Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
File:                     UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft (raw, json)
Hash identifier:          F7pMSvqzSiHElfk/sH9sP1qV3SdNIZwtKu9bAYxkxCs=
Subject key identifier:   27:51:F1:C9:A6:31:6E:DB:31:CB:1F:47:06:B9:00:9F:31:D7:57:F8
Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
Certificate issuer:       /CN=50480549481968d43406127653f780abbf9a117b
Certificate serial:       018F88927BD72D0689111627E31DC3AD9548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
Manifest number:          0EC2
Signing time:             Fri 17 May 2024 22:00:52 +0000
Manifest this update:     Fri 17 May 2024 22:00:52 +0000
Manifest next update:     Sat 18 May 2024 22:00:52 +0000
Files and hashes:         1: T6X66_HcDO_dKensekl4Q2GBxww.roa (hash: Me1miQF+kg30ONTVjN6oHpE9WnMLFjpx6gj0DaGj7qg=)
                          2: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl (hash: mo6VTEZJ6BEiOkcgfC/9qrbEw0NJ0wWwYz9+Y9dUNIY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:7b:d7:2d:06:89:11:16:27:e3:1d:c3:ad:95:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50480549481968d43406127653f780abbf9a117b
        Validity
            Not Before: May 17 22:00:52 2024 GMT
            Not After : May 18 22:00:52 2024 GMT
        Subject: CN=2751f1c9a6316edb31cb1f4706b9009f31d757f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:6d:92:28:95:c0:4c:a0:01:89:dc:27:f7:
                    e9:1e:8a:db:c9:aa:9e:ea:92:d1:32:42:d6:78:4a:
                    d1:6d:f1:af:27:7e:05:d0:7f:cd:de:9c:bb:79:63:
                    fc:51:2a:9e:ed:6a:88:9b:85:dc:ae:5a:b7:ba:ac:
                    96:49:bc:26:d8:c2:24:dc:26:9a:36:23:2a:43:9c:
                    0b:0d:3c:08:e9:fe:06:eb:6d:f8:7f:21:7e:f2:8b:
                    cd:1b:2b:b2:2c:a0:14:d4:ff:a2:56:3c:00:d1:42:
                    0e:04:75:03:de:02:19:f7:f1:a6:be:cc:b0:ea:2f:
                    00:09:a9:3a:a5:61:39:a3:de:cf:1c:59:aa:15:d0:
                    f2:4a:f2:58:a4:38:60:90:15:9d:80:f6:e8:cb:8b:
                    b2:e4:20:ba:5f:24:61:2a:40:3a:c6:2f:b7:25:ce:
                    19:2c:d3:08:50:fd:9e:e2:29:e0:72:cc:52:90:33:
                    65:9d:5d:e2:a1:ba:60:70:17:d3:be:89:1f:b0:c1:
                    b8:f2:d4:b2:42:b9:fe:2e:b6:73:2c:95:23:84:2b:
                    02:10:31:97:76:28:14:56:8f:06:38:1d:6a:25:07:
                    2a:91:95:b1:fd:90:31:d1:1c:e0:77:75:1d:48:89:
                    4b:c9:f7:d0:cb:ec:c8:9b:fa:01:b7:e3:8f:37:eb:
                    1b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:51:F1:C9:A6:31:6E:DB:31:CB:1F:47:06:B9:00:9F:31:D7:57:F8
            X509v3 Authority Key Identifier:
                keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3d:20:32:8f:c8:bf:fe:66:d8:aa:f4:44:22:02:33:3b:52:
         2c:08:1f:8c:08:f3:fc:be:dc:47:08:f3:5c:0a:4f:3c:91:0d:
         23:4e:d6:ad:e7:2e:8c:91:35:98:aa:25:f3:67:2e:15:45:96:
         38:2f:17:d8:c1:f2:cf:90:5c:2a:a2:44:23:fc:c4:08:42:fe:
         4e:d4:63:d1:b5:78:19:44:ad:a3:f7:bb:07:3d:5b:7b:ed:e6:
         b6:5a:c7:09:dd:1b:68:93:29:8d:df:54:b5:14:dd:d6:ed:f0:
         17:85:87:d4:33:7c:6f:3a:19:d3:8e:e4:0b:78:e3:f2:7c:5c:
         54:2d:1e:d6:98:6e:b0:1d:97:c2:3f:80:35:f2:5b:77:44:b7:
         ab:70:42:24:3c:3c:a6:76:7d:d3:fc:52:e5:10:50:0e:de:d3:
         9b:8b:55:8b:d2:9e:10:46:74:10:59:cf:40:2a:74:d0:bd:5c:
         28:14:06:99:94:30:45:61:66:67:31:03:17:75:12:97:f2:47:
         2c:8b:5a:8c:91:50:f3:41:fd:9f:0e:70:84:38:fa:f4:2f:10:
         86:52:ec:6f:29:e9:4a:ea:c0:dd:6f:79:66:58:9f:be:48:43:
         39:14:90:05:dd:f2:f9:17:22:90:8e:d5:92:99:8e:f0:85:85:
         84:b3:f8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:55:16 2024 by rpki-client on console-fra.rpki-client.org