Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/lA4qcW5diYld_qLvKQMIHe3pnGg.mft
File:                     lA4qcW5diYld_qLvKQMIHe3pnGg.mft (raw, json)
Hash identifier:          LEesJpAjJDrKP5TdLi+2zuYcOPyt4GdsnZQ6pQuJw/M=
Subject key identifier:   DD:51:F4:86:F0:47:0C:0C:35:98:78:21:BB:2E:17:BA:D6:7B:DD:6C
Authority key identifier: 94:0E:2A:71:6E:5D:89:89:5D:FE:A2:EF:29:03:08:1D:ED:E9:9C:68
Certificate issuer:       /CN=940e2a716e5d89895dfea2ef2903081dede99c68
Certificate serial:       018F88922844148876CF08B802DF113E1F7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lA4qcW5diYld_qLvKQMIHe3pnGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/lA4qcW5diYld_qLvKQMIHe3pnGg.mft
Manifest number:          0E37
Signing time:             Fri 17 May 2024 22:00:30 +0000
Manifest this update:     Fri 17 May 2024 22:00:30 +0000
Manifest next update:     Sat 18 May 2024 22:00:30 +0000
Files and hashes:         1: 8e4Eyom1DEiwtMxO7Nlo_unBXk8.roa (hash: /qGKh2MXI1F1nEzbOiPb21ax/0kL39BCO/H45a0wYOE=)
                          2: lA4qcW5diYld_qLvKQMIHe3pnGg.crl (hash: DeIkmiGj99qJS6p/HnvHYbp4WosRVHpig3DSzoHQAxk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/lA4qcW5diYld_qLvKQMIHe3pnGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/lA4qcW5diYld_qLvKQMIHe3pnGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lA4qcW5diYld_qLvKQMIHe3pnGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:28:44:14:88:76:cf:08:b8:02:df:11:3e:1f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940e2a716e5d89895dfea2ef2903081dede99c68
        Validity
            Not Before: May 17 22:00:30 2024 GMT
            Not After : May 18 22:00:30 2024 GMT
        Subject: CN=dd51f486f0470c0c35987821bb2e17bad67bdd6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:18:6e:28:81:33:95:a8:f9:79:d0:10:43:
                    23:ce:6c:f1:fa:a6:ae:fc:05:e5:e5:b5:b8:21:3b:
                    68:d8:77:66:e0:e3:3a:58:31:33:74:aa:d6:af:18:
                    e3:2d:3a:3f:33:48:83:77:7b:59:69:77:39:22:c1:
                    49:2a:d5:f6:3e:8d:33:c3:6e:82:e7:07:68:dc:31:
                    1b:b4:60:b5:0f:47:98:e4:56:7f:7b:ec:94:4b:db:
                    05:54:2d:07:1c:cb:d4:99:aa:3f:df:04:de:2e:ac:
                    0f:cf:af:cb:98:a4:98:ff:7d:b3:35:4b:cb:d3:2e:
                    6f:8a:f0:35:c6:07:fc:96:94:1f:b4:92:9a:96:38:
                    b0:53:dc:73:9d:11:e7:21:b1:c9:d5:c8:2c:19:42:
                    2e:df:1c:c6:4c:60:87:af:59:0f:d8:d4:0d:ba:f0:
                    92:9b:51:bc:5d:26:c1:b8:5e:05:55:47:dc:69:f1:
                    37:1a:f7:30:b7:e6:46:24:7a:86:1f:b5:00:4f:05:
                    26:88:f1:96:d4:0f:b0:51:bb:2c:df:5d:03:2f:be:
                    00:e5:9f:47:f9:b5:e8:14:94:34:ad:8f:fe:83:3e:
                    54:a8:89:82:09:4c:0b:5a:41:aa:40:f1:5d:07:ca:
                    41:91:be:7c:76:a1:14:74:a8:2f:e7:af:07:e3:0a:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:51:F4:86:F0:47:0C:0C:35:98:78:21:BB:2E:17:BA:D6:7B:DD:6C
            X509v3 Authority Key Identifier:
                keyid:94:0E:2A:71:6E:5D:89:89:5D:FE:A2:EF:29:03:08:1D:ED:E9:9C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA4qcW5diYld_qLvKQMIHe3pnGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/lA4qcW5diYld_qLvKQMIHe3pnGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/lA4qcW5diYld_qLvKQMIHe3pnGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:3a:f2:14:1a:4a:8a:6a:da:48:43:24:d5:cf:21:51:43:79:
         ae:14:bd:b3:ec:04:4c:64:41:a0:02:e9:61:85:2d:f6:4e:3f:
         1a:b1:d7:ee:0f:72:dd:4c:32:66:a3:e4:19:5a:5a:98:56:14:
         d9:7c:7d:45:9c:2d:cc:39:6b:aa:68:57:b4:30:bf:83:c2:31:
         a4:66:8b:17:85:9e:18:b4:2b:62:ec:13:31:18:cb:ef:6b:31:
         03:95:d3:6b:a8:7e:88:5d:d9:73:09:12:c0:c9:79:8b:f1:58:
         15:e7:a4:09:6d:3e:9d:3b:b2:b3:3b:24:b1:f1:01:1d:ad:1b:
         b5:ac:8b:24:a1:69:9a:e9:27:b3:40:23:86:0e:6f:89:d1:65:
         eb:58:99:74:ca:c1:25:ad:f3:2f:51:bd:ba:c3:c7:c0:de:8b:
         5f:8e:2e:36:ed:9a:be:69:e9:3e:a0:43:ee:0e:e3:fe:0b:40:
         82:ec:e9:4e:b9:49:5f:48:24:46:b3:9d:3c:40:1b:c8:11:60:
         aa:4d:87:6e:91:d0:14:8a:81:c5:f7:e3:b3:d1:c2:77:73:81:
         1c:08:3a:d4:9d:48:15:cd:2e:bb:b8:e2:11:f7:f0:1b:e9:19:
         27:a9:4d:18:47:37:ad:d3:ab:e3:e7:01:7d:5a:1f:c9:13:03:
         20:dc:92:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:43:37 2024 by rpki-client on console-ams.rpki-client.org