Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
File:                     l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json)
Hash identifier:          AaYm3VZSctKztewkg5glTnvTa4il0l4sEIMiGufI9nw=
Subject key identifier:   23:8C:F7:5E:A0:70:DD:AE:7E:68:CE:48:76:60:17:73:CB:86:8B:50
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Certificate issuer:       /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial:       018F885B3D175E4DB139468F816AC7BAADBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
Manifest number:          E9
Signing time:             Fri 17 May 2024 21:00:31 +0000
Manifest this update:     Fri 17 May 2024 21:00:31 +0000
Manifest next update:     Sat 18 May 2024 21:00:31 +0000
Files and hashes:         1: FvVNhXlO4L5CS5MsKtdxJTsgcsY.roa (hash: eC8ZXhWVVgl6G61OvRD3rjlZTKM9Xd0VaDKpBaGYrXE=)
                          2: TAzxrnCwFT4AGI_7J3CPQ5o_mRI.roa (hash: S8GvINZi0Fu71Sl12VXMPpxkwSRuC0ZSxYheb+o6J1s=)
                          3: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: J53IYP6KEvolIu3+CGnb+dsJqdRZ/m1f6mBC7lDdXOo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:3d:17:5e:4d:b1:39:46:8f:81:6a:c7:ba:ad:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
        Validity
            Not Before: May 17 21:00:31 2024 GMT
            Not After : May 18 21:00:31 2024 GMT
        Subject: CN=238cf75ea070ddae7e68ce4876601773cb868b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:19:e0:29:e2:11:10:74:3f:67:bd:3c:8f:
                    6d:fe:b4:7c:b6:6c:b6:e2:ad:d0:97:ef:6b:b8:6f:
                    74:e4:b0:87:e6:d4:13:3e:e8:88:a1:a9:d3:65:b9:
                    2a:e7:e6:03:99:03:bc:96:98:a8:79:fc:e6:4c:0a:
                    41:6e:d0:e7:6d:3d:1e:07:4b:83:e4:67:85:12:42:
                    ae:60:4c:cf:fb:08:23:81:c9:1c:0e:3c:94:c8:5c:
                    b9:04:a7:50:e9:8b:1e:fe:1e:9e:28:94:4b:78:57:
                    06:2b:b1:43:2b:0a:53:1c:3d:3b:22:f6:04:3a:73:
                    03:c0:21:5f:93:25:5d:3a:de:00:c0:c5:09:53:3f:
                    76:e8:a9:3c:37:7f:19:d2:b7:c3:ea:58:00:0c:40:
                    d5:72:c3:25:43:54:69:98:28:76:c4:44:69:76:7b:
                    e4:f9:2f:a1:5c:d2:b3:28:bc:01:de:ef:a0:5b:60:
                    b4:a2:28:4e:9e:e6:31:78:7f:66:82:a3:2a:19:b3:
                    99:0d:29:31:af:3e:62:b2:25:bd:17:52:bf:a4:0e:
                    8e:ce:42:e4:84:c4:a0:18:db:9f:6c:ed:30:ae:ec:
                    34:90:ea:33:7b:dd:ac:c3:f8:dc:a9:08:ee:84:d2:
                    1b:20:10:58:43:9c:7e:2e:7a:e6:12:bc:1e:62:63:
                    fb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8C:F7:5E:A0:70:DD:AE:7E:68:CE:48:76:60:17:73:CB:86:8B:50
            X509v3 Authority Key Identifier:
                keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:26:49:9a:27:2f:c7:52:21:fd:ef:2a:60:b0:c3:73:e1:ea:
         99:ed:66:94:61:b4:b7:c6:ec:6e:ae:72:c5:f5:4e:9a:cc:15:
         54:86:4a:fd:f3:c1:87:6a:72:b2:70:26:10:14:4f:72:92:38:
         f6:ce:1a:c5:d7:f7:fc:6f:ae:87:42:86:f3:bf:dd:b6:df:0d:
         23:84:f6:ed:f3:c2:6a:e0:4f:7f:12:86:b1:5f:62:e9:5b:e4:
         90:29:51:f1:b2:8f:55:79:17:80:4c:61:fc:56:99:24:ea:22:
         ec:bd:0f:25:26:ac:12:f5:76:17:16:a3:ea:98:ad:8a:74:bf:
         1e:47:e5:ef:37:1e:f3:4d:88:a6:2f:29:8e:c7:5b:11:65:dc:
         f7:d6:bc:ca:d9:b4:33:93:e7:c0:85:b2:c8:e1:8e:7b:69:04:
         9b:a1:b6:c1:3f:b6:b8:16:7c:d9:d4:43:87:f3:a2:f1:c3:2f:
         f2:ad:e0:d4:41:81:f3:20:97:17:e0:3c:5d:c8:0f:31:73:99:
         9c:e7:fc:b1:07:f1:7d:d8:19:0e:a0:7a:af:c8:4e:50:35:c8:
         af:33:84:c6:a0:49:88:21:4f:5b:0d:7b:bc:ff:37:cc:bb:a4:
         9e:ba:d1:20:9e:0f:f4:e9:e5:03:f2:43:66:6b:43:71:a4:eb:
         e6:ed:eb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:34:39 2024 by rpki-client on console-ams.rpki-client.org