Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File:                     U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier:          fjue8I5xysjCvIUrwG9X1dsEum+EQ7cU+1CrYeUOYgc=
Subject key identifier:   D5:B1:15:8D:4C:01:FC:91:FF:54:4B:90:F6:14:32:DD:49:58:62:91
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer:       /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial:       018F88243BEBC71DBCF47C8F8D4F41EC9809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 20:00:26 +0000
Manifest this update:     Fri 17 May 2024 20:00:26 +0000
Manifest next update:     Sat 18 May 2024 20:00:26 +0000
Files and hashes:         1: JPADrC7Y6Jxr3EOms000peLIR70.roa (hash: QqxDv0v13YU3Dy+Xuq6GmUB48lTvlEldUefBAEIfQDw=)
                          2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: raDbULPpSj/+hvV1JrweYdG8dgu/vNj9YSSiQYZUtP8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:3b:eb:c7:1d:bc:f4:7c:8f:8d:4f:41:ec:98:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
        Validity
            Not Before: May 17 20:00:26 2024 GMT
            Not After : May 18 20:00:26 2024 GMT
        Subject: CN=d5b1158d4c01fc91ff544b90f61432dd49586291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5b:da:72:f7:d2:4e:71:89:ce:94:66:4b:da:
                    dc:18:61:99:0f:01:94:71:7d:9e:15:8f:9a:b3:97:
                    7e:43:06:14:ad:0a:be:18:86:ce:22:45:8e:c1:46:
                    a2:56:69:ea:e9:cd:fa:1c:c8:92:32:ec:51:bd:ff:
                    27:07:3e:b8:38:1a:f2:0e:b9:bb:b2:2c:6c:68:e5:
                    13:b5:d3:dc:e0:8b:28:c1:05:32:3f:44:2b:eb:51:
                    e3:8d:85:41:b5:c9:f9:04:26:d9:32:7e:9b:c3:60:
                    0e:09:a3:71:44:95:46:95:90:b9:53:26:05:39:6c:
                    38:5c:ea:f4:9e:45:d7:df:33:b8:07:1f:bd:02:39:
                    07:bb:3e:5d:f1:93:dd:b6:41:11:2f:da:32:8f:61:
                    33:f3:2f:43:d1:1b:cd:ed:cf:a0:33:08:84:dc:95:
                    bf:dd:af:9c:b2:49:9f:fe:8b:26:c1:91:ac:6f:9c:
                    3b:f8:67:d6:51:33:31:a5:bc:48:a2:8a:ed:e0:19:
                    78:a1:cc:9a:90:a2:28:4d:0a:b3:e9:e7:7f:41:fe:
                    ee:22:3a:f3:49:76:fc:96:cf:3b:63:47:58:fa:74:
                    52:cd:ab:7e:5f:e9:3d:49:c1:05:47:84:ae:6d:61:
                    10:08:f7:8a:f7:31:9b:e4:5d:de:2a:23:96:85:f2:
                    99:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B1:15:8D:4C:01:FC:91:FF:54:4B:90:F6:14:32:DD:49:58:62:91
            X509v3 Authority Key Identifier:
                keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6f:dc:26:7e:ed:e9:2d:c5:ed:54:bd:f5:72:0c:47:25:9f:
         53:af:0d:9d:3a:17:e5:50:0a:9e:c3:c0:0e:21:e4:f6:10:a2:
         3b:66:ae:df:0a:1f:0b:4f:b9:d2:b4:0a:62:ee:e0:4b:d4:2e:
         a8:a0:23:1c:a4:e7:4f:35:1b:46:0f:67:24:82:7f:d2:1b:b8:
         aa:45:cf:7d:97:15:48:9c:8a:c8:c2:03:52:a0:d4:18:a6:4e:
         1d:c4:c9:93:6e:a2:97:a4:39:6e:02:ac:de:46:bc:6e:f5:c8:
         7a:23:24:12:e3:e5:49:74:fc:75:c8:ef:c3:62:2b:3a:54:c9:
         21:93:e9:76:5d:d4:14:0b:54:40:0d:02:7f:96:9b:46:9d:4a:
         0c:5a:b1:79:97:b7:e0:e8:41:6e:1f:76:c8:75:25:4c:33:fa:
         d9:20:63:c8:84:1e:60:0d:a2:a0:ca:11:38:d8:d8:8b:32:7b:
         16:20:d7:94:08:27:b9:87:ed:62:1c:2d:62:b4:cf:b4:7e:2d:
         d4:0c:ac:5c:1c:a3:d3:83:ca:7b:ae:00:27:ce:39:8a:42:c0:
         5a:1b:fd:48:3d:6f:37:66:fe:1c:41:18:63:11:49:a4:51:12:
         9c:34:fb:d2:dd:1f:54:77:02:6b:9b:88:76:50:66:b5:2f:8a:
         6c:42:87:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:11:47 2024 by rpki-client on console-ams.rpki-client.org