Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
File:                     U_R6clx2jU3nj7MbtA_hbroZ8g0.mft (raw, json)
Hash identifier:          udC5vNcU2OnN/VugET5QjYMUNH2MCbjfS38Ry2q78YQ=
Subject key identifier:   8B:B1:37:EB:63:55:5E:5B:D1:BA:63:5E:33:D2:C0:1A:4A:66:74:7C
Authority key identifier: 53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
Certificate issuer:       /CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
Certificate serial:       018FABFB691F82A8027289D109A23BCF8CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
Manifest number:          04AA
Signing time:             Fri 24 May 2024 19:02:11 +0000
Manifest this update:     Fri 24 May 2024 19:02:11 +0000
Manifest next update:     Sat 25 May 2024 19:02:11 +0000
Files and hashes:         1: FJDfo9uNeuzaeFtBxgp66S0WRAA.roa (hash: WUWOgm3FxEU6+dEiJYSBQOaqBaoWQhLPeeteXCSqwxI=)
                          2: P0OxtFmFtiDHTNn92xY_JpRRpYE.roa (hash: h10jqpGcyY8uvsflw6sG4XOOrO1TLnvlhnWmFY3FNAM=)
                          3: Pm_z3REyQkP_ICGaQCDoZfaFcpE.roa (hash: QX4XTcCCvIbRCmyuQ9vuyXsnvOLtAZwluvFz2Nz6IGI=)
                          4: U_R6clx2jU3nj7MbtA_hbroZ8g0.crl (hash: BvTqhAspj+7yshxn1dOQiGo9XWIr5q6hofi0/SeNQrQ=)
                          5: YEIDM5VP6pDNSzhVyIBvi8lDeCI.roa (hash: VfO7RaDBQnJXW+DJDu274bJ0HgDUiIBNrxwmhRosZYY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 May 2024 19:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ab:fb:69:1f:82:a8:02:72:89:d1:09:a2:3b:cf:8c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
        Validity
            Not Before: May 24 19:02:11 2024 GMT
            Not After : May 25 19:02:11 2024 GMT
        Subject: CN=8bb137eb63555e5bd1ba635e33d2c01a4a66747c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:94:2b:32:7a:1d:09:88:d8:01:a5:dc:19:
                    7b:1d:ab:6a:fa:41:23:c5:b3:83:c6:f2:8e:e7:cd:
                    2b:d4:10:2b:92:77:9b:b3:4a:93:80:10:d2:3a:b1:
                    f0:74:a8:7f:24:a4:30:4e:f3:65:4f:9c:6e:00:fa:
                    5e:a1:c7:71:3f:54:b7:05:87:ca:21:c6:d7:c0:7b:
                    40:6a:d8:ae:4b:6c:0c:37:3c:d7:45:62:03:34:8e:
                    d2:45:5d:89:83:da:b8:df:6e:94:2e:6c:86:ff:d6:
                    06:76:56:12:ab:1f:89:7b:e3:60:83:fb:f5:c9:99:
                    58:d4:7d:46:a8:53:6c:9c:8e:24:23:76:13:e1:c7:
                    b9:d8:eb:9a:3d:1c:59:36:f3:5e:49:10:5c:0a:33:
                    2a:84:bb:93:88:16:c5:c5:ab:25:6c:61:32:f5:e3:
                    50:97:bc:4e:a4:ee:89:13:2b:c5:47:b6:49:f3:ee:
                    57:de:38:b4:05:5c:f6:7f:e8:3f:3d:9f:2a:bc:8a:
                    d9:ec:7e:de:75:97:a8:51:bd:01:fa:c5:13:7e:38:
                    7c:e2:c4:a1:ea:5c:b5:fb:af:86:79:e9:a1:13:cb:
                    28:ba:9e:0d:d1:ca:37:45:3a:e0:7c:77:61:e4:00:
                    17:c0:c8:0e:90:c3:c2:a5:70:2c:ca:3a:10:77:75:
                    8d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B1:37:EB:63:55:5E:5B:D1:BA:63:5E:33:D2:C0:1A:4A:66:74:7C
            X509v3 Authority Key Identifier:
                keyid:53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d7:01:57:34:62:33:86:89:b0:46:85:37:f0:4b:4b:86:5b:
         ab:db:79:93:28:a6:1f:d3:cf:53:fc:2a:26:48:19:70:1e:67:
         bc:b5:58:00:4f:2f:c7:97:b2:ab:6f:80:87:94:7c:f4:47:bb:
         64:e1:a9:ae:59:1a:e8:ad:4e:22:5d:d9:6d:39:b9:24:d4:b1:
         12:c3:10:c5:cd:cf:ec:fd:84:73:be:a9:fa:e1:0d:ec:cc:a9:
         11:31:e6:8f:fa:8f:c3:97:31:9c:ca:58:f3:dd:9c:3a:2e:6b:
         cd:7c:f8:bc:c2:47:df:35:dc:93:70:8a:1d:89:60:dd:ab:87:
         dd:c5:89:4b:f8:d3:cc:cf:9a:9b:e9:4e:5e:c7:b5:9a:ef:80:
         cd:20:51:0a:25:6b:3d:0c:2b:5d:da:d4:79:73:f6:fb:14:7f:
         33:0d:11:09:e9:ac:6d:93:d1:88:74:1f:63:1c:d2:7b:17:9e:
         be:05:58:7d:86:57:0b:99:b8:cc:87:b0:06:53:36:e7:25:3e:
         1f:0b:13:ad:8b:25:df:86:24:92:98:7d:65:ef:5d:cf:a5:ad:
         1b:19:28:96:cf:1a:34:61:7e:19:31:d4:ee:5b:5c:9a:40:7b:
         44:22:7a:f7:46:a7:c3:a5:11:1d:09:4a:29:31:2d:f0:18:05:
         b8:bf:6d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 02:39:22 2024 by rpki-client on console-ams.rpki-client.org