Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File:                     LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier:          H11dBOaRN3VDUdmidWNBOJFpp3QV1yVm7kCo1X7pk38=
Subject key identifier:   1F:DA:15:EB:AA:DE:48:3D:A1:C0:CB:B6:C4:13:43:3E:E6:2B:1C:65
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer:       /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial:       018F98AB97242E81DDD230C2C0E3FFD1C461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number:          1181
Signing time:             Tue 21 May 2024 01:02:13 +0000
Manifest this update:     Tue 21 May 2024 01:02:13 +0000
Manifest next update:     Wed 22 May 2024 01:02:13 +0000
Files and hashes:         1: 1tJnv9oo7XEhhL0K2yt76Ly0ntQ.roa (hash: MTyBtsnXIlMwAMNNv7RPbFFlVfB+TJlXbeY51XvA6OQ=)
                          2: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: sADDbiUpOcysoFRtaUWyIGlGFaJZDQKxVIkwhg9mHXw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:ab:97:24:2e:81:dd:d2:30:c2:c0:e3:ff:d1:c4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
        Validity
            Not Before: May 21 01:02:13 2024 GMT
            Not After : May 22 01:02:13 2024 GMT
        Subject: CN=1fda15ebaade483da1c0cbb6c413433ee62b1c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:11:ac:38:73:41:88:d6:5b:be:5b:d6:f9:0f:
                    81:fd:65:26:d2:b0:e1:69:f5:e3:05:26:78:1f:a3:
                    d1:5f:bf:02:25:d7:ef:1e:14:72:8b:fe:2b:c3:b2:
                    2b:a1:35:4e:b5:f8:08:df:c5:01:26:b9:d8:1a:21:
                    97:47:5b:b4:be:1d:da:b6:c0:43:62:3f:42:74:75:
                    d6:a8:f1:c6:9e:d3:23:94:53:37:fc:99:a9:a7:e2:
                    6f:e9:d9:71:4c:3e:50:6c:10:ce:ed:3b:e5:a1:2c:
                    80:5a:36:1e:31:84:f7:af:a6:32:1b:22:13:46:a4:
                    02:a6:88:68:91:ad:91:05:19:09:22:c3:12:ec:c1:
                    0b:32:3c:86:c8:37:c4:6f:57:75:ec:d5:59:52:07:
                    32:2c:de:91:0c:d5:e8:cd:35:cf:97:06:fb:eb:ec:
                    d6:43:d4:cf:ac:1d:bf:e7:df:cc:01:93:80:08:ab:
                    2b:3a:d4:c7:30:c0:d0:33:52:cf:4b:3c:c0:12:08:
                    77:84:75:b1:89:3e:7a:0d:db:c8:d5:4e:d3:eb:ed:
                    1b:c7:b7:b4:53:f5:28:eb:e1:b8:b0:ad:cf:f2:c8:
                    d4:78:ee:8c:d7:c7:fc:14:6a:12:0c:04:c7:94:d9:
                    2b:7f:97:42:a9:0c:c7:37:44:b4:bd:51:fb:9c:f9:
                    8e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DA:15:EB:AA:DE:48:3D:A1:C0:CB:B6:C4:13:43:3E:E6:2B:1C:65
            X509v3 Authority Key Identifier:
                keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:9c:5c:a2:0a:6f:07:78:b5:b9:a1:a0:d1:b7:5c:66:81:5e:
         6a:2b:27:83:f1:dd:a1:e8:db:87:2f:ab:dc:4b:04:4f:2a:33:
         2d:55:58:82:41:36:d1:24:50:3d:73:4d:63:d7:09:15:ce:0c:
         e9:75:b7:0f:5a:a9:21:f3:8c:74:61:7a:ab:02:22:a7:c2:93:
         dd:6d:8a:08:b3:38:ec:fd:71:de:01:25:1c:d7:40:e7:34:6d:
         78:87:24:c8:9d:03:e0:12:fa:74:c9:ab:dc:51:04:b3:08:7c:
         4f:58:5a:4c:d4:64:c4:75:d5:3b:50:af:00:0e:93:c5:a3:33:
         99:b8:6e:e7:20:01:d5:01:20:be:97:c0:43:10:28:46:ab:cb:
         f9:66:c5:36:81:cb:38:a8:6e:09:63:85:32:5f:80:43:35:5e:
         6f:0d:b3:88:f1:34:2e:68:49:38:54:15:de:67:fe:8e:44:ee:
         08:d5:26:19:6b:74:74:50:59:7d:1f:d0:c8:2f:0d:73:40:17:
         6d:e2:ff:bd:44:09:4f:00:88:45:43:81:0d:2f:ce:ad:e8:da:
         ab:0d:72:fb:17:39:2e:b1:ae:03:6e:3b:80:ee:08:7f:76:23:
         0f:02:22:72:f0:a0:5b:a0:84:65:7d:82:1a:11:05:96:1c:0e:
         12:ff:1a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:13:18 2024 by rpki-client on console-fra.rpki-client.org