Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File:                     lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier:          492T3DYbgcM/oUh+gDGB9BY0yQbEPX7r5+gQBX5zTzM=
Subject key identifier:   AC:E5:6A:5C:A7:E0:5E:E1:02:52:2A:61:B1:7E:EE:03:D7:44:92:81
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer:       /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial:       018F87B6BA05DECE95B627386B20B271044F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 18:00:50 +0000
Manifest this update:     Fri 17 May 2024 18:00:50 +0000
Manifest next update:     Sat 18 May 2024 18:00:50 +0000
Files and hashes:         1: Ug0y31yGl2J0nFHmhKDep2_41nE.roa (hash: ucxH8nh3JGfHyWk4oP8fy92T6lP2Okm+PJysr712HrQ=)
                          2: gXnm7OJj9FBnD6F4vIHLJowKXPA.roa (hash: DEA3LN9SBpqoeGVPASt8J4vQQkDVGeMBj15plAUSAlk=)
                          3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: UXMZwKfBIeanJfaqA+Y2O95F/327Jv+neeTBAIYldHk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:ba:05:de:ce:95:b6:27:38:6b:20:b2:71:04:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
        Validity
            Not Before: May 17 18:00:50 2024 GMT
            Not After : May 18 18:00:50 2024 GMT
        Subject: CN=ace56a5ca7e05ee102522a61b17eee03d7449281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2e:ef:80:42:7b:e3:94:bd:4c:2a:3a:44:ce:
                    ea:c2:c7:32:fd:64:95:a7:b3:d8:cf:af:cd:93:49:
                    0a:ee:87:fb:7d:4a:8e:13:04:f0:a6:2a:51:d6:6e:
                    83:9f:ae:6d:ea:78:05:99:f6:b3:ee:26:0a:31:38:
                    0e:7d:5c:6d:0b:f0:28:80:5f:fa:58:a1:fc:c2:f1:
                    f6:6d:56:fc:b6:b6:4c:e8:3b:21:12:72:5c:40:30:
                    e5:12:5c:d6:ce:0e:f5:d4:25:27:4c:fb:ea:b7:ad:
                    28:15:a2:e1:86:79:d9:c5:75:ad:4d:be:6e:a9:9e:
                    4b:53:64:bd:57:1e:d9:bc:63:eb:c7:35:b5:d0:05:
                    95:30:47:8a:4c:46:ce:d2:f7:4a:08:ce:aa:72:69:
                    d7:08:c0:af:7d:5e:66:0a:8f:52:2c:05:c3:b0:d4:
                    e4:23:12:bd:1a:53:2e:98:67:b4:42:13:b3:1d:27:
                    1f:79:65:2e:4b:96:c2:76:0f:e6:a4:e1:8d:21:40:
                    5f:58:17:9e:6d:ae:05:68:e3:ce:20:b8:51:94:4f:
                    12:1e:da:52:ee:fb:e1:4b:a6:09:47:a5:6b:bc:a8:
                    7a:c6:e6:5c:7f:2f:3c:27:c5:91:83:aa:8e:eb:d2:
                    ed:45:11:2f:e2:ef:f0:14:97:4c:80:9c:26:99:a0:
                    ad:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E5:6A:5C:A7:E0:5E:E1:02:52:2A:61:B1:7E:EE:03:D7:44:92:81
            X509v3 Authority Key Identifier:
                keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c8:19:21:f8:9f:8a:96:59:15:f9:3b:90:5e:93:e9:80:40:
         83:76:a9:92:4d:9e:6f:e3:8e:bc:00:6d:0b:21:95:5d:6d:1e:
         f5:b0:36:7d:55:21:58:fc:25:a4:11:1e:db:38:96:48:23:ad:
         85:ef:64:93:fb:fe:da:cb:85:a7:b5:a4:a9:55:49:1d:2f:96:
         6a:c1:c5:0c:2d:4c:2a:1f:b7:bf:a5:30:18:50:9c:6d:f5:17:
         ca:cf:85:84:92:10:73:cd:a1:f6:9b:6f:d3:ed:44:b9:a0:bb:
         27:82:a4:d8:b3:5f:25:cb:2d:6b:30:e6:5b:62:92:09:01:92:
         b1:ef:b9:11:7d:f0:a7:ad:ad:89:d0:d7:18:fc:3b:39:fc:51:
         94:5e:ed:e1:ff:c1:14:b6:53:fc:42:7e:05:9e:90:ce:75:aa:
         8d:c7:6b:0c:85:b6:22:63:a7:a5:94:fb:ae:36:aa:f4:bf:eb:
         19:e8:ac:10:23:59:2b:4b:df:8a:13:7c:5f:43:57:fc:d6:4a:
         53:52:37:2d:2c:20:b3:36:2d:13:88:2f:57:02:38:b3:c1:fc:
         a8:36:79:4d:0f:24:17:ec:ce:7b:c3:ae:62:27:6f:8c:30:ab:
         ae:6d:38:7c:16:ee:80:ce:08:9a:59:ad:4e:c2:4f:f8:44:0d:
         21:87:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:18:49 2024 by rpki-client on console-fra.rpki-client.org