Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File:                     Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier:          FnFHwAH9vRoS5xlhSRQc28Gypv8qaj4KpEEDVgi+Ips=
Subject key identifier:   38:42:A6:04:1D:F5:B2:25:4F:B4:06:97:4F:A7:1A:3E:FF:9D:DE:76
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer:       /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial:       018F8E5DA5ECA8ED450C39211C64EEDA9AB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number:          1188
Signing time:             Sun 19 May 2024 01:00:52 +0000
Manifest this update:     Sun 19 May 2024 01:00:52 +0000
Manifest next update:     Mon 20 May 2024 01:00:52 +0000
Files and hashes:         1: CENW_7R8j2MINEWbrtztWxoU9TI.roa (hash: BTlt2nsbz2U52B9qoXPWC9MPyRaY6/aQou6KiLWhKXo=)
                          2: SEZpmSrX6vARHTjU6bQft5yhYek.roa (hash: 3iFf4a/FUMveZzwp8geF1uzxd9LX6N/jU199hKwoC50=)
                          3: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: NT0xKLwzterUN8j6zUyyxIi3WDMpZfJ7DW/1gJHDj1M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:5d:a5:ec:a8:ed:45:0c:39:21:1c:64:ee:da:9a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
        Validity
            Not Before: May 19 01:00:52 2024 GMT
            Not After : May 20 01:00:52 2024 GMT
        Subject: CN=3842a6041df5b2254fb406974fa71a3eff9dde76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:6c:15:94:f2:23:cc:7b:f5:b3:06:75:ca:
                    e6:92:ba:8a:ed:53:f7:c3:4d:2b:6d:76:a0:b6:52:
                    ad:b7:f2:7e:03:5d:1f:7e:f6:20:d0:c5:ff:4c:fa:
                    6b:db:e4:01:d9:d9:4a:4d:45:c4:25:9d:17:a2:a0:
                    fb:fa:36:48:a0:06:6f:d7:37:75:be:b7:a7:73:bf:
                    ac:02:37:74:51:bd:0f:e7:5b:91:33:2a:4a:c0:8a:
                    66:ee:6a:54:86:a8:9e:8a:73:3b:d9:84:3c:65:a8:
                    c8:d9:07:e6:b9:36:0d:b1:ed:a7:47:58:e9:60:bd:
                    9c:8d:05:a7:8d:45:e4:82:a4:31:c3:e8:ef:b5:24:
                    18:c1:1e:98:d4:e5:b1:b6:93:49:fe:27:4d:bf:f8:
                    ed:6d:ad:d1:2e:28:3f:09:58:a3:95:a4:b6:3d:1a:
                    60:36:3a:e2:57:6e:f5:1c:ec:31:02:bf:bd:5d:fc:
                    e2:5c:0b:c4:4f:e6:2f:43:19:b6:b2:7c:af:88:d6:
                    88:bc:f6:c8:ad:ba:32:73:73:33:c4:62:71:52:01:
                    1d:1a:49:43:69:9d:3a:80:82:f7:76:91:5e:48:9c:
                    f4:f9:27:64:84:fa:ca:cc:5a:7a:7f:8b:0e:66:ad:
                    4d:f4:5c:36:4f:da:4a:55:c7:0d:dd:8b:39:87:73:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:42:A6:04:1D:F5:B2:25:4F:B4:06:97:4F:A7:1A:3E:FF:9D:DE:76
            X509v3 Authority Key Identifier:
                keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:44:00:20:a4:89:14:dc:2f:89:8e:4d:2a:f4:3f:e9:76:3c:
         5d:2f:d6:be:fb:44:0f:34:9a:6d:a8:38:4c:85:ce:dc:cc:63:
         2b:06:ab:07:78:f1:46:c3:93:f5:09:80:18:e9:d2:12:56:c4:
         94:a0:3f:b6:d8:f5:67:1c:4a:91:98:bb:3c:81:f5:1a:1f:ed:
         c4:ce:9b:da:6d:6b:c0:77:de:fa:b5:9c:b7:5c:12:7c:fc:4d:
         df:dc:32:a8:8b:e9:4c:96:aa:ed:33:7b:83:80:17:08:fc:50:
         9a:54:14:d6:b1:2f:c1:34:00:30:2b:83:81:0f:d8:f3:8f:93:
         65:c3:1a:70:9f:47:67:01:15:3d:d4:6d:ce:67:0b:4c:4a:ad:
         62:25:bf:c1:fb:96:41:5a:ef:62:69:6c:99:c9:02:41:56:f3:
         58:33:9e:bf:85:36:49:7c:39:58:b2:73:ee:16:0e:a0:4b:ff:
         93:19:1f:1c:64:a1:23:70:fe:80:18:b5:cd:ea:18:09:58:78:
         46:d8:72:17:92:d8:6b:06:b8:34:ec:2b:63:92:5d:57:85:b2:
         8c:05:59:0a:f3:cf:d8:85:c9:ba:aa:0f:44:54:93:91:99:a8:
         6e:8b:3d:2f:30:27:15:dc:be:99:90:d8:7c:15:18:84:9b:b1:
         b8:94:20:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:06:46 2024 by rpki-client on console-ams.rpki-client.org