Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File:                     lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier:          LKA9GJJflnqP9MHyOaDi/aGUZUgpWXzI+dQ/Ane33MQ=
Subject key identifier:   45:3D:60:8E:61:37:76:AA:8B:39:A6:09:65:59:18:24:C7:9A:25:9C
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer:       /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial:       018F874907B3784B8D39B6D4A385AF9D01CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number:          1107
Signing time:             Fri 17 May 2024 16:01:01 +0000
Manifest this update:     Fri 17 May 2024 16:01:01 +0000
Manifest next update:     Sat 18 May 2024 16:01:01 +0000
Files and hashes:         1: is2ryumT0Kim7BbBNa61Rv1t04A.roa (hash: xowPY5Q8ByvBHRSfBqEpTTK2SF4Tz1rfi3+sZToWz3w=)
                          2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: W4pwU6k2RC9ZYbjzUfFj+EBgKPkgLXumLFy0SLvbi48=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:07:b3:78:4b:8d:39:b6:d4:a3:85:af:9d:01:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
        Validity
            Not Before: May 17 16:01:01 2024 GMT
            Not After : May 18 16:01:01 2024 GMT
        Subject: CN=453d608e613776aa8b39a60965591824c79a259c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:47:90:84:42:24:9a:2a:43:02:8c:e3:0e:
                    60:7e:af:be:2b:98:ac:a5:55:80:94:70:49:d3:0a:
                    ff:3e:88:fa:50:d1:f1:5c:c5:1f:bb:63:6e:39:c5:
                    77:8b:da:48:94:4f:a1:f8:09:31:05:00:26:9c:61:
                    d8:22:96:ce:63:d6:4f:04:da:18:ac:48:f3:cd:65:
                    31:70:fd:fb:f0:42:26:cb:d6:7c:34:53:e0:75:70:
                    e6:70:95:c1:10:74:31:ee:ff:34:7f:ea:ba:41:36:
                    01:47:db:25:a4:63:a6:1f:f4:c0:a9:ee:a4:51:1a:
                    39:6c:a7:64:1e:65:7b:c6:c7:00:80:55:6d:5e:db:
                    74:5e:d8:a5:2c:b9:d1:78:15:fd:5b:b4:75:8c:03:
                    b1:8a:56:6e:26:ed:89:b8:ec:41:be:67:3c:53:fe:
                    a1:9d:e3:45:ad:4d:d8:1d:4d:68:64:4a:68:ab:c6:
                    9d:17:78:6a:85:5c:f8:f8:7f:97:55:04:c8:cb:46:
                    28:29:a3:de:90:75:27:e9:18:17:e3:36:12:f7:c5:
                    50:d0:23:b0:4d:f9:27:ed:46:50:b7:24:8f:04:1d:
                    6a:90:0b:ed:a2:8f:dd:63:51:86:25:09:7e:74:a6:
                    48:54:e1:b6:fd:83:93:fa:06:10:3b:39:a7:f2:e0:
                    f0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3D:60:8E:61:37:76:AA:8B:39:A6:09:65:59:18:24:C7:9A:25:9C
            X509v3 Authority Key Identifier:
                keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1e:b7:17:45:ed:66:e1:e8:78:9f:87:1d:f8:e4:40:ad:dd:
         fe:0b:8f:37:6b:07:f1:a8:15:7e:c2:e4:e2:d2:40:cd:b4:15:
         5c:b3:c2:65:c0:15:5e:1e:9a:08:ca:60:21:75:ec:3a:3b:6f:
         98:e3:2c:4f:af:ca:d6:9d:db:48:80:15:b7:56:ac:ae:59:6f:
         ba:8f:07:c8:f9:55:47:23:cb:94:af:8e:9f:1d:4a:58:b4:f3:
         8c:eb:7f:f2:a6:c0:16:84:70:32:cd:b6:d4:83:d4:51:9e:6b:
         fb:a7:b3:81:5d:99:b8:22:3b:24:d7:f2:67:27:b0:52:7b:6c:
         dd:77:18:c9:bc:55:05:91:54:c1:53:e8:bc:90:db:21:06:f1:
         f7:d1:58:fd:51:0b:21:ee:28:89:2d:01:c1:48:09:d2:b4:3b:
         6f:b1:c2:85:2c:cc:48:89:be:77:25:ae:29:08:c6:7f:dc:b0:
         71:99:59:3e:b7:ce:bc:1b:b5:c6:8f:a1:01:1b:9b:5d:e2:88:
         03:d3:71:b8:b4:3b:ec:18:0e:3f:af:83:d7:cf:c6:b8:e8:39:
         c4:e1:4d:77:99:2c:d5:c2:b6:a1:14:9b:72:2a:9f:36:db:88:
         12:8d:12:e1:2a:d5:f6:b7:ec:15:5e:eb:b3:75:4c:46:11:98:
         ce:18:85:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:43:57 2024 by rpki-client on console-ams.rpki-client.org