Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
File:                     lmsFxmHHalvMSNqDju22lz8VO4Y.mft (raw, json)
Hash identifier:          Ys9ZHU06YDTnzn/vmKM3SZ+nshpwtCxoR3S7uSD9FQs=
Subject key identifier:   A5:F2:2D:CE:C3:AA:EA:C3:25:A4:A0:1B:ED:6A:1B:42:3D:E7:F4:56
Authority key identifier: 96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86
Certificate issuer:       /CN=966b05c661c76a5bcc48da838eedb6973f153b86
Certificate serial:       018F874B789573AEA4D2645239BF02FC1BA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:03:41 +0000
Manifest this update:     Fri 17 May 2024 16:03:41 +0000
Manifest next update:     Sat 18 May 2024 16:03:41 +0000
Files and hashes:         1: lC9s1CuL3XJ-Kx1fYl3A2C-gGeA.roa (hash: swl1FXrtqTkK3KBNxIWeW2dfjNoQtwLK85RdJOnK0WQ=)
                          2: lmsFxmHHalvMSNqDju22lz8VO4Y.crl (hash: zFGVCorJJxFICUypkMqNFx7FaN23FElycFhPlMSlvhk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:78:95:73:ae:a4:d2:64:52:39:bf:02:fc:1b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966b05c661c76a5bcc48da838eedb6973f153b86
        Validity
            Not Before: May 17 16:03:41 2024 GMT
            Not After : May 18 16:03:41 2024 GMT
        Subject: CN=a5f22dcec3aaeac325a4a01bed6a1b423de7f456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:ab:12:7b:34:94:52:09:b2:18:bc:98:bc:
                    25:d1:be:de:95:24:6e:23:1e:e4:06:e2:0a:9a:78:
                    38:a9:74:1c:76:d2:2d:af:68:39:e8:11:eb:64:20:
                    69:a7:50:b0:2c:da:a3:b1:97:9d:e2:00:51:74:e9:
                    7d:b7:78:42:50:e5:99:0a:39:a9:fb:1a:27:eb:96:
                    95:7f:7e:d8:d6:8f:08:de:58:66:9f:90:6b:2e:25:
                    31:fd:e9:5a:a1:b7:af:a5:4e:d9:43:59:e2:54:56:
                    43:94:76:be:5a:df:35:41:72:fa:72:57:f2:ae:1a:
                    dc:5f:17:b3:3a:a7:e9:12:3b:46:b3:30:78:fb:90:
                    da:8f:04:d8:4e:f5:47:98:5b:9f:b8:1c:57:7c:3a:
                    e6:f0:cc:39:7f:3a:43:a2:f7:51:e4:19:fc:51:22:
                    20:a2:5d:8a:a7:e5:59:cd:39:60:c2:10:17:4c:87:
                    1c:cb:96:73:47:d8:78:b6:3c:88:5c:ff:e3:63:a6:
                    9f:5b:3a:36:41:98:aa:2c:cc:eb:d8:74:5a:a6:0c:
                    66:d9:8a:49:b3:5c:d0:58:7e:a4:a4:a7:45:90:16:
                    38:d9:57:2c:62:9d:b9:8e:6e:a2:52:cf:10:cf:cb:
                    3b:01:5c:d1:32:21:cc:51:1e:2d:97:1a:39:46:42:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F2:2D:CE:C3:AA:EA:C3:25:A4:A0:1B:ED:6A:1B:42:3D:E7:F4:56
            X509v3 Authority Key Identifier:
                keyid:96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:34:14:fb:3b:bc:b2:c3:32:6e:a4:18:41:8f:16:8b:b7:af:
         c5:f0:84:2f:e6:1f:59:b8:8b:46:0b:4c:f0:5b:b7:13:c2:7f:
         2e:75:c5:24:55:f9:01:0d:af:83:ed:11:45:0f:c6:26:54:98:
         05:2f:c5:d3:5b:a1:88:01:eb:a6:b6:8b:5e:a6:91:2e:9b:e7:
         d6:40:54:61:c1:38:bb:8c:6e:3a:7d:7b:9e:8c:13:86:d7:2f:
         d4:6b:8f:53:94:18:85:6b:c7:a1:97:fc:07:be:79:86:22:e0:
         42:02:60:fa:bc:c8:84:5f:ec:90:a3:db:a9:8b:9f:d7:f4:36:
         22:b6:ea:65:de:c3:0b:a8:80:97:9e:3d:b0:75:51:b0:bb:90:
         86:28:55:81:66:0e:8a:cb:e2:33:48:43:1b:b5:2e:fe:3f:51:
         bf:f6:21:e7:63:67:8a:00:2a:83:64:3b:fc:d9:33:9f:2b:3d:
         f4:5c:75:3b:5d:ed:60:b5:c9:44:3a:4e:e3:24:ed:04:5e:42:
         06:18:7e:9b:80:66:ad:f9:b1:84:42:22:db:ba:c9:ab:36:eb:
         d6:04:bb:cd:f5:87:d3:b1:92:b1:2b:9e:05:72:82:92:9b:b0:
         81:ce:da:80:3e:c5:77:a8:26:55:fd:33:64:10:b3:35:84:89:
         e3:5d:05:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:08:08 2024 by rpki-client on console-fra.rpki-client.org