Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
File:                     lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json)
Hash identifier:          SSUWsLICzyt/xuGK4c5edk6PqH987C/FzqxdLQx4xbM=
Subject key identifier:   FB:94:B0:14:37:2E:6C:86:1F:D5:CA:E5:02:D8:DD:F2:28:0E:FC:2E
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Certificate issuer:       /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial:       018F86A40C103D2A2366FD8AF98CF36B6EE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
Manifest number:          0856
Signing time:             Fri 17 May 2024 13:00:48 +0000
Manifest this update:     Fri 17 May 2024 13:00:48 +0000
Manifest next update:     Sat 18 May 2024 13:00:48 +0000
Files and hashes:         1: Ya_h4H5TBTRtMc7SOjh392jn5FA.roa (hash: xnSn0poed0diF78E2oDs1yfxJtWFBKfheVoP2rEJEQ4=)
                          2: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: USPrkXBrPQsCEUH1VrylOtbVPvgw3/OIbOhGFZPTeUk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:0c:10:3d:2a:23:66:fd:8a:f9:8c:f3:6b:6e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
        Validity
            Not Before: May 17 13:00:48 2024 GMT
            Not After : May 18 13:00:48 2024 GMT
        Subject: CN=fb94b014372e6c861fd5cae502d8ddf2280efc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:21:e6:79:ab:59:bd:36:6a:8e:87:d7:26:
                    92:29:bf:ec:16:27:ea:b3:4a:4d:ea:fc:ea:f3:ae:
                    46:c1:a0:07:cb:d9:c9:92:a4:7b:c3:12:9a:f9:2b:
                    9c:fe:37:13:7d:be:fe:98:88:49:9d:35:db:00:43:
                    95:57:45:06:a5:c3:35:d6:b6:34:64:f8:9f:47:81:
                    44:2d:70:3a:c9:43:12:15:be:dd:45:d4:87:5c:3f:
                    ab:9e:39:ba:cb:44:c0:7a:b1:c6:0c:54:cb:79:e5:
                    9b:3b:99:d7:f3:07:f6:ef:68:42:4e:1e:e3:12:fd:
                    52:97:c5:ea:9e:03:c1:cb:95:68:46:71:04:3a:f5:
                    7a:83:23:23:9d:33:b9:78:f3:7b:d7:51:bb:b5:94:
                    64:c2:b7:4e:55:4c:f9:83:76:d4:62:9d:88:99:8d:
                    e8:84:ce:f2:42:9f:f3:90:88:0d:3f:b4:80:55:c8:
                    8b:47:ae:47:40:90:21:aa:18:1d:93:77:d8:49:d7:
                    e8:d3:a8:17:85:4b:db:34:96:83:d5:40:fa:8a:42:
                    05:3e:0c:1a:de:5e:a5:00:34:0c:0b:42:d9:5b:f3:
                    be:be:95:ca:39:5d:d3:99:49:33:ef:a2:99:4b:c3:
                    1b:3e:05:c6:52:3c:c8:bd:1c:c1:a1:12:d0:4d:06:
                    c7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:94:B0:14:37:2E:6C:86:1F:D5:CA:E5:02:D8:DD:F2:28:0E:FC:2E
            X509v3 Authority Key Identifier:
                keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:37:45:b2:15:ea:43:97:39:58:23:02:37:a4:1a:ed:3d:44:
         a8:f0:3a:8b:54:d6:f2:62:2e:92:db:0a:0e:33:bf:a0:45:25:
         22:f0:f2:60:ff:a2:12:86:00:70:a9:07:0f:31:68:b3:25:e6:
         8f:69:8c:cb:bb:a7:56:63:d2:58:13:4f:28:1a:b6:42:95:44:
         b5:23:02:23:9c:81:e8:6d:25:36:08:9b:fa:09:1c:87:15:ec:
         a4:58:7d:2c:c2:cb:04:b5:3b:4f:ec:f5:83:10:0b:7f:8b:7e:
         b2:8d:1e:e5:83:1b:90:f8:8d:c2:31:83:f4:2f:39:bc:c9:7e:
         40:05:29:b2:bc:6f:4e:33:21:77:5b:88:04:9b:ae:1b:6b:a2:
         bd:43:81:ef:7b:15:7f:8d:73:74:7d:b9:31:49:8a:14:08:1f:
         b2:0d:12:cd:ef:13:a8:99:70:7f:16:2b:7f:a4:1b:ec:46:1a:
         ab:bf:b7:21:75:6d:7d:62:9e:64:00:0b:a9:52:48:19:ac:32:
         b0:6d:92:fa:f6:f5:56:18:b4:ac:bc:ad:23:c3:73:3a:1b:8a:
         bb:41:9f:af:cb:91:c9:24:11:5d:bd:ac:66:2b:70:a7:0a:f1:
         e6:4a:79:40:f2:a9:5f:0d:ce:50:0a:4a:e3:2b:de:d5:54:10:
         6d:78:cb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:57:32 2024 by rpki-client on console-ams.rpki-client.org