Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File:                     lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier:          t+unsf7jZo6wVgmnAPX9GBjAsEWfU76cRTEpwmUNoWA=
Subject key identifier:   57:40:BA:3D:47:3E:FA:51:77:16:F1:D0:77:04:A0:49:53:A8:25:A9
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer:       /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial:       018F923A674B49DAC10A8BA05FB06189AFE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number:          117E
Signing time:             Sun 19 May 2024 19:00:51 +0000
Manifest this update:     Sun 19 May 2024 19:00:51 +0000
Manifest next update:     Mon 20 May 2024 19:00:51 +0000
Files and hashes:         1: 0248JHmyeFKA6dihMSNNZjIGO6w.roa (hash: uRrBYQkRkT3LzrSiqTdWrFaBzxwt4aMr5uHE1ghIKos=)
                          2: bfwkjGV4iJcqduQIX72Ag5iQ05k.roa (hash: a6LOlpQb3Vott6fMDQOqRWqM0XbdOh3yR3E/GwmoLbs=)
                          3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: Ktlx7pjIt0t8HFcbzHmG+NrrrhEaLSrMsxp0O/r0gwE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:92:3a:67:4b:49:da:c1:0a:8b:a0:5f:b0:61:89:af:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
        Validity
            Not Before: May 19 19:00:51 2024 GMT
            Not After : May 20 19:00:51 2024 GMT
        Subject: CN=5740ba3d473efa517716f1d07704a04953a825a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:8b:2f:a3:1a:b6:e0:40:c6:63:84:12:a1:
                    02:46:f5:3c:9e:11:7d:0c:26:6a:8c:fb:74:2a:41:
                    0c:cf:03:d3:7d:ea:bc:89:d2:97:9f:68:8b:3d:e5:
                    5c:7f:89:65:18:42:cf:05:27:7a:f4:21:c1:ef:60:
                    12:76:1a:ae:b1:81:44:fe:af:94:e0:2a:bb:3a:25:
                    8e:f1:f9:1a:1d:07:ec:a2:0e:b3:3c:31:ec:40:e8:
                    3e:fd:d2:7d:1a:7e:47:60:f8:94:4e:44:80:dc:c8:
                    64:f6:76:96:e6:e8:8a:3a:ef:1b:25:8d:67:b8:af:
                    f7:1a:8b:f7:8d:9e:33:d7:56:de:0a:ad:93:d9:8a:
                    db:b0:22:cf:12:5d:eb:0c:98:1b:f8:4f:67:3b:66:
                    71:cc:75:f1:84:9e:52:e5:1f:86:01:9b:2d:77:62:
                    ee:9c:0f:e9:5b:89:71:51:ce:f5:02:19:4c:4d:3f:
                    46:72:de:42:21:41:77:5e:0b:20:23:9b:3f:21:1f:
                    bd:f8:ca:47:b3:0e:ef:aa:c1:c6:c6:30:b6:00:f9:
                    1f:0c:b6:2e:d9:21:77:39:c7:eb:aa:52:2e:ca:ec:
                    b4:bd:59:fd:55:3d:03:13:62:a2:4a:65:3c:e2:3c:
                    0b:d2:9b:7b:d1:a1:ef:27:f8:92:35:9d:93:89:b6:
                    7c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:40:BA:3D:47:3E:FA:51:77:16:F1:D0:77:04:A0:49:53:A8:25:A9
            X509v3 Authority Key Identifier:
                keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:33:f9:cc:2b:78:8a:44:9b:64:2b:31:11:5d:d7:78:71:2b:
         d7:e6:6d:da:79:06:47:a5:bc:82:3b:73:84:7d:9d:e0:21:f3:
         a5:d9:94:34:f1:5b:7a:d7:d6:6f:bf:57:73:23:72:7a:9c:3a:
         02:56:ba:49:bd:a1:8b:33:69:b1:57:9f:de:1f:16:e2:88:7d:
         5d:1e:f5:b5:f6:2f:a5:6c:82:30:1e:79:75:1d:e7:dc:23:c6:
         3b:1d:7c:5e:1f:26:3e:76:d0:a5:40:1e:fc:a2:e9:53:6b:15:
         6c:19:af:c5:d8:25:67:be:72:93:7c:13:fc:d7:93:62:e4:6f:
         a7:75:b8:ec:6e:ba:46:db:01:db:45:07:60:8f:ab:13:82:06:
         02:96:22:26:a0:a1:12:22:24:74:95:a4:0f:d7:3b:f7:a3:0b:
         a3:48:93:e1:a2:c1:39:b1:3d:a6:7c:7c:c8:06:96:91:28:7f:
         00:a4:a5:ea:d3:43:29:a3:6e:a7:30:28:eb:77:9f:c2:f0:c6:
         01:ef:a7:51:67:e0:9e:8e:5c:fe:ed:56:3e:65:d0:26:21:0e:
         f3:cc:d4:79:de:c2:2d:8e:ed:89:b7:41:e9:40:4e:1a:69:fd:
         20:8d:7d:af:72:a2:4a:ff:46:57:cc:39:dc:95:35:63:a7:5d:
         2f:65:97:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:11:59 2024 by rpki-client on console-fra.rpki-client.org