Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
File:                     ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json)
Hash identifier:          MuUYatWbmS2yavJ9DilHe58yFYqgPR4Du2RIBlvXMyE=
Subject key identifier:   54:B0:66:B7:91:66:A8:C6:74:BE:8D:21:EF:9F:04:B2:67:B9:2A:76
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Certificate issuer:       /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial:       018F89393572BCF3CBB3D69828D1914CA416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
Manifest number:          1104
Signing time:             Sat 18 May 2024 01:02:58 +0000
Manifest this update:     Sat 18 May 2024 01:02:58 +0000
Manifest next update:     Sun 19 May 2024 01:02:58 +0000
Files and hashes:         1: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: 0zadqRVaCgpaE36xp1D1sfywuUm3QOK7l+tl0zwjmII=)
                          2: zjI3SwSi2E822HBMquFH8gUJDKA.roa (hash: 3HjeFdwQGazf6DXzo6ARvl8DrC1R+1vh9PRGzSEoYFg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:35:72:bc:f3:cb:b3:d6:98:28:d1:91:4c:a4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
        Validity
            Not Before: May 18 01:02:58 2024 GMT
            Not After : May 19 01:02:58 2024 GMT
        Subject: CN=54b066b79166a8c674be8d21ef9f04b267b92a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:57:7a:72:ea:06:3c:42:ba:30:a7:f1:d3:f2:
                    3b:9c:36:8e:65:36:9d:93:e0:23:00:d6:a1:71:9a:
                    f9:ad:eb:c2:e8:29:c3:e0:91:9a:e8:30:d8:c7:a3:
                    7a:c5:4e:f4:f6:de:a6:48:38:9c:59:a5:8c:8a:71:
                    e2:3e:ec:69:7e:df:e6:28:2a:d4:da:fd:b8:84:cd:
                    b2:41:ef:42:18:29:22:bf:33:c5:3a:1d:1e:64:87:
                    a2:b7:e0:38:90:e0:02:2d:09:ad:6f:20:d1:4e:6f:
                    eb:0e:1c:40:6a:62:37:30:1d:3d:f9:eb:d7:c0:0d:
                    c7:78:25:eb:93:25:4f:8e:0a:91:43:bc:4e:5e:d4:
                    1b:cd:76:5b:ed:d4:46:ab:e7:67:9d:83:cf:cd:40:
                    8b:aa:da:d3:8d:5e:bd:c7:a9:76:66:bf:42:0c:6d:
                    6c:c4:cb:c9:e8:a9:8a:56:04:60:84:2e:80:9c:e2:
                    d1:f9:2f:e0:2d:d9:71:e1:95:d7:30:bd:b1:c0:3e:
                    47:30:c2:1b:d8:33:4b:45:42:a4:58:d8:6e:e3:57:
                    67:12:01:b5:e4:87:01:83:ee:ad:14:d1:55:99:91:
                    54:bf:54:8f:6b:0b:42:fa:47:cf:0d:b6:6d:20:fa:
                    68:10:a4:af:69:29:15:a7:9b:ba:e1:7a:15:65:89:
                    93:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B0:66:B7:91:66:A8:C6:74:BE:8D:21:EF:9F:04:B2:67:B9:2A:76
            X509v3 Authority Key Identifier:
                keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e8:9b:c3:dc:37:28:35:0e:ba:1a:51:b7:d2:a5:aa:4b:61:
         c6:83:c5:39:2e:03:95:a1:9c:72:69:65:58:0b:ca:c0:86:66:
         ef:5a:b5:4e:c8:1e:d5:fe:d8:67:4f:2b:b0:66:b5:48:05:c8:
         ee:94:ec:e4:9a:bb:3d:c6:47:d6:ee:94:cb:e4:51:15:ef:36:
         d1:03:64:b2:5a:8a:0d:68:03:97:84:35:4e:db:dd:2c:9a:ec:
         4c:5e:69:8e:eb:75:ac:d6:43:14:3e:6a:c5:f8:4d:83:c8:b2:
         24:cf:a4:07:4a:e7:ab:44:08:92:53:6b:c3:e7:55:21:18:e7:
         b4:71:a4:6c:fa:be:c0:50:4e:35:8f:f0:36:b7:40:e3:77:89:
         d1:bd:dc:21:51:1e:31:f3:6b:74:2c:75:35:fd:54:e8:74:a9:
         ed:12:08:2a:e1:b2:47:d4:03:23:55:f7:29:8b:d2:68:2a:45:
         2b:36:81:52:5e:25:de:95:99:1a:1c:41:a5:36:0b:3a:ba:60:
         73:20:e4:de:d4:e8:eb:9f:26:61:76:0a:6d:eb:e3:d3:51:1a:
         78:34:03:be:fe:ca:3a:7d:a5:66:1c:de:e1:f2:f0:5b:8c:93:
         29:10:f5:f8:45:d4:d0:fa:5c:47:22:ca:7b:02:ec:9c:d7:3a:
         d0:8a:c6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:50:42 2024 by rpki-client on console-ams.rpki-client.org