Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
File:                     uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json)
Hash identifier:          vI3qA3f/AYfrQHgZOX2HyJMwjEPpmCmsZCf1vKqnZyc=
Subject key identifier:   5F:3D:F7:00:D6:AA:36:76:1D:FC:2E:08:B2:D4:D3:D6:F2:2D:E6:BF
Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
Certificate issuer:       /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Certificate serial:       018F874914AA4BF416C88D2B890C5CD319B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
Manifest number:          0A33
Signing time:             Fri 17 May 2024 16:01:04 +0000
Manifest this update:     Fri 17 May 2024 16:01:04 +0000
Manifest next update:     Sat 18 May 2024 16:01:04 +0000
Files and hashes:         1: gV6A4z183QZs5jUD0HFeTNH7IGE.roa (hash: 2AbNM6cxcfwhY8ZITxaBLu+Y0g7qmqm5aGOZWOuIodQ=)
                          2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: /Q/UetvAF2iBnGvBYtnsjTg/gtYFNq2uoYXxH4b7Ftc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:14:aa:4b:f4:16:c8:8d:2b:89:0c:5c:d3:19:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
        Validity
            Not Before: May 17 16:01:04 2024 GMT
            Not After : May 18 16:01:04 2024 GMT
        Subject: CN=5f3df700d6aa36761dfc2e08b2d4d3d6f22de6bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:96:a2:7f:07:7f:04:69:86:12:58:03:aa:
                    24:0d:64:85:88:24:7e:22:0e:24:2a:76:10:4d:cc:
                    1a:8b:19:d6:a4:48:a6:90:6b:34:67:85:5d:c3:3b:
                    e4:67:b3:a3:21:89:2b:44:15:22:98:30:68:75:27:
                    05:3e:5f:80:73:3a:4e:84:c5:09:4e:0b:c7:42:61:
                    cf:53:26:e2:90:6b:1d:98:12:e8:27:05:c7:ee:b2:
                    ab:61:a1:8e:b1:f0:27:33:37:3c:5d:6d:b0:77:2d:
                    07:d5:87:60:ca:4c:f2:87:70:b4:60:39:fc:54:01:
                    4e:82:d1:66:75:97:c1:53:62:64:b4:ab:cd:4d:20:
                    54:de:fd:e0:3c:a8:8f:27:a5:80:00:46:b0:b3:74:
                    b8:07:17:31:b8:1e:99:ee:d6:eb:69:e8:c8:9c:4a:
                    ad:3b:3a:40:0b:86:1c:4e:7f:da:f9:16:c2:30:03:
                    51:64:8a:53:72:95:57:7d:eb:bb:69:5b:b6:55:52:
                    29:67:87:c6:41:c6:ee:41:89:6d:f1:51:b7:ed:eb:
                    2f:5e:f0:75:ec:c4:b1:13:4c:b8:21:9c:87:bc:2b:
                    82:92:ed:29:14:03:47:d7:d5:91:d6:45:63:37:c0:
                    ef:e6:7d:d0:a9:16:d6:8e:9f:af:e4:8d:82:04:c3:
                    4d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3D:F7:00:D6:AA:36:76:1D:FC:2E:08:B2:D4:D3:D6:F2:2D:E6:BF
            X509v3 Authority Key Identifier:
                keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:fc:73:8b:67:7f:f2:c4:6b:b5:f6:5f:e4:5b:52:e0:f7:db:
         c1:fc:12:c2:9a:87:b5:44:50:4a:e1:8b:08:c3:ed:a3:fa:d3:
         f2:24:00:9b:66:f3:2a:4e:40:53:01:99:1d:b4:f9:8c:8c:7e:
         e4:36:e5:a1:12:de:a2:d9:ed:e0:2d:c8:bd:b2:8d:6e:f9:3d:
         01:73:62:ba:7a:99:5c:71:ba:03:eb:ef:15:c5:77:38:59:d4:
         e3:a5:96:a6:65:07:80:05:b4:ee:c6:75:e9:68:c4:f2:66:c7:
         17:26:c9:21:cc:21:d1:4e:4c:5a:70:c0:e7:da:ab:79:98:f4:
         4f:23:cf:28:1d:a6:08:f8:cd:33:0b:5d:07:e1:49:d5:a3:40:
         ee:9f:4a:9f:f3:01:91:61:24:af:29:6f:87:73:a5:48:fb:b5:
         ba:c1:4a:27:d2:32:b2:21:46:ed:4d:7c:b4:92:c2:35:da:38:
         2d:0e:7d:a5:7a:d7:7d:2a:c1:64:58:dd:58:65:53:e1:84:fa:
         65:f0:81:ea:3b:94:b9:cb:59:ff:46:67:c9:a3:0e:da:b3:d3:
         50:29:f9:26:5d:99:7d:49:68:ef:2a:90:91:39:a9:d9:dc:12:
         a4:51:f7:ef:5d:5d:bf:68:cb:61:d9:49:ed:42:e2:e7:66:04:
         f7:75:fc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:49 2024 by rpki-client on console-fra.rpki-client.org