Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
File:                     v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft (raw, json)
Hash identifier:          q9OhAnfrpqk3SW1gZIFY8KNsr8SRK8QPEOdn6Co1Q+Y=
Subject key identifier:   33:3A:90:F7:90:36:A7:92:EE:A8:F0:DE:6C:DA:4D:FA:9A:95:32:2A
Authority key identifier: BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E
Certificate issuer:       /CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
Certificate serial:       018F874B4E9FFEFBABC332AA8908243A3E0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
Manifest number:          1108
Signing time:             Fri 17 May 2024 16:03:30 +0000
Manifest this update:     Fri 17 May 2024 16:03:30 +0000
Manifest next update:     Sat 18 May 2024 16:03:30 +0000
Files and hashes:         1: 4ddBs-ioXceBPZ9DZ7y1dY3rgDQ.roa (hash: QCc5beSCihUA4q+cO0TCoKm9oAsaGKAWcAx0iWmwDnY=)
                          2: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl (hash: U63+dTpwYx8VBNYbAHxMf9/X/EP2Akbmk/iXrBo3/gY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:4e:9f:fe:fb:ab:c3:32:aa:89:08:24:3a:3e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
        Validity
            Not Before: May 17 16:03:30 2024 GMT
            Not After : May 18 16:03:30 2024 GMT
        Subject: CN=333a90f79036a792eea8f0de6cda4dfa9a95322a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:1f:ef:a9:25:bf:69:9a:80:2a:96:4f:22:
                    3e:e0:67:d5:45:ef:42:d1:f2:23:b6:e2:bc:fb:fb:
                    2f:43:6f:b4:9f:3c:5c:c0:0f:7c:b0:f0:20:ae:33:
                    80:ac:a7:3d:24:9c:15:62:58:91:5d:bd:7b:8a:c7:
                    2d:55:70:a8:b3:07:61:00:bc:b4:ce:6d:61:99:db:
                    d2:1f:95:c0:36:61:c7:82:a7:09:f3:0a:ee:1a:0c:
                    6e:52:d2:7e:3f:72:f2:7c:24:bd:97:d6:d2:cc:33:
                    50:32:61:21:04:28:04:d7:bf:ee:c8:19:1c:2c:5c:
                    8f:70:62:2d:7b:ad:c5:44:9e:61:96:ed:a3:08:79:
                    0b:84:dc:04:c3:0c:28:4f:ff:e8:37:55:cc:59:54:
                    38:61:8c:9f:c5:25:7c:30:fc:21:60:ff:8c:29:35:
                    4e:f0:24:74:c8:dd:a0:a4:a6:04:a4:0e:33:74:09:
                    e8:17:50:5c:e8:f4:57:73:cf:6c:80:8a:f5:11:9f:
                    e1:a1:83:a7:44:ab:96:2d:67:55:92:b4:36:9a:cc:
                    2a:8e:fc:f5:63:70:ac:06:6c:14:65:78:36:32:fe:
                    3f:2f:b8:80:0d:a4:e8:ab:cd:3b:b7:2b:54:71:7f:
                    49:f6:81:96:3b:88:2d:c9:69:a0:11:ff:46:1b:f1:
                    f6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3A:90:F7:90:36:A7:92:EE:A8:F0:DE:6C:DA:4D:FA:9A:95:32:2A
            X509v3 Authority Key Identifier:
                keyid:BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:be:5b:97:d0:0d:6b:2f:5b:56:e4:8c:4a:ee:8e:38:ae:88:
         ca:93:48:f6:07:6c:50:03:1b:d6:3f:fd:c9:e9:1a:23:3f:79:
         91:1d:dc:b6:2e:64:67:34:f9:2b:6a:39:54:8a:f6:44:23:b5:
         f0:e5:1a:e3:36:4e:74:15:71:02:39:3d:34:8f:d9:d0:4b:65:
         56:17:9d:9b:79:09:31:38:ff:d3:8f:f6:bf:6b:ff:3e:8f:2c:
         31:7c:19:a2:2b:d9:50:bb:dd:1e:ad:9e:94:da:a9:32:91:b7:
         99:43:d4:6e:b6:4e:79:be:5f:2a:48:b1:ba:94:33:86:d5:5b:
         ef:9d:d2:16:a2:4d:6d:d8:7b:d1:c3:a7:56:4b:c3:9d:5a:87:
         69:35:2a:10:3a:d2:1a:44:c7:0d:f6:ea:91:50:e6:b7:82:7a:
         a0:7f:63:a1:58:0c:ef:ba:75:3f:4b:c3:d7:f5:68:38:11:bc:
         0d:77:e8:58:ac:30:d2:8b:7c:3e:11:29:b3:f4:9d:ba:a1:30:
         e4:b1:dc:3c:92:1e:87:dd:48:82:a8:a3:99:45:9a:84:e2:27:
         6a:f3:20:15:0d:a6:d3:9d:fc:91:38:b1:53:7b:51:ff:4f:8c:
         f2:f3:6c:86:35:2e:ba:fd:77:77:0b:0c:24:2b:73:b8:ec:83:
         81:d8:ce:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:30:14 2024 by rpki-client on console-fra.rpki-client.org