50:20:90:ef:
         b0:0b:ae:82:61:a0:ab:74:f2:e8:ef:73:44:84:97:5c:a0:0c:
         bc:63:34:97:d0:06:36:a9:dd:38:37:45:4a:32:e5:00:e3:b2:
         56:0b:66:88:91:8b:11:73:2d:d6:01:bb:8e:ae:05:0f:67:af:
         ec:79:ec:62:54:3d:10:b4:18:e8:b7:8d:42:c5:3a:f0:c8:c3:
         13:57:a2:86:b0:32:8f:d6:2a:bb:c5:fc:eb:21:ae:c1:a9:19:
         43:75:a6:30:c2:7d:10:28:be:36:32:a6:85:3a:6e:a8:45:1d:
         ef:3f:0d:f5:f6:c3:ae:d8:af:84:e8:3e:cf:b6:cd:08:48:d4:
         41:d3:74:35:77:47:af:9c:48:02:d6:17:6d:da:10:06:37:37:
         40:a7:0f:e9:22:26:d4:89:43:e5:7f:84:c0:6e:bf:05:da:ff:
         3e:ea:22:55:a2:b5:5f:bb:03:78:ed:2a:58:0c:8c:85:be:83:
         d3:2a:70:3a:5e:a6:94:43:7a:5d:d1:fc:4e:7c:7b:aa:29:87:
         25:7a:c4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:18:14 2024 by rpki-client on console-fra.rpki-client.org