Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
File:                     LXR59FZDorguENq_c-_vdwOx4tI.mft (raw, json)
Hash identifier:          cpWQKXUgJA7GhQQ0PLH3s+aPltMzQaNnrPYMfV+uCHs=
Subject key identifier:   A9:EE:5C:13:3B:46:4F:3C:4B:CF:67:87:45:A9:14:DB:48:01:CC:6D
Authority key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
Certificate issuer:       /CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Certificate serial:       018F8748D2F2FB31C4DE836E72C3068D5689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:00:47 +0000
Manifest this update:     Fri 17 May 2024 16:00:47 +0000
Manifest next update:     Sat 18 May 2024 16:00:47 +0000
Files and hashes:         1: 9xzZeJilaEjV38HOobGS0eXI0kQ.roa (hash: j5QDenV1v4SrSiC/7cdHOhhr0ExQrc8/kiPaNmYJvDc=)
                          2: LXR59FZDorguENq_c-_vdwOx4tI.crl (hash: /9zHII2AfKYicH52sTYeOLuYMUTTR4x6myxJ5q32l0k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:d2:f2:fb:31:c4:de:83:6e:72:c3:06:8d:56:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
        Validity
            Not Before: May 17 16:00:47 2024 GMT
            Not After : May 18 16:00:47 2024 GMT
        Subject: CN=a9ee5c133b464f3c4bcf678745a914db4801cc6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a9:d3:79:b4:a5:01:16:7d:34:f8:8d:fe:2b:
                    51:d4:3d:17:ea:bc:ac:3a:eb:87:2b:85:75:45:38:
                    5e:03:5a:85:a0:22:bf:29:1a:8c:9f:e3:50:ca:ff:
                    ab:99:1c:bf:46:80:24:31:7d:87:e5:e6:e0:b9:ac:
                    41:6a:5b:48:d6:39:74:6c:40:f8:b8:2b:e1:f2:e7:
                    65:4d:f5:44:8d:fc:10:85:78:23:e9:45:7e:79:77:
                    31:33:e1:f6:c9:b6:17:8b:94:ce:1e:7e:d5:e9:45:
                    5c:57:59:b1:3b:06:c7:14:32:e6:91:8c:5f:08:9d:
                    69:7e:bd:f1:8a:3a:6b:c3:81:5d:77:4c:4a:60:82:
                    8a:12:25:eb:e9:d6:25:2b:7a:d5:81:26:da:25:cf:
                    60:bb:42:74:67:9f:68:60:40:76:7d:dc:13:87:a5:
                    35:d0:1d:8f:6c:b2:af:d0:3d:41:98:09:a2:57:d1:
                    78:e9:2b:aa:d7:62:32:69:49:73:a0:d5:26:18:59:
                    1f:68:89:83:69:9f:64:c4:a8:05:8f:f5:7b:05:be:
                    93:19:59:c4:ef:d4:9b:d2:58:eb:3b:cd:13:31:ab:
                    57:30:e8:16:2b:38:c5:ec:c0:80:cb:46:e9:33:75:
                    22:5c:98:12:cc:2b:4f:d4:45:75:c6:e2:30:6a:93:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EE:5C:13:3B:46:4F:3C:4B:CF:67:87:45:A9:14:DB:48:01:CC:6D
            X509v3 Authority Key Identifier:
                keyid:2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:7c:3d:ff:d1:28:3f:67:ee:04:b8:79:4b:e0:a1:c1:23:fb:
         92:ab:ad:e9:89:65:f3:88:64:ff:ba:95:08:ee:06:8a:49:8c:
         12:60:62:c3:76:fa:b1:37:2c:3d:8d:ab:ce:2e:79:c0:1e:dd:
         29:68:b4:5e:0f:ee:3c:72:85:29:0b:10:fa:6f:a6:63:df:3f:
         93:a6:e3:92:ad:fe:ec:b1:27:c2:a7:fc:fd:d3:3d:3e:50:b8:
         3a:d1:a2:cd:93:a6:e4:8e:94:51:39:eb:f5:fe:36:73:2d:4c:
         96:ea:9f:a4:7f:3d:cc:86:cc:ec:d8:f5:b4:64:be:07:ea:99:
         87:c1:a2:f5:39:c9:6f:4a:ca:42:4e:a4:f0:dd:20:a9:d0:b4:
         f9:c8:21:03:2a:c1:51:0a:c2:c0:1e:c6:15:bc:14:be:6a:01:
         93:46:89:05:89:9d:91:67:c5:a8:e9:fd:88:80:33:5f:0f:5f:
         e5:bf:7e:35:82:7a:ca:29:75:79:76:89:c2:68:06:32:fa:3f:
         21:07:16:a6:05:fa:f6:43:7a:b7:71:dd:73:15:4d:b3:5c:06:
         00:8a:d3:e6:16:a8:14:36:3e:81:23:31:2f:05:f3:7a:11:df:
         54:3b:cd:ec:b4:7f:ad:14:7d:0d:49:9e:99:9e:6f:b3:ff:6a:
         26:71:a4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:04:10 2024 by rpki-client on console-fra.rpki-client.org