Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
File:                     lIlI8N1eL7CpArl5ypxcGkT5j6E.mft (raw, json)
Hash identifier:          je3ix3RSLTTOKhHVkaWcJXiwP07g2qQeOPd19RvWbrw=
Subject key identifier:   E1:C1:4D:4D:AF:A1:69:37:75:7F:79:8A:E9:20:A9:9A:EF:3C:77:2C
Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
Certificate issuer:       /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Certificate serial:       018F874978D71475F081F8276DF687F2B468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
Manifest number:          0E06
Signing time:             Fri 17 May 2024 16:01:30 +0000
Manifest this update:     Fri 17 May 2024 16:01:30 +0000
Manifest next update:     Sat 18 May 2024 16:01:30 +0000
Files and hashes:         1: G0hsxQzdLR_AJC2MsN40qKSROz4.roa (hash: PA+7EM3Gl1XEfnqVt2uffIHNSX4mEcbXJTbl8qkYe2E=)
                          2: lIlI8N1eL7CpArl5ypxcGkT5j6E.crl (hash: z0/5PqT+P3pW/cTRTjjyeAGJ3v5eHcKosoF4yjisSx4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:78:d7:14:75:f0:81:f8:27:6d:f6:87:f2:b4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
        Validity
            Not Before: May 17 16:01:30 2024 GMT
            Not After : May 18 16:01:30 2024 GMT
        Subject: CN=e1c14d4dafa16937757f798ae920a99aef3c772c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:a2:9c:a5:af:39:75:ce:4b:ae:d1:6c:03:
                    47:b2:12:fc:fd:90:93:2d:cd:58:c1:5d:c3:de:a2:
                    49:2b:6c:2c:8e:31:4f:ad:85:1e:29:70:0c:96:6f:
                    d3:bd:e1:bb:49:25:27:a4:fc:e1:b7:b6:31:38:e3:
                    27:b0:c7:6a:77:a7:52:9f:19:37:4e:70:f5:87:f8:
                    b2:a9:05:e9:13:1a:75:c9:7c:6a:ae:59:7a:2d:0d:
                    a0:06:d5:8e:7d:8b:55:35:a4:df:f3:e4:ca:28:bc:
                    30:fe:b0:a6:e7:9e:ea:f4:26:5e:16:e9:c6:94:34:
                    ed:9d:73:92:4e:ef:0e:38:77:1e:c2:5b:9e:0c:ef:
                    c1:d6:94:76:83:6c:46:01:09:0f:66:64:59:61:e5:
                    1f:c0:2f:68:d3:73:41:05:25:54:80:15:4a:84:89:
                    39:92:a4:2b:7c:4c:b1:ae:d8:30:1d:40:b1:33:ff:
                    ff:32:a1:d9:69:7b:a3:04:2b:ad:45:7c:c1:7a:94:
                    d6:55:13:b7:0a:1f:36:37:e7:0b:41:f7:06:72:93:
                    41:70:52:bd:61:37:28:63:29:cc:d5:0d:3c:a7:81:
                    5b:c9:ea:df:b1:00:aa:89:26:6d:e4:47:74:28:b7:
                    21:7e:0b:3f:41:f6:93:fd:b7:91:ce:42:32:d9:f9:
                    93:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C1:4D:4D:AF:A1:69:37:75:7F:79:8A:E9:20:A9:9A:EF:3C:77:2C
            X509v3 Authority Key Identifier:
                keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b2:9f:8b:89:65:41:fb:79:7d:7a:74:c4:42:5a:13:3d:cf:
         d1:2a:4e:48:83:49:00:a9:82:63:ce:9f:5a:bc:90:67:a1:0a:
         da:42:61:55:93:ca:8a:85:bf:2b:b2:55:cd:29:ad:df:dc:96:
         b1:b9:4f:bf:c1:c0:92:ac:94:e0:1d:3b:2f:c6:4b:25:36:ff:
         0f:ab:05:51:8f:5a:c7:9c:ea:e4:cb:78:9f:60:f7:e0:bd:10:
         7b:0a:aa:ed:a3:03:07:a9:8e:51:06:5a:3b:8a:7f:5c:dd:10:
         b0:f8:f5:04:8b:26:a4:e6:33:ab:ed:cd:0a:3c:e8:33:e6:36:
         4b:2f:e8:11:9f:f6:9c:16:7e:a3:82:50:df:cf:31:81:ea:69:
         4c:55:5d:c9:f6:6c:a5:8f:31:78:1d:32:02:7c:a6:87:6f:e6:
         6c:73:7d:c7:7e:85:60:22:3f:23:fa:2b:61:ec:f4:b6:c7:34:
         dc:b1:74:ad:d6:95:85:e1:72:1d:2a:50:4d:f9:29:53:57:92:
         a7:8c:b8:54:40:d2:54:98:1f:0e:03:43:53:1b:fe:33:a7:22:
         61:1e:5c:09:50:0d:a7:39:0d:64:78:cf:2f:59:a8:a6:54:0e:
         d0:06:ad:77:9d:34:17:18:1d:f9:e1:67:b3:51:0f:d0:5e:82:
         a1:cf:e5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:21:31 2024 by rpki-client on console-fra.rpki-client.org