Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File:                     lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier:          hSeao1Z6r8TiFAldUrTuH7CVI55oOnHkuXkrRsK/1sI=
Subject key identifier:   72:51:FB:73:37:0F:03:E2:A0:C9:FC:77:0D:79:C7:05:1D:28:9C:75
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer:       /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial:       018F8749A4DE592B9C5260488C5382C1D7B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number:          10F7
Signing time:             Fri 17 May 2024 16:01:41 +0000
Manifest this update:     Fri 17 May 2024 16:01:41 +0000
Manifest next update:     Sat 18 May 2024 16:01:41 +0000
Files and hashes:         1: X2CrNfujMUDaA2i1a7mgtpMdDRs.roa (hash: No/ty9CpltlTFi0Ofb6x6/FgIfHfrT7g4SfpGTwSUlQ=)
                          2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: ehWbHZOhCXtbtSdfxjUOVtVZhsKMj26QysksQ9KFdbI=)
                          3: tLnuS1eP7AoAXj7Bd3oZ4C7bvpE.roa (hash: AcyLQnvmeYe7qPZF8xSQDVfxu3tjlDXQx/jwZN2QZNo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:a4:de:59:2b:9c:52:60:48:8c:53:82:c1:d7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
        Validity
            Not Before: May 17 16:01:41 2024 GMT
            Not After : May 18 16:01:41 2024 GMT
        Subject: CN=7251fb73370f03e2a0c9fc770d79c7051d289c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:7d:7d:a3:7a:b7:bb:69:ee:19:c0:eb:51:
                    9c:28:68:83:dd:d6:19:50:85:ee:e0:da:1b:18:ef:
                    72:3f:80:48:d7:26:c6:e2:9c:1b:29:8b:fb:bd:f7:
                    f5:28:00:a4:72:a0:6a:19:9c:70:71:a7:99:5d:17:
                    c2:8e:72:79:dc:a7:f0:b3:c6:78:0d:39:dc:51:a6:
                    42:f4:52:f3:c5:33:be:06:da:1a:c4:e9:e9:24:9e:
                    1f:49:c2:dd:01:9b:a9:80:d8:e2:14:ea:96:f7:d4:
                    6c:e2:66:bf:2c:e7:36:2c:8e:8e:ad:77:56:c3:83:
                    15:f4:dc:a3:84:bf:c3:09:c6:f8:2f:65:ba:f6:f7:
                    e5:43:57:e4:dd:ac:e5:ba:c0:e1:70:a8:0e:bd:0a:
                    09:b8:07:c9:ac:0f:8e:a7:e6:77:da:27:1e:43:3a:
                    de:81:45:52:50:b0:8b:ef:14:05:6d:44:ce:f2:cc:
                    4f:58:4d:dc:cf:af:37:23:7c:e7:d0:5d:cb:e5:37:
                    4d:42:4d:3d:3b:bd:38:2a:72:e6:ea:33:d8:21:9e:
                    5f:c0:a1:c0:ec:00:51:70:0d:9f:67:a9:46:ba:5d:
                    7e:c8:97:f6:2c:2c:c2:f8:ed:be:71:5d:07:63:09:
                    40:68:68:a3:23:26:be:78:c0:34:79:b0:68:fa:69:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:51:FB:73:37:0F:03:E2:A0:C9:FC:77:0D:79:C7:05:1D:28:9C:75
            X509v3 Authority Key Identifier:
                keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ba:49:9a:cb:85:d1:59:90:c0:16:46:6f:2b:c7:c9:cb:ea:
         e8:cf:71:4a:51:35:b6:fe:3b:de:d6:02:3b:be:50:33:1f:a4:
         98:cb:7f:82:65:62:f6:95:57:db:29:0c:e0:eb:3f:25:8e:ba:
         bc:7c:a2:dd:70:61:84:02:34:78:f7:7c:6f:16:e9:19:1f:4d:
         6f:5b:fa:40:3f:dc:89:fd:3a:69:9e:cc:e3:fa:c9:72:7b:c3:
         45:b0:62:91:b5:4e:70:f4:68:fe:c5:b2:7b:f4:1b:68:79:e8:
         21:0d:55:b7:62:25:8f:5a:65:d6:18:74:ab:00:fd:ea:0f:5d:
         67:cb:45:ab:ab:cc:48:01:2c:39:c0:64:10:53:d0:40:86:59:
         12:20:b1:6a:8b:28:da:21:e0:3b:fb:66:1f:e1:47:68:30:ae:
         02:d7:7a:89:f3:ac:77:51:a8:f5:7d:2f:32:e4:04:4b:20:5a:
         16:6a:14:7b:f3:c9:d7:74:d0:77:2c:65:26:54:8c:47:cf:ca:
         5c:81:d6:de:28:6d:49:0d:0d:e3:b7:c8:90:47:59:f8:44:c4:
         32:84:64:17:2d:ec:f4:41:b9:f6:c2:ed:92:0d:74:c7:e3:ed:
         ea:21:ad:a6:ba:87:4d:65:91:8a:fc:fe:54:4f:b1:5a:81:5a:
         91:d0:6f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:33:43 2024 by rpki-client on console-ams.rpki-client.org