Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/rUlV8c295-2ead4R3qXFYPYEVqk.mft
File:                     rUlV8c295-2ead4R3qXFYPYEVqk.mft (raw, json)
Hash identifier:          ksRVdE2GsVOERs77GLxwrh4vEVuAFySmoVt6EeWkzAI=
Subject key identifier:   7F:21:7A:1B:3E:03:8C:72:23:62:F5:17:D0:96:CC:BF:72:09:35:8B
Authority key identifier: AD:49:55:F1:CD:BD:E7:ED:9E:69:DE:11:DE:A5:C5:60:F6:04:56:A9
Certificate issuer:       /CN=ad4955f1cdbde7ed9e69de11dea5c560f60456a9
Certificate serial:       018F836B871C6F8001BC405E0EB18D9180D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUlV8c295-2ead4R3qXFYPYEVqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/rUlV8c295-2ead4R3qXFYPYEVqk.mft
Manifest number:          1077
Signing time:             Thu 16 May 2024 22:00:13 +0000
Manifest this update:     Thu 16 May 2024 22:00:13 +0000
Manifest next update:     Fri 17 May 2024 22:00:13 +0000
Files and hashes:         1: 7UEKjAJ-eKTudJQyuXWgCFktqsA.roa (hash: gaq+lb0RudHl3QvY5UiuCQ4eRNvI0ap5p1xdT8g8a5U=)
                          2: iu1PxmFJb-HFP_ff0PUa6q2P4hE.roa (hash: O3JEueDmq7Vdhtx8/Q/xjnl9frQ90E9emQt49N0nYvs=)
                          3: rUlV8c295-2ead4R3qXFYPYEVqk.crl (hash: HAskk/c4Ci4b3oVPh/9Hzhy+J0rTpMa3dfZyJLiBFpM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/rUlV8c295-2ead4R3qXFYPYEVqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/rUlV8c295-2ead4R3qXFYPYEVqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUlV8c295-2ead4R3qXFYPYEVqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6b:87:1c:6f:80:01:bc:40:5e:0e:b1:8d:91:80:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4955f1cdbde7ed9e69de11dea5c560f60456a9
        Validity
            Not Before: May 16 22:00:13 2024 GMT
            Not After : May 17 22:00:13 2024 GMT
        Subject: CN=7f217a1b3e038c722362f517d096ccbf7209358b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:e6:dc:37:01:d6:7d:52:45:4a:77:72:10:
                    4c:b1:c0:0d:d0:e7:bf:e0:f2:31:05:17:09:be:19:
                    41:47:1c:60:dc:3b:ac:b8:73:24:57:d0:06:93:54:
                    2f:2f:c5:86:ef:11:76:a2:e0:37:f8:6c:a4:61:92:
                    3e:97:70:ee:97:21:1d:63:21:58:26:47:9a:ef:37:
                    f2:26:7f:b0:29:db:44:a4:9f:bd:e2:58:25:dd:89:
                    ea:03:a8:90:88:75:f6:65:27:18:6d:a6:b3:a2:4d:
                    c4:de:75:22:db:7f:4b:64:92:aa:3c:2f:63:f4:88:
                    96:49:06:fc:e4:97:e7:ec:17:5b:22:87:48:47:80:
                    c1:d5:ff:69:90:65:bc:6d:08:c0:41:76:ad:a0:da:
                    b9:c2:d6:77:35:eb:78:71:31:41:73:29:5a:d1:ee:
                    da:cb:9b:5e:da:58:a1:c8:e6:65:15:45:31:41:83:
                    06:ab:4e:e7:9c:cf:ed:f3:13:58:76:24:3f:95:5f:
                    bb:f1:1e:3b:94:28:41:65:31:99:e9:4d:41:40:67:
                    ce:3c:8b:77:14:a6:fb:c7:89:5b:53:0a:e4:7c:30:
                    06:4c:e5:46:d3:94:17:79:1d:53:bc:00:9b:12:63:
                    b6:a0:e2:67:8b:62:d5:a3:0a:1c:d2:c4:09:fc:a5:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:21:7A:1B:3E:03:8C:72:23:62:F5:17:D0:96:CC:BF:72:09:35:8B
            X509v3 Authority Key Identifier:
                keyid:AD:49:55:F1:CD:BD:E7:ED:9E:69:DE:11:DE:A5:C5:60:F6:04:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUlV8c295-2ead4R3qXFYPYEVqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/rUlV8c295-2ead4R3qXFYPYEVqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/rUlV8c295-2ead4R3qXFYPYEVqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:61:9a:8d:93:23:28:85:85:cd:fd:43:17:06:07:31:cb:c7:
         95:f7:f9:24:b7:25:47:cd:64:7a:12:84:1e:1a:0e:f3:0a:ca:
         74:7e:a4:f3:57:d5:97:0c:ba:e1:18:98:fb:63:2b:d2:8d:eb:
         23:ec:b4:3b:2e:81:d6:2f:7e:9d:36:b3:f3:e5:67:5a:7e:80:
         9b:9b:f2:a8:dd:5e:51:74:cc:0d:b7:bd:a1:99:f1:53:fd:1a:
         34:6b:6c:9c:c1:c9:64:4b:ae:29:d9:f9:bf:43:b9:80:45:7c:
         57:61:84:39:25:59:a9:ab:44:4a:09:a0:d4:cd:27:06:35:4b:
         e3:53:13:0e:8c:6a:b7:b8:56:32:bf:ba:e8:32:12:76:8d:2a:
         14:ff:75:16:f0:ed:9d:91:73:a3:51:52:53:f3:f3:af:34:b2:
         08:f9:3d:b7:e7:19:fb:42:e6:46:b3:62:ea:7a:ec:69:d6:92:
         40:aa:e8:87:30:27:5f:3a:93:09:a0:17:30:dd:62:54:81:b3:
         bd:cc:e3:72:d7:0b:4c:91:2e:7e:ab:5a:f4:c2:d9:65:66:aa:
         62:16:44:df:5a:81:63:16:30:d4:57:da:54:03:bd:2a:eb:b7:
         09:43:2d:e1:29:94:3e:32:16:8a:9e:29:44:ae:17:a7:5a:8f:
         bf:06:13:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:38:52 2024 by rpki-client on console-ams.rpki-client.org