Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
File:                     ug-GS6D6IE3pOsWqhPcotiIMb3w.mft (raw, json)
Hash identifier:          +T+fZYeMlQ0BN8EVn+xn3Srgav8EJk1cExvMYd6Nwo8=
Subject key identifier:   3C:4F:85:FA:8D:09:98:F7:24:DB:4D:BC:1F:7F:E7:11:6F:E6:7B:CA
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Certificate issuer:       /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial:       018F8748F3D425B0128C8CC0BBA051DC9583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
Manifest number:          080F
Signing time:             Fri 17 May 2024 16:00:56 +0000
Manifest this update:     Fri 17 May 2024 16:00:56 +0000
Manifest next update:     Sat 18 May 2024 16:00:56 +0000
Files and hashes:         1: cIlDDAuEbPAnRn4Qtr2LOISF6wc.roa (hash: hmoIVvqkMOYFP3SeUd5ogS67VZNE35qduPA2zqKLkGE=)
                          2: ug-GS6D6IE3pOsWqhPcotiIMb3w.crl (hash: wV0/o545UXOvM8Wc7URYnfQrGTFW79yKDTu2JyJXxHk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:f3:d4:25:b0:12:8c:8c:c0:bb:a0:51:dc:95:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
        Validity
            Not Before: May 17 16:00:56 2024 GMT
            Not After : May 18 16:00:56 2024 GMT
        Subject: CN=3c4f85fa8d0998f724db4dbc1f7fe7116fe67bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0a:1b:6f:4a:97:61:af:c4:76:b7:c6:59:a5:
                    8e:bd:f1:ed:33:2c:02:6e:75:7b:5d:ab:d9:6e:c2:
                    c5:31:65:2b:3a:e1:47:b9:1c:06:7d:81:fa:9d:09:
                    0d:5b:be:f8:2c:c7:aa:1a:c5:28:56:91:00:19:1f:
                    12:a4:46:0c:68:b2:a3:32:6e:6f:8f:c9:c3:32:6f:
                    94:52:cb:33:40:72:f4:6d:07:f7:da:7f:9c:0b:6c:
                    aa:ea:58:4c:f3:d2:08:c1:95:b0:9b:da:a0:74:f7:
                    dd:35:6a:c8:1d:37:09:cb:60:5a:3f:8f:9d:f0:a1:
                    dc:2f:09:d2:9f:34:fb:f9:92:30:88:51:cf:ae:c4:
                    49:98:26:04:ce:51:bb:35:7e:20:ab:ae:b0:7f:35:
                    6e:a0:06:ed:dd:38:4e:06:0d:53:5f:13:ac:33:b6:
                    9b:08:11:79:86:66:a9:b1:a1:0e:08:30:d1:18:ca:
                    d7:e7:c9:27:1a:5f:27:13:05:07:42:3a:e7:74:8e:
                    e3:07:6a:29:8e:47:5d:98:f0:62:c6:39:76:43:e1:
                    7d:a5:ba:fa:ce:e8:7e:4a:16:6e:01:cf:f1:8a:4b:
                    66:7f:39:3b:a5:07:73:ef:ec:8d:d3:74:46:4f:8e:
                    90:2e:b2:6b:6e:95:13:52:df:65:80:da:95:37:30:
                    69:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4F:85:FA:8D:09:98:F7:24:DB:4D:BC:1F:7F:E7:11:6F:E6:7B:CA
            X509v3 Authority Key Identifier:
                keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b1:28:41:51:b4:ea:b0:ba:73:74:9a:f7:0f:75:8a:9b:26:
         e7:90:36:18:42:01:ec:53:69:1f:43:71:80:9c:df:88:d1:a4:
         9a:23:f7:07:e5:78:77:4a:dd:5a:d5:7c:8f:42:19:7d:71:ba:
         bf:99:2f:13:e2:a4:70:de:2e:cf:f7:39:07:d0:cb:a8:c2:56:
         fe:31:c8:e4:1d:8f:e3:3a:a3:27:dc:12:ee:a1:7c:79:5c:2a:
         3c:52:29:48:70:7d:f4:61:5f:3a:c2:f2:03:0b:ca:99:d3:a6:
         49:9d:4e:73:64:d4:62:b3:93:d9:b5:ee:d5:b1:ed:ba:36:d6:
         93:13:12:59:3f:c2:7f:c5:a0:67:1d:09:36:95:7d:6a:41:2d:
         1a:24:9e:f8:56:f5:77:32:3c:fa:5d:ff:37:77:39:6d:10:de:
         f4:36:9c:15:65:97:a3:c0:bc:23:80:ea:37:99:3a:07:4c:95:
         a1:79:5b:ef:be:39:eb:d7:61:28:08:9f:a4:84:4c:42:4c:36:
         87:cb:55:fe:bf:e1:7e:f8:3f:24:11:cc:eb:2e:01:3a:87:9a:
         4a:81:6b:7d:ca:f3:dd:54:80:81:8c:7a:81:98:f1:9d:05:8b:
         fc:6d:db:cd:8e:c3:33:1a:ac:75:17:f7:af:05:3e:48:f5:f6:
         e5:bb:1a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:57:14 2024 by rpki-client on console-ams.rpki-client.org