Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File:                     lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier:          Vcwke7jyzqpov9uBGKtc0/P4YyAX3+mj2cCcFxqG82M=
Subject key identifier:   AE:00:13:C6:66:BD:C4:20:52:CC:FB:51:82:53:73:D2:F2:0B:3F:81
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer:       /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial:       018F88245044F12900CE1CF3845C654FAA52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number:          1186
Signing time:             Fri 17 May 2024 20:00:32 +0000
Manifest this update:     Fri 17 May 2024 20:00:32 +0000
Manifest next update:     Sat 18 May 2024 20:00:32 +0000
Files and hashes:         1: 8JSnL1o1krs-qUtA3GNg1Xi8Xx8.roa (hash: uTfkwIbsB+D6FuzfMxDGNLgbV8GH0uLFu2Avu2B5x8s=)
                          2: _eUDzg0RJwetAIsupsf57gkXNCU.roa (hash: erjN++9Ic/DEvenjdsgYjYt2ndx/BN7iu5pwXHRVU7g=)
                          3: jNNwfj4yCG6tAQvKNBKNyotT3Uc.roa (hash: YnWj2zXlzP2G3Zw5FE5Oh0YIdFiyicA2GGgtxLrY7lU=)
                          4: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: IVkPm19CVHjxZTE9TUOpmZ4hxoHGOqLbaXbIAfCDsw4=)
                          5: pMByhVGlYn4u1lExMrPNu_PGBQU.roa (hash: OdMgHyTNBXDp41oFTQ5iCHY5C5pmc7yo+39IsSuXs8c=)
                          6: qT9ZHUsdvNDY6AhehIeolu2i56Q.roa (hash: fr/udsajG/LLi4nVStLf/Q9khi42dVNvjizjsUc6t5c=)
                          7: rMOBAALq6tryvM_UQk2g2-ujM5o.roa (hash: K97ANRD1ak8zwmnhCg2CSlDKtJfFacavdBC/gQgNSEI=)
                          8: z-rObA3advC75JTZGeTb3FAxVrg.roa (hash: mRSOW7OAuxft7mV4y8tWKtl4aZcfp0rfmOwg5bDi3Uo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:50:44:f1:29:00:ce:1c:f3:84:5c:65:4f:aa:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
        Validity
            Not Before: May 17 20:00:32 2024 GMT
            Not After : May 18 20:00:32 2024 GMT
        Subject: CN=ae0013c666bdc42052ccfb51825373d2f20b3f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c8:2a:de:4b:84:d0:b0:6b:3c:af:fc:55:6b:
                    5c:89:86:d8:a4:80:12:bf:14:a8:e5:4f:5e:3b:a7:
                    45:2c:51:70:19:17:07:92:83:60:7a:59:f6:8f:0b:
                    52:f2:7c:72:72:ec:7a:66:5e:7b:3f:fb:3d:1a:70:
                    ed:9f:a0:ef:1f:31:d2:8c:52:c2:d4:e5:a2:10:fb:
                    56:29:71:24:08:58:b2:7a:19:6f:4c:7b:9e:d2:85:
                    2f:e8:3e:7c:dc:8e:55:e5:ab:e2:46:d8:b0:03:a2:
                    18:a3:c2:09:51:c3:34:aa:de:6e:b9:ac:35:56:be:
                    2b:61:6a:52:a3:14:83:56:db:58:f6:3e:05:66:58:
                    f4:6e:ee:12:9b:3b:40:a2:dd:be:8e:cc:3a:bb:e5:
                    69:da:a4:51:56:a3:fb:7e:f6:39:c5:21:b3:b0:cb:
                    90:13:84:0a:3f:3b:a3:8a:cc:17:3a:4c:22:96:22:
                    a8:0b:d4:a3:78:84:92:43:9a:7b:49:51:83:dc:07:
                    07:ee:a9:05:1b:a5:87:55:94:86:96:b9:05:f3:65:
                    60:2e:28:d5:d1:00:03:2d:08:8b:b5:b5:2c:e2:b2:
                    94:15:af:dd:87:1d:76:74:2b:40:c7:56:0c:72:47:
                    a9:af:f9:06:d9:0c:73:a3:f6:15:29:4a:09:9f:cc:
                    44:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:00:13:C6:66:BD:C4:20:52:CC:FB:51:82:53:73:D2:F2:0B:3F:81
            X509v3 Authority Key Identifier:
                keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:fe:69:63:de:98:52:6c:0b:90:b4:9d:b4:75:b5:36:1d:66:
         19:86:97:05:79:a6:20:eb:fe:fd:a6:4e:f6:b6:9a:c8:d4:74:
         60:38:1e:9f:4a:e8:81:6c:cd:10:2c:5b:8a:60:81:8f:24:a7:
         02:02:a5:15:3e:90:ca:9b:7d:ac:f4:e4:0a:22:7e:4d:e3:2f:
         c2:de:57:b0:57:7c:ad:93:7d:25:5a:84:ca:8d:f4:3c:a1:6d:
         e9:58:6a:f0:91:75:48:a2:2e:c1:81:14:8c:c3:90:b3:6d:9e:
         e5:f0:98:cd:66:11:f6:fa:b1:22:31:51:45:cb:21:a9:12:30:
         4f:ac:1c:42:16:d7:5e:41:3f:6b:72:30:1a:43:d7:0c:a7:5b:
         65:05:aa:d8:e7:d2:b9:d6:07:14:f1:4c:d0:aa:b2:6d:cd:5f:
         76:75:a4:a5:63:7d:bb:d8:ca:fc:1c:ab:ca:92:35:b6:80:22:
         a3:9f:31:f3:b2:a1:93:d0:ee:6e:af:78:9a:90:c4:b0:75:8e:
         b4:cd:48:55:b9:4d:75:b6:fa:d0:c7:d5:aa:5a:66:3f:e3:ff:
         ea:2a:63:70:16:ca:f2:6c:f0:af:ce:56:0a:75:62:34:8f:77:
         7f:3e:62:31:ed:c0:fd:b4:a0:3a:61:8a:17:cc:a7:8c:4c:2b:
         86:df:61:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:18 2024 by rpki-client on console-ams.rpki-client.org