Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File:                     UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier:          GIgOQH6Hsnm0jUMZMywsq5c4+EswcILg07BHLc+jlHs=
Subject key identifier:   C9:52:D5:29:79:DE:56:A0:B6:1C:26:1C:90:9C:C6:E3:3C:EE:1A:99
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer:       /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial:       018F86A3CE3FF0C552B376A78715D98057EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 13:00:33 +0000
Manifest this update:     Fri 17 May 2024 13:00:33 +0000
Manifest next update:     Sat 18 May 2024 13:00:33 +0000
Files and hashes:         1: 1-t3HGzZl-9flS8CYvxooOMCL32o.roa (hash: 18BNrTGSoVFOcuC6IH5mlM6XrV0adiQ3d+y/ItuoWIk=)
                          2: BqifMvFhxEjzHqr3r2YZFMXU5pM.roa (hash: 6RcmiG2ucMhVXzs8K8ncecsMQOsijemSsWH9VrQg8n4=)
                          3: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: Srnp/FhVOQWRAtkBakjoxM3FwqHNrChacuMtpDHvZ1o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:ce:3f:f0:c5:52:b3:76:a7:87:15:d9:80:57:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
        Validity
            Not Before: May 17 13:00:33 2024 GMT
            Not After : May 18 13:00:33 2024 GMT
        Subject: CN=c952d52979de56a0b61c261c909cc6e33cee1a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:08:ab:16:66:c4:93:bf:53:23:86:4f:d8:32:
                    37:84:40:1f:88:ab:c2:9e:94:4b:d9:09:25:29:3f:
                    db:4d:8a:16:93:e4:6b:51:ae:21:f5:74:48:18:eb:
                    85:cb:32:0c:5f:ac:02:e9:61:04:1c:fd:d0:b2:98:
                    aa:53:dd:59:4c:bd:55:4a:24:4f:14:14:f9:03:d8:
                    17:a3:4c:c9:ac:21:4d:26:bc:1a:90:b7:e9:d6:e0:
                    3f:09:19:a1:4e:2e:6a:f0:c8:24:1a:cf:43:74:bb:
                    47:f0:ee:4d:d7:c9:26:fd:e0:de:07:1d:79:da:52:
                    ca:b1:15:ed:8c:86:b0:4c:c1:64:f4:42:eb:b1:cf:
                    68:6d:da:ea:67:9e:aa:aa:3c:76:82:f9:0c:ba:be:
                    9f:9e:c7:da:dd:fd:fd:09:16:da:66:35:dd:d5:66:
                    c1:a2:8d:92:d5:21:3f:5a:29:80:74:99:f2:33:03:
                    c6:82:9d:a4:5f:64:be:9e:63:0d:dd:5c:b4:d2:c5:
                    78:05:93:e1:db:ca:1d:0c:f6:90:f7:c0:8b:79:a3:
                    cc:30:96:e0:1f:24:96:fe:32:91:ce:80:24:df:b8:
                    db:d9:91:39:f4:32:44:d6:24:7d:8b:25:0c:75:d2:
                    a5:99:40:23:9e:f4:6b:fa:a5:9c:c0:bf:72:1a:62:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:52:D5:29:79:DE:56:A0:B6:1C:26:1C:90:9C:C6:E3:3C:EE:1A:99
            X509v3 Authority Key Identifier:
                keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:45:91:97:d5:82:5b:97:97:43:3a:b3:42:9f:b6:69:93:72:
         99:19:55:bd:6c:59:84:75:3a:62:cf:c3:d4:34:65:e6:e9:7a:
         e8:ba:e2:2c:89:d0:72:18:ff:0c:c5:98:e5:5d:2e:c2:07:48:
         0a:22:b5:64:ea:63:0d:be:fb:ac:f5:dd:39:3b:49:57:6e:da:
         a7:44:52:d8:8e:e0:6e:14:17:1b:fa:ea:40:a4:9c:6a:9f:84:
         c1:cb:76:f4:2f:25:4b:cd:a5:53:66:fd:23:b8:9f:88:ed:f4:
         cc:86:8b:10:5f:3f:bb:05:40:fb:78:8d:1b:e5:1a:8d:fe:5b:
         95:28:3a:3c:3c:72:ab:6f:68:52:7a:f3:35:16:e1:50:18:b6:
         23:f9:a8:52:6b:5f:19:50:4d:8c:e2:c1:62:ca:da:d7:2b:5a:
         b6:11:93:06:af:90:ca:9b:2e:81:e6:32:b2:c8:d6:e3:f3:c8:
         0e:dd:f8:a7:c2:8e:1e:5c:7f:e7:1e:6e:4f:fc:37:b0:1a:27:
         e3:48:6c:b2:89:de:79:17:84:19:a9:a7:a3:c8:37:8d:1e:7a:
         9b:de:db:2c:c5:b3:7d:1c:66:a7:4c:82:cf:46:ce:08:94:2e:
         b5:2a:14:0f:ae:ca:87:13:a3:52:51:35:b4:ac:18:86:a8:eb:
         ad:ba:8d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:02:01 2024 by rpki-client on console-ams.rpki-client.org