Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
File:                     lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json)
Hash identifier:          vHAHges93AkOIIdfSYbaWmbPFBoFyc0b0h6LpYrM15o=
Subject key identifier:   56:D8:9F:56:29:03:45:62:77:1E:7E:97:38:26:5F:C4:AB:AA:E3:FC
Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
Certificate issuer:       /CN=96b8121d556df453456553dcb45c4143f4cdd213
Certificate serial:       018F874B53B0D3DF7EBE9004766B1F8932C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
Manifest number:          03F5
Signing time:             Fri 17 May 2024 16:03:31 +0000
Manifest this update:     Fri 17 May 2024 16:03:31 +0000
Manifest next update:     Sat 18 May 2024 16:03:31 +0000
Files and hashes:         1: B4Egg5LkNKItdt_vftN6ZI9bX9o.roa (hash: vkyf8Qrp6WUfyDEUFcusLmNREsG2i4utSsnUXmFvKBI=)
                          2: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: Kk11iJfRsRzT/2BbmCNX5t8pV2C/JhCT6YIJzwZLI9o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:53:b0:d3:df:7e:be:90:04:76:6b:1f:89:32:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213
        Validity
            Not Before: May 17 16:03:31 2024 GMT
            Not After : May 18 16:03:31 2024 GMT
        Subject: CN=56d89f5629034562771e7e9738265fc4abaae3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:89:13:ff:6b:40:b3:b7:a0:a5:4d:5d:7c:
                    fe:21:12:c7:06:39:16:02:8e:75:84:73:0b:d3:62:
                    24:eb:b4:dc:94:69:9d:d3:4b:7f:99:67:d1:8a:6b:
                    a2:88:57:dd:39:e0:87:96:d2:e1:f0:c7:62:60:e3:
                    99:59:37:c1:07:82:ed:6e:4f:09:ba:ed:73:05:7a:
                    87:a3:90:d6:15:0f:ec:ce:7c:cf:ab:68:ce:c4:b9:
                    fe:3a:e4:88:3d:51:f5:54:8b:4f:f8:ee:53:35:bc:
                    ce:22:c5:77:73:72:9c:52:fd:fc:6f:70:44:0e:ef:
                    38:f4:cf:99:44:29:ee:97:b7:b9:86:63:5e:be:84:
                    f5:31:be:ca:5f:02:4b:d1:f5:a9:28:50:9f:1d:9a:
                    e9:2c:81:15:d5:00:89:c2:f8:4e:83:13:9e:b7:51:
                    5c:d3:5a:52:33:e2:c3:83:2a:bf:fb:ac:f9:a0:49:
                    50:76:cc:44:80:79:cf:c2:6c:9e:b2:79:67:56:80:
                    45:70:d2:1b:c3:09:a9:a1:34:cd:da:a7:c7:8d:05:
                    21:d2:c5:91:f8:98:ba:79:f1:c0:7e:ef:c3:58:0d:
                    9d:ef:5a:f3:80:fe:02:12:8e:4a:7f:cc:7c:39:4c:
                    be:0d:bc:28:4f:7f:a1:20:64:1a:7d:8f:fd:6d:62:
                    53:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D8:9F:56:29:03:45:62:77:1E:7E:97:38:26:5F:C4:AB:AA:E3:FC
