Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File:                     LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier:          qw4ZvTisaUzwAOgrc7xb9tjJa88/exT4gM3O5jGJrto=
Subject key identifier:   C2:A8:F4:E9:56:80:91:45:B6:70:6B:01:4F:2A:BD:B9:DC:A3:7A:F5
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer:       /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial:       018F8749E009AD3FA293ABC7675FA614CD9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number:          8D
Signing time:             Fri 17 May 2024 16:01:56 +0000
Manifest this update:     Fri 17 May 2024 16:01:56 +0000
Manifest next update:     Sat 18 May 2024 16:01:56 +0000
Files and hashes:         1: 0fQpSN9PqH0CqJ2uc74QehUovPE.roa (hash: 0IWghMg2aKV0qKIJw5aMNnMPSK8nzH+6mYF3EI7gJR0=)
                          2: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: IkLulcU/0G5U1xUjtQdZxUGKnFFJtvuC8spHrVHVqWI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:e0:09:ad:3f:a2:93:ab:c7:67:5f:a6:14:cd:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
        Validity
            Not Before: May 17 16:01:56 2024 GMT
            Not After : May 18 16:01:56 2024 GMT
        Subject: CN=c2a8f4e956809145b6706b014f2abdb9dca37af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:de:e1:c1:e2:59:93:32:ad:cf:24:48:fd:
                    ee:d5:90:62:d8:a9:33:e3:22:38:49:a2:d9:71:e5:
                    10:32:a9:45:99:92:af:1f:7d:90:99:77:8e:7f:36:
                    42:bf:f0:95:7f:61:a5:91:ea:da:f3:1f:6e:34:90:
                    a7:3b:0c:82:2f:5d:80:70:20:3b:e1:46:fa:13:55:
                    28:1e:41:17:03:ca:17:94:cb:f6:05:40:ae:b2:1a:
                    f5:b3:fe:57:4c:45:b6:15:9d:e8:4a:fe:52:a7:18:
                    c0:e8:43:d6:45:bf:89:33:e8:3a:74:0a:e3:d8:e1:
                    63:5b:cc:93:a4:ea:45:bf:27:9d:39:ee:dd:5b:91:
                    1b:8a:68:45:ed:63:33:ad:a6:20:5e:da:66:41:ff:
                    32:81:c6:8d:33:b6:ad:61:69:42:37:ae:07:19:03:
                    cd:68:90:6a:73:89:9b:dc:e3:00:58:e5:b2:c4:85:
                    eb:06:6f:45:34:bb:23:be:e3:93:28:b3:50:69:45:
                    a8:d0:87:09:33:0f:76:0d:9d:d7:85:a0:36:ab:f5:
                    94:95:3d:da:56:75:ab:c6:0d:d4:5b:e6:5c:e8:92:
                    c6:61:18:46:f9:bc:03:37:79:8a:8f:31:72:5e:33:
                    cd:6e:41:74:b7:e8:99:b3:28:52:8d:ed:1b:c2:a3:
                    10:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A8:F4:E9:56:80:91:45:B6:70:6B:01:4F:2A:BD:B9:DC:A3:7A:F5
            X509v3 Authority Key Identifier:
                keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6d:ce:7e:2b:44:1c:16:3d:10:7d:d6:c4:8c:68:0f:f2:a3:
         4f:cf:e6:38:b5:ab:d9:fd:d3:bf:3b:53:bc:7a:40:2b:6a:6c:
         2e:bf:f3:bc:eb:96:22:3c:90:17:6b:f3:ee:1d:0a:1a:09:89:
         83:5b:2a:8f:d5:1c:16:92:10:55:0f:d5:6c:20:d2:d9:3d:80:
         51:db:c4:07:97:49:9d:c2:08:0d:64:11:da:f8:bd:16:97:3d:
         cd:1a:d3:82:92:93:e2:34:35:8f:ff:87:a0:46:12:79:5c:96:
         bd:ce:aa:d3:63:45:5b:49:58:71:71:15:24:f5:f9:1f:bc:e6:
         1e:73:4d:05:c5:22:67:e5:ad:f8:2d:39:b4:ce:a9:91:46:38:
         fc:b7:52:9f:ed:f1:b2:bc:b6:6f:c9:ab:3e:d8:b1:15:8b:8b:
         a7:bc:af:35:5a:f4:48:ea:46:7e:1f:e5:a8:96:57:d1:0d:82:
         a3:fe:fa:6c:08:82:3c:4e:64:16:06:e2:60:41:89:b1:06:aa:
         a3:84:6e:6f:6b:5a:84:2b:d1:a9:5e:b2:a7:04:f3:c0:d9:8a:
         16:58:15:79:08:d2:39:0e:db:78:a3:50:50:3e:f3:90:24:9e:
         f6:54:76:8e:ed:f0:ee:b1:ad:f0:cb:14:9f:f6:55:bc:51:bc:
         67:48:4a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:09:45 2024 by rpki-client on console-ams.rpki-client.org