Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
File:                     UxZZCg6vSN8rGuI7nVWenKwlmX4.mft (raw, json)
Hash identifier:          pgkguUNSoGVIOwUmd4R2mu480L4w9YR8hXDt88o/nVU=
Subject key identifier:   5C:C5:7F:E4:2B:CA:41:F6:2D:5E:D6:E5:1D:22:B9:9D:47:73:4A:0F
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Certificate issuer:       /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial:       018F8FA69A0C3A6032F31E1A17A33FD93511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
Manifest number:          117C
Signing time:             Sun 19 May 2024 07:00:11 +0000
Manifest this update:     Sun 19 May 2024 07:00:11 +0000
Manifest next update:     Mon 20 May 2024 07:00:11 +0000
Files and hashes:         1: 4McoBRYRAxA-sszpdy5KLxc-YnI.roa (hash: E1+30CAfZ1SFC059THB6+UgDRrJIfXOfJ4lVBHa6RCg=)
                          2: BQ1hGwQBqSTd8NJoub3HRH7en9A.roa (hash: gh91iBA7mMdChiyzJuTx1GllA3BhlkeHZaP3ssEigf0=)
                          3: UxZZCg6vSN8rGuI7nVWenKwlmX4.crl (hash: XTUF2xTNZW/oGMDnnPFsWxrm9RNienCTWtHDCn+BCTw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:a6:9a:0c:3a:60:32:f3:1e:1a:17:a3:3f:d9:35:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
        Validity
            Not Before: May 19 07:00:11 2024 GMT
            Not After : May 20 07:00:11 2024 GMT
        Subject: CN=5cc57fe42bca41f62d5ed6e51d22b99d47734a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:a1:3a:8c:c9:f1:da:51:8f:95:e1:08:78:
                    4c:6e:a8:d8:b7:33:95:26:93:76:c2:b2:c1:4b:ce:
                    46:c4:fd:74:2d:1a:26:a0:a8:81:2b:c1:d1:bf:b3:
                    f4:71:a1:cf:05:32:d8:ba:c8:30:0c:11:da:01:d3:
                    0b:be:3b:ac:0f:40:62:4b:0a:52:fc:02:f4:68:68:
                    95:6a:00:d5:af:48:71:80:de:37:9e:fb:bf:15:04:
                    76:f9:4d:04:da:40:bd:64:49:27:a6:46:e1:b8:6f:
                    92:8f:63:79:95:01:50:0c:c2:2c:de:f7:e1:43:19:
                    7a:7e:19:81:b0:fa:61:94:bf:6e:7a:67:a2:88:3e:
                    64:2f:b0:83:a2:56:6c:e4:91:7e:bc:21:3d:4b:db:
                    4b:94:28:82:bc:f5:4b:c2:a1:be:56:d8:e2:0b:c5:
                    62:db:c7:24:4d:75:08:0e:78:a7:f1:e3:33:35:2b:
                    50:9e:d1:e4:82:d3:77:a6:09:c2:c2:71:c1:61:9f:
                    08:5f:0a:83:22:45:a1:09:40:51:5a:cb:1a:fd:e5:
                    72:5d:4f:e7:72:10:a0:51:cf:2d:ac:cf:3d:c9:20:
                    1a:9f:ba:3e:eb:5d:e2:61:8e:a4:10:17:55:9b:8e:
                    aa:23:a5:80:b7:e7:b5:72:66:4c:38:02:1a:60:9a:
                    98:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C5:7F:E4:2B:CA:41:F6:2D:5E:D6:E5:1D:22:B9:9D:47:73:4A:0F
            X509v3 Authority Key Identifier:
                keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:85:b2:dd:89:99:f2:3f:50:32:12:ec:16:b5:df:d7:0a:74:
         12:43:bf:46:04:36:77:ec:7c:3f:b3:32:65:6d:d9:88:a1:09:
         d2:1a:85:27:44:aa:7b:98:05:c1:f2:be:f9:ff:17:3a:0a:de:
         7e:18:29:bc:4f:da:69:ae:e2:37:b5:fc:b3:b6:22:1b:e3:e9:
         40:7b:83:99:34:69:90:9a:81:1c:57:bc:9c:61:dd:26:45:3a:
         44:07:d4:ef:b8:8d:65:4d:7c:b8:af:8f:08:37:e7:28:75:b0:
         cf:f0:e6:4b:ac:ec:79:c2:ea:7d:08:10:61:b7:71:87:7e:b2:
         96:c5:29:7e:8d:11:65:59:47:d8:7e:a1:05:7c:2c:22:ad:6a:
         9f:59:70:50:c8:83:cd:1d:9f:e5:2f:a5:dd:d3:ea:6f:0b:bf:
         05:cf:02:01:c1:3d:e8:d7:b1:1e:e1:33:b2:75:8e:77:b0:41:
         e2:95:d6:24:a5:6b:ee:16:a6:c6:f1:3a:33:96:26:d0:9f:d9:
         91:e0:be:68:bc:48:f1:36:a2:47:04:1c:42:23:f5:da:35:bb:
         3e:00:e5:ee:9e:9a:a9:d5:6b:0e:75:85:5c:69:b3:a8:09:f2:
         2b:11:63:25:69:5b:cc:e2:88:8e:66:97:18:a2:bb:a0:6b:c7:
         a5:c8:24:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:23:48 2024 by rpki-client on console-fra.rpki-client.org