Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
File:                     UNp8iuAVDrjJRte_HgXAQt32o9Q.mft (raw, json)
Hash identifier:          ZuAFYLdt2sYVnu4dRtWctgEUVcqJolDlTya1Jn+Cqrg=
Subject key identifier:   EA:FF:23:46:3B:6A:D5:48:C5:3E:96:4A:F0:3B:67:7F:61:AF:BD:81
Authority key identifier: 50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
Certificate issuer:       /CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Certificate serial:       018F874A3562D67119628B359B13A904D3A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
Manifest number:          0412
Signing time:             Fri 17 May 2024 16:02:18 +0000
Manifest this update:     Fri 17 May 2024 16:02:18 +0000
Manifest next update:     Sat 18 May 2024 16:02:18 +0000
Files and hashes:         1: 7bJuq7M2jj7LrpZwNmbwW08ywGs.roa (hash: f5s84rUoSo9dcf3ZosfxwXcPl+NrbtyoljppKo2983k=)
                          2: UNp8iuAVDrjJRte_HgXAQt32o9Q.crl (hash: CvtC7mO3DiUv/f7tmCkMBQ5mvCfHx1Y90PmRPF69K3o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:35:62:d6:71:19:62:8b:35:9b:13:a9:04:d3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
        Validity
            Not Before: May 17 16:02:18 2024 GMT
            Not After : May 18 16:02:18 2024 GMT
        Subject: CN=eaff23463b6ad548c53e964af03b677f61afbd81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:dc:7c:31:c2:cf:9f:da:42:e7:d1:95:b8:
                    54:49:7e:88:c3:1c:f5:da:d6:7e:a4:31:76:98:b7:
                    f1:9d:a4:5d:6b:49:45:18:88:89:39:8d:70:e4:c8:
                    8c:6b:52:a5:9a:41:21:4f:f2:80:4a:9e:43:9c:a3:
                    50:7a:22:00:07:e7:af:8c:30:89:60:18:56:95:93:
                    51:99:32:19:67:76:fc:d6:f3:52:dc:52:8a:7c:38:
                    41:01:7c:4d:cc:5d:ec:91:ee:d7:47:6b:0d:f2:12:
                    94:c6:67:51:0f:22:6a:d8:31:2d:5b:41:7e:cd:c3:
                    b0:f3:2c:5a:4a:32:3c:1c:35:33:9c:64:02:81:87:
                    8d:4d:f5:63:43:8b:c6:73:3f:83:2c:26:dc:8a:5b:
                    da:55:1a:ba:3e:3a:34:f8:0c:a1:dc:5d:d5:21:47:
                    d8:44:2f:e3:ab:b0:05:a8:de:ad:ae:77:b7:9c:f9:
                    05:b8:fc:1e:f2:b2:02:71:09:c3:99:b3:e8:dc:90:
                    39:1f:5a:f8:71:11:1d:c9:f1:b9:63:0e:86:52:27:
                    f6:22:63:23:6e:4f:cf:de:ab:4c:71:ce:fb:a3:ae:
                    c2:d9:e0:4c:b0:02:59:64:34:d9:b3:65:38:72:86:
                    ee:48:5d:cc:2d:7a:a8:f4:d0:7c:7c:78:c1:43:3b:
                    44:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FF:23:46:3B:6A:D5:48:C5:3E:96:4A:F0:3B:67:7F:61:AF:BD:81
            X509v3 Authority Key Identifier:
                keyid:50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:e8:cc:5a:dd:92:ee:76:29:58:a3:31:7e:c5:e6:35:8f:eb:
         e0:90:b6:31:3b:64:eb:37:d6:b0:dc:c1:ff:ef:c8:30:ff:15:
         28:2e:f0:67:26:52:f1:20:34:77:d5:d1:fc:d5:2c:11:26:1a:
         d5:8b:fd:75:28:aa:11:6b:c9:1c:e5:de:2e:64:db:4a:6b:52:
         e2:da:4f:62:72:98:79:05:51:9a:36:15:71:2a:91:71:22:70:
         61:55:c4:58:51:f8:b0:85:73:59:12:93:c9:c4:6c:83:3e:10:
         4b:e0:62:3f:cd:b7:7b:41:b9:bb:8a:81:6a:d1:c1:5f:21:50:
         09:0d:84:6c:7b:3e:7d:37:73:b4:0c:2d:9b:29:1c:f4:6f:6b:
         59:9d:ab:ec:6c:57:95:39:fe:51:1e:34:d8:bf:e9:1c:55:a8:
         5f:73:a3:fd:a1:a3:2a:2a:35:be:f0:52:81:7a:d2:8e:69:43:
         8e:ab:b8:58:8d:8a:2b:31:d6:fc:53:b9:60:c1:28:53:4b:c4:
         9b:20:01:52:ea:b0:dc:c7:05:d9:16:c0:81:80:45:89:df:fa:
         48:a9:07:bc:83:7d:0d:05:0c:9f:fe:ca:c2:8b:27:a8:8c:67:
         5a:02:11:e9:ae:e7:4b:fd:ce:75:5e:11:3d:a1:3e:24:d8:21:
         21:b4:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:52:12 2024 by rpki-client on console-fra.rpki-client.org