Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File:                     LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier:          MQbTyzRe1O6EhJSeGwhxeaaQxKz125eYpnud176bgrA=
Subject key identifier:   6C:C4:12:0C:F0:8E:F7:54:6B:8B:A3:94:78:3C:4C:4F:69:59:41:06
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer:       /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial:       018F86A3B4F1C134FF2F08994842247F4C6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number:          0A24
Signing time:             Fri 17 May 2024 13:00:26 +0000
Manifest this update:     Fri 17 May 2024 13:00:26 +0000
Manifest next update:     Sat 18 May 2024 13:00:26 +0000
Files and hashes:         1: DSrlpTjz-49uIHUko66hj-egkTM.roa (hash: JYf4t6K730580lcQA6YGqHLFBHlaZ0Ublr/295KJPHk=)
                          2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: UbA1SRca2z81qLiRDYynWo1BcesfanQKWlLLpbPDw3k=)
                          3: ssPqQnAvYvovvcck-_F-8gPwawg.roa (hash: 8N01R6wqxjFiH/XnChJPBaqAeA2RonHHHbx/WT7hEoI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:b4:f1:c1:34:ff:2f:08:99:48:42:24:7f:4c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
        Validity
            Not Before: May 17 13:00:26 2024 GMT
            Not After : May 18 13:00:26 2024 GMT
        Subject: CN=6cc4120cf08ef7546b8ba394783c4c4f69594106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:30:af:d8:ca:d1:83:6c:bf:01:ac:e7:7f:e0:
                    34:a3:10:98:4f:0e:19:1c:7d:b8:93:60:e2:9f:78:
                    1f:45:74:0e:d4:00:f8:03:63:dc:d5:25:ea:ce:c0:
                    e8:8d:a6:1e:6a:36:d0:bb:46:7f:81:77:c5:93:6b:
                    48:a4:c4:8e:ca:43:93:a0:36:28:90:04:27:fa:2c:
                    f0:d6:7f:37:1d:18:c3:78:b3:f4:17:4c:0d:e3:89:
                    a9:04:a5:7c:55:79:f1:1e:9c:70:12:5b:c6:03:fb:
                    36:6b:bc:0e:56:e4:84:cd:0f:56:6e:0c:fb:27:49:
                    c8:5b:dd:a3:b4:e3:47:cf:95:73:41:ec:5c:5c:99:
                    35:c7:7f:4a:0b:82:b5:04:97:57:5b:39:c8:74:86:
                    ab:1a:45:cb:ab:1f:6b:7d:76:3a:77:8b:a1:52:dd:
                    85:67:02:fb:50:58:85:d9:2c:7e:f6:9c:f4:e3:6a:
                    dc:c7:3c:0e:50:e7:20:5a:a0:6b:6e:dc:3f:88:4e:
                    c2:37:60:97:db:fe:ca:79:83:7d:77:ec:0b:8b:d7:
                    91:13:d3:a7:3f:b0:6c:ba:e8:ff:39:6d:cc:a6:56:
                    8f:3f:47:f9:c5:bf:72:33:af:54:15:a3:41:b9:99:
                    ba:2a:49:6d:88:fa:74:da:f3:ea:aa:24:c0:f3:2a:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C4:12:0C:F0:8E:F7:54:6B:8B:A3:94:78:3C:4C:4F:69:59:41:06
            X509v3 Authority Key Identifier:
                keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7d:1f:e1:70:39:27:d9:26:16:76:66:ce:d4:90:60:9c:66:
         c5:78:79:64:df:2e:c6:ae:99:c6:a8:50:e4:61:b6:65:6c:3d:
         fc:fc:c2:3c:90:18:b7:13:a6:7d:76:94:03:8a:a4:ae:15:32:
         90:ab:92:aa:ea:f4:46:18:21:b9:73:64:4d:15:60:09:e9:5b:
         45:7d:d9:87:9d:61:5a:8a:55:b6:95:0a:07:b8:82:96:6c:dd:
         dd:6b:61:43:1a:12:11:b3:ac:d8:a3:19:9c:62:f4:1a:23:2b:
         77:96:94:2f:cc:7f:da:fe:04:e0:99:81:c8:8a:9c:9d:f0:c3:
         7c:77:d2:14:65:0d:08:58:cc:f2:35:1e:40:7d:3c:2c:22:21:
         6e:b5:ec:04:05:50:54:6d:f6:e0:09:a2:cf:6e:e7:41:99:c4:
         2f:77:cd:b4:bd:fe:4f:32:e0:0e:b8:ed:64:ac:f7:bb:f4:ec:
         e6:fa:db:d9:41:13:e4:50:95:48:0e:5b:58:db:c2:a9:cf:37:
         cf:31:06:a7:ba:e6:4d:45:ea:da:b0:bc:84:bc:dc:6d:4d:ed:
         d2:bc:6f:da:97:39:e7:bf:71:69:21:48:75:47:72:65:bc:56:
         de:de:1a:fe:14:e9:67:35:05:88:24:b4:3b:64:51:fc:f1:42:
         a4:5d:1c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:58:06 2024 by rpki-client on console-ams.rpki-client.org