            X509v3 Authority Key Identifier:
                keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:de:53:33:3d:0f:68:db:50:dd:43:06:6a:05:92:f4:a4:12:
         7f:0f:89:23:db:f1:34:eb:28:e6:54:52:56:08:cd:f7:fd:81:
         94:59:66:13:e1:5c:18:79:f4:dc:10:03:50:1e:3e:d4:a0:4d:
         b7:33:f3:5a:9e:5b:32:49:93:83:47:f0:1b:66:3c:5e:0b:23:
         21:4d:d3:2c:6a:38:b1:25:f8:4f:a8:c1:d8:98:79:43:f4:c2:
         a5:2d:1a:08:b0:b1:e1:d7:33:0a:0b:ac:78:a1:a1:9f:9f:1a:
         6f:3e:b0:31:d1:a6:c3:d0:61:b9:bf:59:5f:94:4a:c8:bc:94:
         77:02:6c:64:f5:39:66:9d:28:a2:f3:97:8c:53:03:81:e6:6c:
         7e:6d:59:7b:1b:5e:27:34:22:76:13:40:66:83:eb:f2:e9:7e:
         ff:a0:9f:5a:b8:49:e4:a0:05:aa:1d:b4:d4:a3:35:8d:27:aa:
         ba:73:fd:42:74:1d:2e:51:b7:97:e7:da:d1:86:37:0a:36:3a:
         2c:e9:09:40:40:ee:c8:58:bd:14:1c:1c:9d:f7:7d:c3:56:00:
         36:45:76:34:83:bb:12:90:fe:48:43:24:55:61:83:36:bc:36:
         2e:6f:4a:6d:f6:f9:00:15:a9:bb:2d:8b:fd:e9:f6:68:5e:8a:
         79:fb:00:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HS1Ow099+vpAEdmsfiTLHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YjgxMjFkNTU2ZGY0NTM0NTY1NTNkY2I0NWM0MTQzZjRj
ZGQyMTMwHhcNMjQwNTE3MTYwMzMxWhcNMjQwNTE4MTYwMzMxWjAzMTEwLwYDVQQD
Eyg1NmQ4OWY1NjI5MDM0NTYyNzcxZTdlOTczODI2NWZjNGFiYWFlM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1yJE/9rQLO3oKVNXXz+IRLHBjkW
Ao51hHML02Ik67TclGmd00t/mWfRimuiiFfdOeCHltLh8MdiYOOZWTfBB4Ltbk8J
uu1zBXqHo5DWFQ/sznzPq2jOxLn+OuSIPVH1VItP+O5TNbzOIsV3c3KcUv38b3BE
Du849M+ZRCnul7e5hmNevoT1Mb7KXwJL0fWpKFCfHZrpLIEV1QCJwvhOgxOet1Fc
01pSM+LDgyq/+6z5oElQdsxEgHnPwmyesnlnVoBFcNIbwwmpoTTN2qfHjQUh0sWR
+Ji6efHAfu/DWA2d71rzgP4CEo5Kf8x8OUy+DbwoT3+hIGQafY/9bWJThwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbYn1YpA0Vidx5+lzgmX8SrquP8MB8GA1UdIwQY
MBaAFJa4Eh1VbfRTRWVT3LRcQUP0zdITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNjY1ZTYtZjk1ZC00MzQ3LTg1NjUt
ZDRmNTMxN2M1ODMwLzEvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kNjY1ZTYtZjk1ZC00MzQ3LTg1NjUtZDRmNTMxN2M1ODMw
LzEvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM95TMz0P
aNtQ3UMGagWS9KQSfw+JI9vxNOso5lRSVgjN9/2BlFlmE+FcGHn03BADUB4+1KBN
tzPzWp5bMkmTg0fwG2Y8XgsjIU3TLGo4sSX4T6jB2Jh5Q/TCpS0aCLCx4dczCgus
eKGhn58abz6wMdGmw9Bhub9ZX5RKyLyUdwJsZPU5Zp0oovOXjFMDgeZsfm1Zexte
JzQidhNAZoPr8ul+/6CfWrhJ5KAFqh201KM1jSequnP9QnQdLlG3l+fa0YY3CjY6
LOkJQEDuyFi9FBwcnfd9w1YANkV2NIO7EpD+SEMkVWGDNrw2Lm9Kbfb5ABWpuy2L
/en2aF6KefsAew==
-----END CERTIFICATE-----
Generated at Fri May 17 18:50:57 2024 by rpki-client on console-ams.rpki-client.org