Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File:                     UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier:          x+nr3TJ8S5JEw9vw9oX2ELrrJqnRzMK4jjcpie5KnvU=
Subject key identifier:   02:2B:FE:10:62:C6:34:DF:F3:13:A3:78:D1:D8:42:AF:D0:BD:D1:2E
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer:       /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial:       018F889222556ACB5A9B517150520DEE8FC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number:          0A8A
Signing time:             Fri 17 May 2024 22:00:29 +0000
Manifest this update:     Fri 17 May 2024 22:00:29 +0000
Manifest next update:     Sat 18 May 2024 22:00:29 +0000
Files and hashes:         1: ELBicCL6humip6_Wnx5HmSA1bSA.roa (hash: Mgejfib1/w8KG7OyVRbifhdEMi+ISrTd/t1xCGAqZ0E=)
                          2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: FepO5vYVApOvq6tfayDUnOqUev4CQHiIycy5rPz28IQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:22:55:6a:cb:5a:9b:51:71:50:52:0d:ee:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
        Validity
            Not Before: May 17 22:00:29 2024 GMT
            Not After : May 18 22:00:29 2024 GMT
        Subject: CN=022bfe1062c634dff313a378d1d842afd0bdd12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:49:ef:51:67:c3:21:4c:dc:ae:1f:57:59:15:
                    73:8d:08:b2:9d:13:96:04:31:65:66:4c:32:c2:8a:
                    fc:1f:4d:51:9b:11:68:3e:89:61:3f:64:22:22:2e:
                    b6:a5:6f:d6:25:f7:78:be:58:f3:ae:a6:08:23:bd:
                    33:3e:58:64:d0:68:a3:69:32:91:dc:ea:9e:c6:65:
                    15:c6:03:44:1c:96:71:14:5c:b0:7a:70:71:9d:4f:
                    00:65:e1:41:55:4c:f3:b1:46:05:7e:8f:e8:47:59:
                    37:7a:fd:f0:af:f7:7f:42:34:88:c7:5b:d8:57:94:
                    a9:9f:d5:74:c2:0e:1a:51:ce:86:b0:57:76:bc:f3:
                    39:60:26:e7:ed:f2:73:91:5f:f2:72:1b:d2:ae:6c:
                    8e:b6:5d:09:c8:c6:64:0b:1c:8f:8c:fb:34:5a:f2:
                    d9:42:ad:7e:2c:11:75:ea:f3:eb:fb:91:2b:5f:5d:
                    09:ce:3f:a2:1d:32:2f:80:68:aa:ae:c4:85:d2:a8:
                    e3:cb:1c:02:79:f4:10:74:c4:7f:be:95:75:35:25:
                    d4:62:1e:74:34:a8:8f:a4:82:3c:5a:2a:96:c1:45:
                    d3:12:0c:e5:b6:2a:65:8e:5f:2a:89:2d:bf:39:e4:
                    ad:a1:0a:33:1d:fb:57:e6:d5:4b:a7:4b:fe:95:6a:
                    7e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2B:FE:10:62:C6:34:DF:F3:13:A3:78:D1:D8:42:AF:D0:BD:D1:2E
            X509v3 Authority Key Identifier:
                keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6c:27:74:cf:53:2b:d2:dc:ac:3d:e0:2f:42:58:b0:a9:18:
         f0:bf:66:7a:70:db:37:23:8d:dd:6d:6b:d9:88:c9:67:ce:85:
         cd:f9:2f:a4:9e:7a:f8:d9:83:f0:fe:d8:1f:cc:4c:52:92:2d:
         9a:c1:06:fd:83:b5:df:65:ea:1c:dc:7a:e9:3b:fc:52:82:15:
         c2:3f:b4:19:da:31:06:23:a1:d0:e2:a1:28:a8:51:47:ac:b5:
         62:ed:a5:de:1e:c2:86:d6:71:62:e9:a1:30:8e:85:5b:a5:77:
         fb:43:c6:e3:1a:44:d6:e4:94:ba:b3:0e:71:42:c9:70:4f:bd:
         ac:89:56:45:fd:af:bf:4c:af:a0:17:4f:f0:57:04:63:f4:f6:
         9a:b8:72:f7:e5:76:ee:80:84:1c:3c:bb:4a:8b:fd:71:ea:7c:
         ca:ed:c8:87:f6:ad:a7:f1:49:4f:6a:58:d8:8e:53:39:3c:6b:
         80:3e:0a:38:c2:05:46:cb:bd:5d:26:a9:90:35:94:84:21:4d:
         78:65:ab:8f:e7:e3:5f:00:6d:a8:91:3d:ef:c4:77:5e:57:7d:
         03:15:8b:d2:38:cd:67:4c:de:68:9f:3b:7a:f8:c2:0f:0b:30:
         25:21:dc:4b:c6:2f:57:23:2e:b7:45:19:96:17:5f:67:55:0c:
         3f:6c:a7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:05:55 2024 by rpki-client on console-ams.rpki-client.org