Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
File:                     LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json)
Hash identifier:          f+m/1NqyrfW95gbxzAA311cc5wn1yBBVUIqAg3hdYKI=
Subject key identifier:   3D:85:50:C9:4D:B9:20:52:B0:E0:54:00:02:34:3B:F3:68:66:5F:69
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Certificate issuer:       /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial:       018F1256F10864A8EE0EACCCAB5855A44566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
Manifest number:          113D
Signing time:             Wed 24 Apr 2024 23:00:38 +0000
Manifest this update:     Wed 24 Apr 2024 23:00:38 +0000
Manifest next update:     Thu 25 Apr 2024 23:00:38 +0000
Files and hashes:         1: Eje2YYlkrXil55oGCmM-b04Kh5o.roa (hash: SwtE2B9D2Zw+lRC+FPTf9Ufo7TzwEo/kt9TML/czo+Y=)
                          2: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: NFARz47WDsrq8ZLwxCRrSLa6RIBNDiv5UvbyBs6EM/k=)
                          3: VbgGgvbnC__FcAQyxwyjs7zxyXA.roa (hash: XDrhzGKE52q/yRRBw3iQRQDzzvfiMGxkpVkhbQioPZM=)
                          4: c6IW0l8LjPJSHVX7lsEh7G8fi-o.roa (hash: GKoJ9XEuYqyEsKBA2k3Cr9DW2FOJMOZlg+YVyzEbsjg=)
                          5: hXYXulCso30eXgH7Ka5JowG1Cw0.roa (hash: fP9fhLz02YmFy0S4H2S1HLdxfvsm6waxPoRF/3UWr4g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Apr 2024 23:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:12:56:f1:08:64:a8:ee:0e:ac:cc:ab:58:55:a4:45:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
        Validity
            Not Before: Apr 24 23:00:38 2024 GMT
            Not After : Apr 25 23:00:38 2024 GMT
        Subject: CN=3d8550c94db92052b0e0540002343bf368665f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:24:0e:b8:ae:3c:77:dc:7e:87:ee:28:55:f8:
                    39:3b:4d:2a:8c:2f:fa:0b:75:06:dc:97:e0:34:d7:
                    64:08:e1:35:95:28:6e:93:69:29:5d:85:a6:e9:05:
                    15:0f:44:98:28:a2:df:ac:22:b8:6b:b8:90:52:b4:
                    30:ab:a1:d2:b1:45:b8:4b:38:d9:1d:65:93:e2:73:
                    89:aa:a0:db:e9:ed:59:11:92:ee:17:68:2d:74:8e:
                    14:f6:99:4c:3f:ec:4a:2a:4c:19:7b:49:62:33:80:
                    51:73:5a:3d:3b:26:03:3e:27:af:19:d3:8b:3e:16:
                    d2:30:c8:58:ba:f2:3e:84:e5:3d:bb:fa:68:fc:09:
                    93:e9:26:15:6f:1e:c1:a5:db:10:c5:9b:0f:46:97:
                    56:e4:d8:1e:39:41:95:ab:de:55:dc:4b:e9:dc:be:
                    f2:72:23:d9:02:47:68:0e:e8:5b:ac:da:11:53:3d:
                    94:ce:72:c6:35:6e:9f:16:e3:b9:e8:c4:fe:2f:cc:
                    5b:08:2d:54:44:a0:f3:4e:c8:63:48:d2:31:21:37:
                    d2:ea:ca:c5:2a:6a:0a:96:f8:de:f0:bc:89:71:c2:
                    07:14:6c:33:45:8e:01:08:8a:f7:2e:30:de:16:bc:
                    09:7b:0c:9c:2c:94:a8:45:cc:1f:ca:d7:de:fc:21:
                    b1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:85:50:C9:4D:B9:20:52:B0:E0:54:00:02:34:3B:F3:68:66:5F:69
            X509v3 Authority Key Identifier:
                keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:46:50:36:64:83:22:66:99:48:4c:bc:1c:36:fb:62:02:57:
         a2:51:97:04:11:b0:97:96:67:ef:e9:47:1b:1a:6b:a3:88:b4:
         a9:3b:5d:cd:d5:6a:5d:3d:1a:70:6c:ef:28:0b:4e:fa:9f:c8:
         80:f7:b7:3c:42:84:9a:42:3d:dc:54:f4:66:ed:d7:64:1d:ea:
         6a:3f:e6:b8:63:dd:ae:9a:aa:eb:1a:6d:bb:56:8c:59:9e:73:
         c0:7e:9b:9d:01:c6:91:81:7b:f9:b7:55:00:d4:ae:e6:2b:77:
         24:e9:32:02:d4:7c:20:a5:3e:5e:63:a0:4e:75:2b:fb:6f:80:
         45:34:75:3d:60:5f:6b:fc:79:69:65:62:83:d0:41:6d:e0:f8:
         55:35:5f:04:cf:17:57:47:4c:40:a3:a6:78:54:63:e0:73:11:
         a4:a0:41:64:d0:e4:85:94:c6:a8:16:bb:a0:47:e2:b4:0a:54:
         1c:89:35:d7:2a:b1:ff:b9:d8:d4:63:c7:88:d7:7b:b7:e2:96:
         eb:47:89:6b:07:ed:dc:95:75:56:92:64:f6:59:bc:fa:9a:a0:
         62:1d:a9:1e:1e:32:9b:bd:d0:92:83:fe:79:c2:19:82:bc:58:
         b5:12:ba:31:dc:3c:40:4f:79:5b:28:8f:fc:93:c3:e5:38:76:
         03:52:2d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:50:55 2024 by rpki-client on console-fra.rpki-client.org