Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File:                     lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier:          DJxigD1EjpTgltyMkrIRzS27tQ8kA2IjTTZgHieWJkw=
Subject key identifier:   6A:8E:38:52:1C:4B:F3:50:A1:49:85:1D:19:63:8D:2F:DD:B9:91:5E
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer:       /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial:       018F874977008B5D364747835B17D4D7F71D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number:          0DED
Signing time:             Fri 17 May 2024 16:01:29 +0000
Manifest this update:     Fri 17 May 2024 16:01:29 +0000
Manifest next update:     Sat 18 May 2024 16:01:29 +0000
Files and hashes:         1: W78yyw7g-0a1dB8hNuG6IVEWG7Q.roa (hash: avWRhmPBBHFFJFVTlQ6h0Ke4GQXUjYFDLgVzboTz1uo=)
                          2: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: SwlMbWXqXceg+C91u27yDgoRmZy2P/V2fhtSHyKHUI0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:77:00:8b:5d:36:47:47:83:5b:17:d4:d7:f7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
        Validity
            Not Before: May 17 16:01:29 2024 GMT
            Not After : May 18 16:01:29 2024 GMT
        Subject: CN=6a8e38521c4bf350a149851d19638d2fddb9915e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:43:37:c5:68:e6:e0:c3:2b:cd:77:b4:4d:
                    05:ae:aa:73:f6:55:9f:ac:4d:19:6e:c4:e4:9e:22:
                    6d:13:4e:b4:1d:72:b4:96:6e:c7:30:df:ca:3e:5b:
                    61:15:9d:d6:4d:71:04:73:9d:b6:60:e7:e3:63:0b:
                    80:af:6a:83:30:fd:14:b7:d2:b8:0d:84:4d:a0:a7:
                    89:c7:cc:1d:8c:6c:85:4d:41:ed:0c:2d:43:bd:d9:
                    9f:78:0f:0a:80:df:8c:87:6f:09:c5:03:9a:5e:15:
                    52:54:1a:b7:ba:92:97:e7:0e:60:11:db:2a:e6:71:
                    35:00:a9:ff:50:3e:fb:9b:96:d0:de:4b:3d:30:7d:
                    32:c9:b5:1e:28:0c:51:4f:08:63:0f:48:45:20:b2:
                    da:ce:2b:8a:5e:a4:7d:73:80:f8:fb:93:1a:de:d7:
                    2c:65:ae:04:40:1a:25:03:63:bc:8b:0b:28:e5:c2:
                    96:0a:ef:58:1d:60:c9:7c:b3:19:8d:bc:02:c0:20:
                    aa:14:af:9b:f1:4f:bc:b2:7c:b8:da:04:f2:1a:37:
                    0f:11:29:60:df:82:7c:0c:bd:77:86:a8:b9:4e:dd:
                    d1:58:92:8e:c6:cc:9d:73:05:c4:a7:c3:19:e0:bb:
                    a1:1f:f8:97:69:55:b7:8a:00:9d:e0:fc:4d:55:83:
                    0d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8E:38:52:1C:4B:F3:50:A1:49:85:1D:19:63:8D:2F:DD:B9:91:5E
            X509v3 Authority Key Identifier:
                keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:7a:66:df:51:79:cc:cb:20:70:05:32:d4:46:41:86:f1:ae:
         86:3e:32:93:38:20:2a:93:e4:2f:58:3b:98:69:26:36:73:9a:
         eb:ca:a3:3f:ea:19:b5:c6:a8:9e:87:c2:1d:cd:d3:d8:04:d7:
         72:72:3f:97:35:eb:5b:5e:52:e4:dd:e5:67:15:8f:ad:01:b6:
         fc:a5:24:e7:41:eb:eb:1b:28:45:90:b2:7d:6f:0c:5a:e4:49:
         ba:da:40:74:24:7b:d3:c0:7a:14:71:4d:21:44:ef:6e:8b:a7:
         6f:bf:85:e0:86:76:a8:38:d1:3d:0b:a9:37:93:04:f9:b8:b2:
         7c:93:4c:b1:5d:b4:fa:1c:b1:99:39:9a:57:13:20:0d:7f:ce:
         09:32:f2:65:9f:9c:8f:0c:b4:d2:8e:b2:37:db:e4:fe:6b:c2:
         97:8f:c6:85:8d:5f:ef:58:8b:31:e3:b2:a3:74:4c:0a:65:06:
         23:56:fb:77:58:ca:fb:c5:5a:e1:d4:f8:f3:ac:5a:8b:f9:b9:
         49:14:51:26:58:50:68:9a:c7:2a:22:41:37:77:de:f7:2f:9a:
         a9:39:da:d8:22:97:29:99:98:44:c8:87:d5:18:69:3f:54:22:
         e7:f8:1d:62:83:33:f2:3c:3d:3a:1b:85:78:9e:2a:15:e6:a2:
         de:40:b1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:40 2024 by rpki-client on console-ams.rpki-client.org