Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
File:                     l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft (raw, json)
Hash identifier:          jJS+Q4sYpuwpmlFp9ub9uufLCDgit0fGKbHskyRew5Q=
Subject key identifier:   66:C4:A5:45:2F:BB:AE:FD:14:D8:29:CA:9B:9C:9C:25:54:47:7E:E7
Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
Certificate issuer:       /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Certificate serial:       018F885B32724D022AFB3321FEF049FD164D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
Manifest number:          C3
Signing time:             Fri 17 May 2024 21:00:29 +0000
Manifest this update:     Fri 17 May 2024 21:00:29 +0000
Manifest next update:     Sat 18 May 2024 21:00:29 +0000
Files and hashes:         1: cJfy5t-6ngE8M8Xv2CyiDGzIJu8.roa (hash: 4mwQR1Fs2XPMSZGTAbNb1uO3WtHn+HYQUW3BzhiZVQU=)
                          2: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl (hash: +9peAavmshsvxLKsaHtIAGUDJ5fAGNyX4BPd1n8UJOo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:32:72:4d:02:2a:fb:33:21:fe:f0:49:fd:16:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
        Validity
            Not Before: May 17 21:00:29 2024 GMT
            Not After : May 18 21:00:29 2024 GMT
        Subject: CN=66c4a5452fbbaefd14d829ca9b9c9c2554477ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:c7:95:97:6b:5c:10:8b:d2:db:7c:1b:97:
                    d1:ee:55:3d:25:f7:23:62:16:c5:83:28:ae:6f:68:
                    0a:b5:53:4a:80:d2:fd:9f:99:32:53:14:5f:62:23:
                    b4:90:ca:6c:36:04:37:e9:fe:df:fa:fd:40:a8:2c:
                    a4:e5:52:6b:1b:6d:a4:60:e3:3f:b2:59:c1:a0:43:
                    60:76:0b:19:7f:44:86:35:fd:11:85:84:40:89:c6:
                    58:50:83:22:4a:be:3a:42:fa:c3:5e:41:63:4d:35:
                    be:54:2f:05:0d:a3:94:d3:52:d3:85:7e:24:38:e0:
                    bc:36:74:42:f5:52:76:ae:a1:9c:ee:cd:54:90:ee:
                    d1:8f:ca:e9:78:0f:03:99:4e:a5:b4:d5:94:34:ce:
                    64:5e:ee:0f:32:d0:40:5e:d5:da:b3:0d:cf:c0:90:
                    39:f3:31:21:bb:5d:98:3a:1a:04:57:5c:88:e2:f3:
                    72:bf:c0:bd:bd:63:62:50:77:7b:77:11:3b:8e:52:
                    df:bf:ab:fd:c0:d8:dd:a4:c5:9f:80:ad:de:04:44:
                    95:d3:52:16:6b:33:b2:06:d4:0f:75:5b:41:f3:b7:
                    c1:b4:1f:b0:d0:e6:0b:3c:1e:92:20:5c:1e:77:1a:
                    ad:7a:98:df:53:02:37:4c:11:94:f8:2a:8e:ea:f1:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C4:A5:45:2F:BB:AE:FD:14:D8:29:CA:9B:9C:9C:25:54:47:7E:E7
            X509v3 Authority Key Identifier:
                keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:95:1b:7a:d4:b6:ca:ec:96:fa:ec:73:5b:5b:ac:e6:19:7c:
         62:60:75:4c:ee:2f:ea:dd:e3:b7:31:cd:50:0d:d2:30:40:67:
         89:62:76:df:c9:c6:d5:0f:fe:df:11:4e:ff:38:96:41:ec:76:
         7c:0e:c1:18:5b:3d:d4:3c:79:32:ed:3a:c3:8b:b1:35:af:0d:
         7a:69:dc:b6:36:5b:ba:1d:04:1f:2d:7d:ca:e4:c6:ba:c7:dc:
         cf:52:15:4e:14:c7:b4:bf:a1:86:87:db:6e:1e:91:b1:15:95:
         30:38:f1:e4:4d:e6:b4:fe:ec:ce:63:56:7b:27:21:b4:89:02:
         95:0d:67:2f:3f:d2:ef:2a:78:e5:25:9d:70:a1:47:22:14:1f:
         71:47:94:ce:0f:54:e5:3d:de:f8:8f:64:7d:c5:59:4f:36:cf:
         7a:61:f4:8d:fd:4f:fe:66:f4:eb:25:c7:c7:70:d3:dd:e8:70:
         aa:fa:16:79:ac:f3:c7:d2:bd:76:22:9b:07:ea:10:3e:1a:49:
         5d:d0:f9:56:d6:1d:9e:e9:a9:91:80:8d:83:7a:d5:f7:71:6e:
         ea:5c:ba:f6:bc:3a:ea:c5:e3:33:1c:e1:a3:9f:4f:9a:87:57:
         2d:ad:e0:a3:96:92:04:65:a0:74:40:37:7f:eb:9f:d9:37:d5:
         d9:68:36:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:07:19 2024 by rpki-client on console-ams.rpki-client.org