Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
File:                     LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft (raw, json)
Hash identifier:          BEjPx0isnx+EKkk6J9U0HnMKSeoBdZwFvZj7d9y6SFo=
Subject key identifier:   49:0E:DA:F8:0A:34:55:04:F9:31:80:2C:2D:B6:81:46:01:C3:FE:6E
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Certificate issuer:       /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial:       018F87114850F8CCA7DAE96F20B89716168E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
Manifest number:          1186
Signing time:             Fri 17 May 2024 15:00:07 +0000
Manifest this update:     Fri 17 May 2024 15:00:07 +0000
Manifest next update:     Sat 18 May 2024 15:00:07 +0000
Files and hashes:         1: LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl (hash: iELRRDCOIiWUmzyjhVTn1052Wc4asldvouvQYaXjvdU=)
                          2: dltGPO9ZywzmFsUihi-9EifrsPY.roa (hash: Oaq00yz8leEnbW0LcS93H3UgDbMfr1swjpjxWs8GPJs=)
                          3: iytgQJ6NmCxQFL_E-e1I3njrtKk.roa (hash: yxVM6O4jNRptwYKC+gEKlsy+1V60JKgzA7eRs575ev4=)
                          4: lHhZ1qeTOt4mXHfEmaTqrhpsn8U.roa (hash: fcoAu0xmLt5ajBOBdbSEgbxKkEGrExi0Xk8xJpgLscU=)
                          5: u2WA6Bbv2zapPtBxTo-R0pjXT1w.roa (hash: XT8rfqQsqZLZQJrDOREdj15fUbLq/aRThkIe08I5HIY=)
                          6: z_LVs8H1x9R_lGMiDQ1scKGK06U.roa (hash: 4bkF7dbnHtMIooLcUjxfBS37/0YUM1p5g8w+UckmzEM=)
                          7: zkHcpexq8pqh8LM73A0MXSw-egc.roa (hash: acV2GmkcPEXPdkcJHovlD/AGpXNbAcEQbm3oTNjfNDw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 15:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:11:48:50:f8:cc:a7:da:e9:6f:20:b8:97:16:16:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
        Validity
            Not Before: May 17 15:00:07 2024 GMT
            Not After : May 18 15:00:07 2024 GMT
        Subject: CN=490edaf80a345504f931802c2db6814601c3fe6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:f9:29:c4:d4:ec:3e:4b:0c:b5:1b:fa:07:
                    82:72:bc:05:ed:54:99:d2:2f:48:f5:ea:e1:59:b6:
                    8b:39:36:b1:36:fd:d5:ae:90:db:18:24:72:37:ed:
                    2d:48:7e:69:6b:1f:b2:92:d7:2c:18:42:95:f7:6e:
                    1b:f0:da:60:43:d5:d0:e1:29:ce:a3:c0:89:c8:33:
                    37:dc:df:29:42:42:f6:d3:57:4c:85:2a:2c:34:e4:
                    52:ea:74:03:f1:fe:11:aa:bd:9c:e5:55:c2:71:4f:
                    0c:84:fe:25:37:a1:3a:4e:04:d2:9e:91:17:05:15:
                    63:98:d7:24:cd:c7:63:86:92:8b:f6:95:d1:28:a5:
                    0d:ff:bf:2a:db:04:9e:af:51:c4:20:f8:2a:fe:5c:
                    45:f4:2f:b3:3c:83:62:9b:3f:25:21:0a:61:88:83:
                    86:a3:0a:5c:b2:c4:b5:45:1a:3b:bb:35:b5:14:af:
                    a5:6c:64:2e:0c:a8:1e:9f:53:dc:0a:af:0b:95:a0:
                    06:df:ef:21:d5:e0:d2:22:f3:a9:f1:8d:25:02:21:
                    3d:97:3f:1a:d4:e0:cc:98:98:8b:82:51:f1:8e:37:
                    45:c9:d8:4d:7b:1b:4c:11:05:28:ce:66:91:39:77:
                    a1:01:fc:a0:ef:27:38:57:fd:12:4b:68:5d:4d:ee:
                    62:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0E:DA:F8:0A:34:55:04:F9:31:80:2C:2D:B6:81:46:01:C3:FE:6E
            X509v3 Authority Key Identifier:
                keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e1:d4:53:c0:43:c3:3c:6c:20:e6:6e:35:b9:90:cb:d1:88:
         0c:41:3b:b9:d1:ce:8e:54:bc:4b:e9:78:49:e9:34:a0:72:0c:
         1e:eb:64:47:d6:7d:36:b8:a3:59:98:fb:60:47:76:c5:36:b9:
         96:2a:f4:06:c7:f8:36:30:5b:c7:25:d7:bf:3d:3f:87:fa:32:
         62:28:97:fc:34:bb:0d:4f:55:5a:b9:2d:7a:f4:b1:c8:62:51:
         b8:ac:ce:7a:12:53:cb:a5:c8:35:8f:13:14:09:f7:c8:91:63:
         32:9e:0a:9d:56:46:bb:c5:ff:65:62:27:94:7e:4b:f9:77:3b:
         c9:7b:a9:6a:10:a1:bf:72:6d:73:38:42:a2:20:f8:ea:c2:3c:
         f1:ee:fa:9b:a8:d3:a1:d6:1d:06:00:7a:ed:de:85:f7:7a:29:
         76:56:47:9c:9f:f6:21:26:33:54:c1:c9:65:d7:66:b1:41:8a:
         1f:8c:bb:9a:fd:b7:a8:ae:b8:fc:db:17:d2:ed:98:d3:6b:d3:
         9f:23:09:9c:3b:2f:e2:51:da:16:d1:67:9b:64:ea:00:f5:56:
         36:a8:de:5e:63:93:f4:bd:76:86:d3:33:7d:bc:31:0c:ad:3b:
         36:c9:62:e9:ec:c1:ea:18:ae:17:81:65:7c:e8:2c:e0:3f:08:
         b1:85:fb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:28 2024 by rpki-client on console-ams.rpki-client.org