Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
File:                     uREsgEp_SnTOWMxxyZT1qdVhIrE.mft (raw, json)
Hash identifier:          y6MV66X6D6P33yfJf/S1LHSdmvlgXhtqApplM3uQyTQ=
Subject key identifier:   C0:77:7A:41:33:BF:B1:D2:7C:9A:89:B1:C9:FB:90:2F:39:39:91:2D
Authority key identifier: B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
Certificate issuer:       /CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Certificate serial:       018F874A1847016EF13E760CB902193FD573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
Manifest number:          09D3
Signing time:             Fri 17 May 2024 16:02:11 +0000
Manifest this update:     Fri 17 May 2024 16:02:11 +0000
Manifest next update:     Sat 18 May 2024 16:02:11 +0000
Files and hashes:         1: 1G4zvP3SQViurdfsYA-Kc5SZbXw.roa (hash: 7AHnBLFVuG2bQbX+ykAsknDBzgrhf7RdyR1Sl19/tBI=)
                          2: uREsgEp_SnTOWMxxyZT1qdVhIrE.crl (hash: Mf5NejEfGXUX2vM4r6Zh0XwLOeIbn5Uo8PIadGn8Wr0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:18:47:01:6e:f1:3e:76:0c:b9:02:19:3f:d5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
        Validity
            Not Before: May 17 16:02:11 2024 GMT
            Not After : May 18 16:02:11 2024 GMT
        Subject: CN=c0777a4133bfb1d27c9a89b1c9fb902f3939912d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:65:2d:7a:69:f3:e3:48:ea:03:ac:d0:ab:
                    a7:5b:52:4b:1f:01:d4:ae:8f:7f:82:8e:d6:98:1a:
                    65:f4:31:c8:38:82:79:d5:34:fc:50:21:05:04:8c:
                    b0:a6:6e:68:16:8f:73:34:bb:e4:e9:03:0d:6d:99:
                    c0:bd:a8:39:6e:fa:8c:02:7d:98:30:f6:06:07:a4:
                    32:78:a1:57:f7:cb:2d:bc:2a:44:ef:0d:3c:b1:fd:
                    9b:59:86:c4:c1:33:71:07:a0:4d:77:5e:fa:97:c5:
                    a4:d5:09:66:70:a4:9d:45:2b:b9:57:73:9f:71:77:
                    d0:12:2c:50:99:df:96:3a:0a:2c:cb:55:7d:f3:60:
                    52:84:51:4c:b7:3f:f5:8e:ad:86:b8:ca:d2:91:49:
                    75:16:ca:97:3a:00:90:e0:ba:d7:af:7e:d0:f6:bf:
                    2c:77:63:9f:39:0d:e0:0b:0e:12:52:cd:8e:a9:26:
                    a6:ef:43:55:5d:04:47:73:a4:8c:e9:10:86:63:e0:
                    32:2d:9a:95:c3:61:f2:34:64:47:4a:d7:d5:ce:cc:
                    80:4b:27:1a:98:52:fb:1d:8d:2e:99:90:51:8c:b6:
                    88:51:1f:91:c1:f2:9c:f4:11:bb:4d:d2:75:d4:6a:
                    e5:40:6f:1b:60:87:1e:30:b1:b2:39:50:ef:60:06:
                    c1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:77:7A:41:33:BF:B1:D2:7C:9A:89:B1:C9:FB:90:2F:39:39:91:2D
            X509v3 Authority Key Identifier:
                keyid:B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b3:54:d1:65:e1:b5:9e:25:67:e3:07:23:f3:25:de:df:e5:
         f1:4c:6c:4c:5d:6a:73:f3:32:eb:1b:c7:49:88:bb:08:5b:57:
         fd:c3:8a:8f:8b:d3:6d:a1:c4:27:fb:27:96:e4:87:5b:56:5a:
         26:ef:1a:7b:8d:61:74:36:fa:cf:5c:43:3c:de:43:a3:6c:cd:
         0f:64:79:4d:c1:dc:1a:1e:ec:c0:5b:72:4e:4c:7f:38:d2:a7:
         da:cc:c6:55:ed:b1:22:92:2e:9b:08:dc:45:a2:a7:92:bb:c8:
         84:32:ab:60:24:4d:3c:b3:76:69:9a:da:29:03:40:13:bb:01:
         01:3c:b8:6b:83:8b:3c:b2:f1:b8:1e:66:ba:15:36:c9:89:95:
         d2:1c:3f:73:2f:01:90:d3:b8:83:5e:84:2b:50:bb:09:e5:b3:
         20:a5:2e:4e:11:2d:c2:dc:82:8b:64:fa:51:5f:fd:06:3f:8f:
         eb:cb:13:7e:35:a2:4d:1f:85:57:cb:c2:bf:00:92:6e:6a:1e:
         db:97:0e:91:31:8c:82:9a:c4:6e:e6:bc:be:8d:d3:86:bf:c4:
         d6:1d:b2:1b:ec:5b:18:88:86:4f:61:cb:d2:c9:81:12:5f:43:
         f5:1f:f0:54:f1:a8:a7:7c:8a:0a:2b:4d:a5:cd:38:5c:44:cc:
         23:ec:8e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:40:19 2024 by rpki-client on console-ams.rpki-client.org