Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File:                     uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier:          IDucqylY4Emndvowj+b4fyCMYZZkRuNEl5yKZuMveHU=
Subject key identifier:   97:93:84:90:89:4F:20:0E:56:C4:15:DF:64:23:DE:83:DB:77:AC:EA
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer:       /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial:       018F91CC28B1C20560FF299CD58E303782D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number:          117D
Signing time:             Sun 19 May 2024 17:00:27 +0000
Manifest this update:     Sun 19 May 2024 17:00:27 +0000
Manifest next update:     Mon 20 May 2024 17:00:27 +0000
Files and hashes:         1: 0XIZ0KBzLbBni7dyrMmiE5z4S5g.roa (hash: JkYjhzHKhvn+4gP1SNZap+SKL/gV6y6NDUkSSmLHGfU=)
                          2: FLV4Zh20tn7CVUTDOPHkhZPTk70.roa (hash: uaaBAVkA9rsszptKloarAXMzvQ81784ZnKbERI4a/98=)
                          3: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: zxgZ4KABiRXp9uWpgf3FLiJ7SIFCoNiyFZhK3qyk/zE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:91:cc:28:b1:c2:05:60:ff:29:9c:d5:8e:30:37:82:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
        Validity
            Not Before: May 19 17:00:27 2024 GMT
            Not After : May 20 17:00:27 2024 GMT
        Subject: CN=97938490894f200e56c415df6423de83db77acea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cb:1b:1d:c3:ea:5f:2b:17:6d:56:cd:89:4f:
                    81:03:01:90:33:43:fd:c1:11:0f:75:27:c9:8a:23:
                    b3:74:5f:e9:9c:5b:de:6b:ed:73:67:a0:4e:8d:96:
                    a4:b7:ad:90:07:5d:d4:ec:33:0d:9f:e2:e9:73:39:
                    d4:5f:f9:18:ba:6d:fe:0d:c2:f4:14:ce:ab:dc:e5:
                    fe:12:8d:aa:47:f1:28:53:7e:e8:5c:9f:60:12:c5:
                    25:ed:e1:c5:97:49:7d:95:40:f9:0c:06:0c:e2:10:
                    67:eb:3f:f1:2b:d2:6c:8a:b5:5b:40:84:85:71:da:
                    6c:aa:d0:af:ea:0d:10:77:56:a1:c5:e2:d9:17:2e:
                    57:1e:4d:77:30:8d:75:e7:ff:ca:42:7d:8e:51:04:
                    73:f6:c9:88:2f:5c:5c:b0:2d:a4:f2:ae:e7:a4:32:
                    b8:e0:8e:3c:aa:be:dc:9a:8f:c0:94:7b:66:df:9d:
                    85:c6:e2:35:71:f0:1e:07:3c:61:3a:3c:41:06:ef:
                    74:60:dd:97:04:fd:c0:2e:81:01:6b:08:b7:f9:ff:
                    4b:e3:64:e0:6f:5a:98:3b:13:bd:8e:b2:f2:ae:04:
                    7b:4f:1e:25:91:47:54:32:7f:14:27:40:34:86:5d:
                    b7:0f:0a:50:02:60:6a:13:7d:c6:7d:3c:e8:02:06:
                    93:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:93:84:90:89:4F:20:0E:56:C4:15:DF:64:23:DE:83:DB:77:AC:EA
            X509v3 Authority Key Identifier:
                keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a2:30:66:4a:57:1a:83:8a:45:3d:03:78:2c:31:88:2c:2f:
         8d:2a:f3:6d:a3:92:74:0c:5b:ad:45:67:69:a9:d4:f9:f5:4f:
         9d:72:79:74:1b:ba:fd:d4:08:3c:d4:78:6e:ab:1a:6f:76:8b:
         02:8c:37:40:78:2d:c2:ee:d2:3a:b7:1d:88:98:fb:ca:d3:a8:
         ba:71:4b:8b:f9:a6:1f:d9:78:37:8c:47:2d:05:b1:31:43:b1:
         03:33:8b:74:23:6c:0d:ea:65:38:45:e6:e6:9b:85:1e:47:58:
         02:3a:e4:37:c2:c2:98:73:50:1e:86:85:f2:8a:bc:e1:a9:16:
         d2:82:17:22:f4:20:32:d5:1e:1a:c3:fc:c4:6c:ed:44:28:e6:
         e6:99:50:65:85:c2:b9:19:1d:d2:00:d0:f0:58:21:8a:0d:dd:
         86:67:7d:ec:93:64:ba:dd:09:3b:35:15:f3:d1:0a:18:31:b1:
         76:28:e6:d5:0d:44:0e:65:ff:f8:3f:e1:72:e6:5d:d4:75:06:
         72:16:7f:a3:49:5c:0c:d1:bf:db:b7:1e:aa:03:40:5a:a7:37:
         fe:a5:19:25:7f:17:78:d7:ed:1e:db:0c:54:db:6c:a3:13:05:
         b3:92:82:9e:c9:cd:2b:00:27:26:99:0b:65:22:3c:51:65:dd:
         c8:3d:df:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:56:29 2024 by rpki-client on console-fra.rpki-client.org