Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File:                     l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier:          UhXOkiDsLT+8n7mN6rd2fXY8Z6Z7218MYCa3b6RFDrI=
Subject key identifier:   40:3B:25:32:D8:E0:1F:4C:21:E4:B5:B1:94:C7:2E:EF:D3:F0:69:D9
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer:       /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial:       018F882479C8EDF1C032F391E90C3F6B02B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number:          0859
Signing time:             Fri 17 May 2024 20:00:42 +0000
Manifest this update:     Fri 17 May 2024 20:00:42 +0000
Manifest next update:     Sat 18 May 2024 20:00:42 +0000
Files and hashes:         1: 0uHVoAUNN-73npmI3kbuiw7V50s.roa (hash: FDLU5P/eBvX5iHOmJnmCLjC5bBw7IihuKmWYnHPCqPA=)
                          2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: +f3YlqXcVob860uq3BqP1liI1IW6QUK5TnohSYBn7LU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:79:c8:ed:f1:c0:32:f3:91:e9:0c:3f:6b:02:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
        Validity
            Not Before: May 17 20:00:42 2024 GMT
            Not After : May 18 20:00:42 2024 GMT
        Subject: CN=403b2532d8e01f4c21e4b5b194c72eefd3f069d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:92:3f:29:07:b4:1b:c3:7b:6e:1c:a3:11:
                    f4:90:e4:46:8a:d9:27:01:f7:99:15:d9:bb:6d:fe:
                    27:4c:ae:ff:39:40:d7:ff:b7:b8:89:98:9d:12:39:
                    16:f3:8c:e9:0f:26:cf:da:61:0e:b6:af:e2:9d:57:
                    3c:47:68:96:75:d9:43:95:07:d4:ca:83:de:4b:9a:
                    1a:84:4c:bd:bc:04:2a:bc:27:a4:2b:da:e9:80:57:
                    48:f8:3a:55:ab:37:38:bf:1b:45:ff:f2:35:b5:54:
                    2c:a0:26:78:ed:72:db:77:5d:a5:a0:d4:45:75:ab:
                    46:16:0b:97:af:c5:de:f6:62:01:c3:38:5c:23:f6:
                    ac:9e:e5:4d:60:b4:2b:b9:a8:b0:36:f5:5b:3e:f2:
                    f2:bb:a9:da:3e:eb:2f:45:62:3a:2f:43:2f:2c:fe:
                    4f:dd:35:9f:4c:f3:3b:c1:18:d7:f9:6f:2a:bf:75:
                    eb:dc:08:13:79:ae:2a:12:41:1a:5b:d8:38:18:70:
                    0e:70:7a:70:94:88:ee:11:96:6d:e8:e6:0e:ed:f8:
                    4e:0e:87:00:0f:a2:47:58:17:7b:af:bd:68:4b:5d:
                    e6:de:ed:bc:41:83:95:8a:08:c1:6e:3e:fb:c0:8a:
                    05:74:ce:1a:3e:6e:45:fc:2d:7f:9f:e1:6a:26:a0:
                    cf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3B:25:32:D8:E0:1F:4C:21:E4:B5:B1:94:C7:2E:EF:D3:F0:69:D9
            X509v3 Authority Key Identifier:
                keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:4e:90:20:77:9f:ce:06:67:ec:de:9c:66:75:6d:00:85:35:
         20:c8:ab:06:74:82:fc:42:43:d3:ab:86:f9:b7:a8:19:4f:0a:
         5f:24:c8:e4:fe:f7:61:a5:42:01:31:9e:a6:da:ce:c1:fb:1b:
         15:86:27:56:ed:4c:d2:26:fe:07:9f:f7:b4:0a:90:1a:a7:26:
         5a:ef:ce:8a:04:68:78:20:9b:ce:19:0b:35:37:44:b3:41:84:
         28:ce:1b:69:95:9a:69:95:a6:d1:9e:ac:a9:d2:86:8f:c8:bc:
         62:a6:19:34:0e:d3:bf:93:47:97:7b:65:49:98:8a:30:c6:37:
         6b:e4:17:c5:15:2a:e6:f8:50:63:7d:bb:ca:c5:d9:b8:d8:14:
         ef:d6:f9:65:e7:39:7d:ec:2e:df:88:6e:02:07:1d:45:36:b0:
         e9:b2:b5:32:41:75:25:9c:3c:0a:18:44:80:06:00:15:57:b1:
         8a:50:9e:ca:9e:9e:e5:a1:4e:9f:54:62:bf:38:da:d2:33:4e:
         23:4e:c4:a2:50:aa:4d:c7:ed:d8:c1:6d:21:f3:f6:27:f0:45:
         52:a7:f4:a4:e5:e1:43:d4:d1:f9:19:5c:fa:92:49:1a:49:d7:
         29:91:38:b8:17:14:2c:9e:df:62:01:27:d7:80:6a:20:58:2b:
         cf:40:c8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:03:04 2024 by rpki-client on console-fra.rpki-client.org