Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File:                     lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier:          oALr7Qah+iGSyYBBDrsFoOk3FfZcbOgs7s97O60cZl8=
Subject key identifier:   41:DF:D3:A5:74:A4:AB:40:D3:0C:C5:B5:02:72:63:56:3F:E1:54:92
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer:       /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial:       018F82C716DD3C9B55047B655818D782146F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number:          0A8F
Signing time:             Thu 16 May 2024 19:00:36 +0000
Manifest this update:     Thu 16 May 2024 19:00:36 +0000
Manifest next update:     Fri 17 May 2024 19:00:36 +0000
Files and hashes:         1: LTfGB2oVia27haJCTBsPNBby1D4.roa (hash: rJV0KX1QkOOZ9tGuNc+wMczUJ6rQgnPcf1BYf+ZeRCM=)
                          2: RvRWJlb1vfz2aWKvNUO9WlD1_Oo.roa (hash: R6w/TluzVo4R60tBlAOUzH2yWQskJ2jaKfNj/YfXDLQ=)
                          3: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: 9zyo/FjOaRPIchP8BVsZd5YMnNjJb5+eU9gske//JuE=)
                          4: n-fBP_tQN3d5kTxVsVAbB-MstPg.roa (hash: ABjEgwjWORdgGkVb6w5+xAv5lz4lwRV1397tQZyRDSA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:82:c7:16:dd:3c:9b:55:04:7b:65:58:18:d7:82:14:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
        Validity
            Not Before: May 16 19:00:36 2024 GMT
            Not After : May 17 19:00:36 2024 GMT
        Subject: CN=41dfd3a574a4ab40d30cc5b5027263563fe15492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:eb:dc:54:48:b9:d4:bd:49:2d:a6:90:9c:f8:
                    44:03:df:01:79:f4:88:eb:fa:ee:9b:30:b2:c1:7b:
                    49:ee:f5:75:ba:da:5e:74:cb:6b:83:30:82:d6:97:
                    26:b2:ce:39:fe:de:e7:f7:c4:ac:68:38:71:68:4f:
                    22:9f:19:d1:e5:d4:ec:3d:69:8a:94:8a:2b:c2:ea:
                    f0:7d:37:86:dc:ee:28:59:ef:c5:e7:69:4a:38:e5:
                    e3:d0:95:80:17:48:05:9f:56:c3:ac:ce:1f:05:39:
                    50:55:d4:d0:19:22:77:14:62:47:98:cc:0a:ba:46:
                    8e:3d:70:bc:81:3e:e5:ef:83:98:47:7c:3c:35:49:
                    1a:dd:37:3f:fb:52:35:38:06:75:97:b2:b9:3c:38:
                    ea:ca:4d:d4:d5:1b:b9:be:93:5f:c5:20:ff:90:f4:
                    c9:f2:3c:04:c6:9d:d5:30:f7:19:f5:a9:46:9d:cb:
                    2c:d0:49:b3:1e:22:dd:57:6a:35:0d:ab:9e:f1:11:
                    cb:a3:6d:5a:87:d4:9a:03:57:aa:c3:7a:e0:46:2a:
                    7f:9b:b4:0b:33:31:93:7c:b1:72:a9:75:86:e3:8d:
                    38:08:ca:33:c0:d0:dc:88:04:db:e7:f1:21:c1:23:
                    ab:1c:71:12:87:8e:71:f2:bb:41:83:4e:17:3b:9f:
                    c5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DF:D3:A5:74:A4:AB:40:D3:0C:C5:B5:02:72:63:56:3F:E1:54:92
            X509v3 Authority Key Identifier:
                keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e0:59:7d:a7:70:1c:1c:58:a3:41:b5:72:7b:df:96:96:7d:
         b2:e7:82:6d:56:63:30:49:d1:3b:eb:38:3a:b2:10:2c:a5:cb:
         34:1f:72:75:0b:af:34:ac:9f:80:47:5b:1b:cc:fc:2e:06:f0:
         f7:ef:71:f6:23:fb:e0:16:18:1f:8f:14:9b:db:1e:88:e0:ad:
         18:54:2d:cc:a7:6f:5a:52:a4:c4:63:81:04:cc:42:b9:76:e4:
         9f:98:2a:60:0a:3b:df:ba:5d:c1:6b:25:5b:8b:e4:2c:fe:f7:
         21:8c:bd:75:7d:21:80:6b:0e:9c:e7:3d:de:2c:92:3a:94:32:
         cc:2f:06:13:33:ca:ae:e2:ee:19:6a:46:85:91:f8:a9:83:31:
         65:ea:fe:b9:b8:8f:e5:81:a8:6a:da:ed:12:d1:fc:21:ab:57:
         a7:bd:6d:8e:32:1b:2f:9d:7b:19:2e:62:06:5d:aa:a9:e7:3b:
         30:3b:cf:46:ce:aa:7b:ed:ba:3a:27:f9:58:7d:ba:3d:9b:4a:
         6a:82:2f:e6:61:a2:97:c0:b2:fe:95:d5:11:86:8c:65:01:c5:
         13:56:ba:87:d7:79:4f:54:a8:44:b1:ab:6b:0a:70:36:13:86:
         e4:c0:35:62:6c:d9:c8:c2:54:60:91:47:93:83:94:fb:cd:93:
         b8:34:a5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 20:56:37 2024 by rpki-client on console-fra.rpki-client.org