Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
File:                     UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json)
Hash identifier:          nVI0Aqig3L7Bmr4+6EfKIFOmI4ylzUyejNxKD9R49ac=
Subject key identifier:   F1:87:DE:B2:17:1D:61:79:D9:3B:D8:65:BE:DF:B7:8A:23:21:4A:E6
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Certificate issuer:       /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial:       018F8891EA64019C795A5E7A243C8AF7A9A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
Manifest number:          0F55
Signing time:             Fri 17 May 2024 22:00:15 +0000
Manifest this update:     Fri 17 May 2024 22:00:15 +0000
Manifest next update:     Sat 18 May 2024 22:00:15 +0000
Files and hashes:         1: P42ukMtdRn5p4GlfRaMCfONqcVQ.roa (hash: bS2LtOaRorsRGqhXWmgLa7TYY3QpdO2Gj4CtgO9uxao=)
                          2: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: fcLHz7jASOtv1aECCpZgOipHr1AZ1OoNJ2SLr/rwUi8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:ea:64:01:9c:79:5a:5e:7a:24:3c:8a:f7:a9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
        Validity
            Not Before: May 17 22:00:15 2024 GMT
            Not After : May 18 22:00:15 2024 GMT
        Subject: CN=f187deb2171d6179d93bd865bedfb78a23214ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3e:8a:21:ad:86:f4:0f:d5:39:5f:67:9b:bd:
                    e9:1c:21:f7:9b:46:9c:65:2e:30:4d:0f:41:4f:c2:
                    06:e0:fc:54:cc:a4:d1:57:21:dd:94:b0:75:30:68:
                    07:71:cd:77:e5:cd:14:5e:c9:b5:06:5c:26:29:c7:
                    36:02:d0:a3:63:52:f4:fb:6c:24:41:fd:4b:d5:8c:
                    ad:32:c0:18:a4:45:04:70:6d:2d:5a:e3:0a:9e:df:
                    79:cc:64:67:ab:21:bd:69:1b:f9:84:00:26:ce:10:
                    95:88:97:5f:e8:02:fc:e1:ab:ac:d6:70:8e:68:ed:
                    e5:c2:fd:ba:f7:09:05:b6:c3:0e:49:01:16:dd:45:
                    42:62:95:0b:9d:be:36:1d:27:d7:0c:53:b9:98:24:
                    b1:5f:37:c3:da:03:cd:cf:68:eb:3e:7b:bd:62:4d:
                    d5:eb:86:00:c2:e8:f7:83:d4:ab:8e:f6:16:75:5e:
                    c4:5c:4b:d9:d0:5b:94:25:e1:2a:f2:be:0a:02:55:
                    d1:e1:f0:eb:c2:d8:9e:0f:84:e1:07:6f:d3:d9:c7:
                    76:27:8e:89:b2:35:99:2c:01:4f:d0:0e:0a:a4:0e:
                    71:00:26:f2:e0:40:59:16:bb:6e:ce:ae:e1:49:99:
                    65:b6:01:65:b9:c0:99:17:29:18:a0:ca:d2:ee:bf:
                    4e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:87:DE:B2:17:1D:61:79:D9:3B:D8:65:BE:DF:B7:8A:23:21:4A:E6
            X509v3 Authority Key Identifier:
                keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:4e:14:ad:12:fc:96:a5:47:26:bc:31:f7:29:64:36:9c:a8:
         30:5f:2b:cc:85:ef:f1:4c:c2:c9:9b:d0:17:5b:3f:5e:ba:10:
         2a:f3:c3:a3:8a:4a:7d:0c:ed:e3:4a:f2:1f:82:a4:1b:0b:6e:
         69:77:24:83:d0:4c:b4:0a:66:bf:b2:75:6e:23:3e:48:3f:c5:
         ba:a7:37:cd:7b:66:64:df:7b:61:0d:bf:40:b7:5f:c5:f9:d7:
         8e:34:38:03:90:bc:7e:52:c2:d1:06:8e:49:e6:b1:e5:0e:83:
         b7:12:0c:d9:96:09:27:64:c2:6e:b9:2b:d3:6c:e3:49:72:7d:
         bb:ba:ce:c4:0f:a4:80:4a:27:75:d3:78:9a:39:6e:31:41:51:
         87:b2:1f:b9:bf:62:c1:8c:3d:9c:66:fb:8d:a4:0b:fd:98:08:
         4b:a6:25:a8:39:1c:e5:b6:74:d0:c1:b5:fe:b9:26:51:fd:a8:
         5b:9e:f9:19:f7:bc:b2:de:67:ed:19:9a:60:dc:87:aa:cc:21:
         95:28:e5:f8:1b:47:13:f7:5f:d1:a8:67:a3:a9:28:62:0b:e3:
         cc:81:0d:ba:bb:8b:df:30:50:29:99:ea:b3:b7:ae:ba:68:dc:
         00:af:cd:b4:30:53:46:08:0f:eb:aa:b2:55:27:9a:a3:94:62:
         a0:ce:9a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:56:25 2024 by rpki-client on console-fra.rpki-client.org