Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
File:                     uNJRxL_VJtoGLUzir1a25G6SURc.mft (raw, json)
Hash identifier:          ZXGDCPLHkFGPBNechLB2dpypk6GVFLwbvs3niVDChRg=
Subject key identifier:   23:46:B2:EA:87:58:91:ED:16:6D:55:28:52:CB:F3:48:10:F6:81:56
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Certificate issuer:       /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial:       018F8E263A8BB6441BA428603B4524BA3D12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
Manifest number:          117E
Signing time:             Sun 19 May 2024 00:00:21 +0000
Manifest this update:     Sun 19 May 2024 00:00:21 +0000
Manifest next update:     Mon 20 May 2024 00:00:21 +0000
Files and hashes:         1: 2B_1g_OKbYC4rH7yh_nmXu9-Np4.roa (hash: jRmudV35iXS7u+QLYHxaStVUT/8rSgW+tGQm269CQiU=)
                          2: KpOrQyrZ9e-dFElidWd2sFeLIGQ.roa (hash: T2DbKuWPhPJAOmBJM0KoKN5Yt5qv20DKMC3t7NGbVI4=)
                          3: Yc36-tpgWIx3ErpaWflPmoCjrdo.roa (hash: 83TISA5agrnDpTYhItJVqDHNq0EnMTIbvGPkGCpfuQQ=)
                          4: j3zdRvhYtHlZWJgeKwuTzi0QxUo.roa (hash: gJVgWJu+5WrnZnO7c/srjqqS1kejydFZewi90QP//Gc=)
                          5: uNJRxL_VJtoGLUzir1a25G6SURc.crl (hash: xd/cG/YyijrjbCY1UO3Q+LLqub8JcxY+WYVbynsJbVk=)
                          6: wl2DfVzzQ5xRy-5N1yM5kvgypco.roa (hash: UoTSTqR/Xa7RbVUV7HsDrRCogTWRdt/FiES9SJocXWU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:26:3a:8b:b6:44:1b:a4:28:60:3b:45:24:ba:3d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
        Validity
            Not Before: May 19 00:00:21 2024 GMT
            Not After : May 20 00:00:21 2024 GMT
        Subject: CN=2346b2ea875891ed166d552852cbf34810f68156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b2:5e:ed:28:bb:f7:39:88:50:eb:d8:ee:e7:
                    3b:29:10:85:c5:21:fa:78:06:0a:c7:eb:22:40:af:
                    1c:6e:e0:38:0f:90:0c:98:ca:3d:bb:c9:56:66:2a:
                    e5:c6:ed:b4:d8:01:f4:ba:0e:44:d4:95:b7:37:31:
                    ca:59:e4:3e:86:03:c9:9f:12:9e:dc:83:55:cf:31:
                    28:c4:f2:76:5e:6d:88:80:55:c7:5f:75:b1:d1:1c:
                    83:be:6c:22:58:60:c4:02:69:07:91:c6:0a:41:bd:
                    c6:4c:1c:88:94:b1:b6:3b:96:85:28:1a:64:3c:af:
                    3a:9b:ec:59:35:b0:02:03:46:fe:0a:0c:67:ae:da:
                    fc:8c:bf:c2:20:22:b6:89:22:88:9c:ec:53:b0:d1:
                    85:98:de:af:0c:4d:f2:31:32:34:4a:86:9f:dd:6f:
                    13:69:2a:18:8e:8d:20:8b:55:12:bd:a4:26:03:0e:
                    89:1b:77:db:77:5c:ca:ef:36:dc:48:f7:e4:a7:85:
                    eb:54:22:ab:d5:51:d7:29:11:c5:e9:ba:75:4f:60:
                    1a:79:8d:67:68:7c:95:46:15:e1:a4:5b:db:b7:07:
                    7a:01:c7:83:f0:ff:e7:2f:7b:d1:c6:84:4d:26:90:
                    bf:03:1e:a0:8a:a5:ff:db:24:40:0e:fe:c5:0a:b9:
                    f2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:46:B2:EA:87:58:91:ED:16:6D:55:28:52:CB:F3:48:10:F6:81:56
            X509v3 Authority Key Identifier:
                keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:36:22:81:0f:6b:be:21:64:1b:7b:24:c2:01:8b:2f:b0:b5:
         83:44:74:28:c2:54:a6:33:67:e4:af:25:6f:bd:8a:d2:86:51:
         39:96:8f:6e:1e:27:df:bd:31:c2:d3:2e:35:36:3d:c2:78:40:
         f1:a2:18:b0:84:d3:4e:69:ad:5a:4b:52:21:5f:ad:4b:84:99:
         76:0e:95:38:fd:83:09:0e:de:b4:92:e6:ae:88:24:a7:27:24:
         0e:2f:73:8c:04:df:08:0b:96:6c:3a:ee:4b:2a:bb:81:33:54:
         45:cc:f4:98:de:97:cf:51:cb:9c:4f:2b:cd:de:20:3a:ef:85:
         18:96:c3:42:95:f0:b7:1f:d1:db:e5:f5:7c:6a:e2:cd:bc:b9:
         87:01:6a:f5:90:c0:71:d9:c4:93:45:01:20:e0:14:88:c6:66:
         a0:cd:22:7e:f9:27:6d:7b:39:10:3e:6b:ae:a9:f2:1b:d0:6c:
         14:bd:93:92:2e:ff:d5:a3:4e:17:bd:68:6a:db:6b:69:7b:84:
         3b:bc:19:69:91:0b:ea:4d:a8:73:1b:e6:e3:6e:b3:46:a6:4c:
         52:64:01:16:3f:b8:fd:94:35:f2:60:1b:ea:48:40:70:f6:0f:
         42:4b:75:10:e7:2a:ac:c7:17:9d:40:7a:bc:ae:6f:59:a2:92:
         42:67:7c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:07:29 2024 by rpki-client on console-fra.rpki-client.org