Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File:                     UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier:          mPYAJjpZ/CpFKT2iq6d8kar7Li4X1GU8WH8bylH58Og=
Subject key identifier:   7C:24:D2:E7:3B:F3:92:93:97:F8:B3:EF:45:22:E6:4B:E8:B6:EE:9C
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer:       /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial:       018F885B3A6BE3007500488CD787DBEA5578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number:          1180
Signing time:             Fri 17 May 2024 21:00:31 +0000
Manifest this update:     Fri 17 May 2024 21:00:31 +0000
Manifest next update:     Sat 18 May 2024 21:00:31 +0000
Files and hashes:         1: DazDJ2e9jzNzW-57MLb4NmWNc1o.roa (hash: zlV/vdc2q2yo89jNGtYUQOG4X4PxzkF0mW4UeVoHgl8=)
                          2: IwmiSc4K8JZ3ySv-uBA2Jtm3Sfw.roa (hash: hCeujAYG7yruHOaL3uRYm0LEPME0hIHY4rbYfMFvJ1o=)
                          3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: tjAP8wQsa5/APXfm1/FssEBvNi5JsQJCX3vt7wkxYG8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:3a:6b:e3:00:75:00:48:8c:d7:87:db:ea:55:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
        Validity
            Not Before: May 17 21:00:31 2024 GMT
            Not After : May 18 21:00:31 2024 GMT
        Subject: CN=7c24d2e73bf3929397f8b3ef4522e64be8b6ee9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:78:62:1f:e6:af:97:49:2e:de:dd:23:cc:3c:
                    17:23:bf:17:5d:0f:36:3f:41:46:8a:b1:27:a9:06:
                    f1:10:d6:49:82:99:d6:70:fa:a8:f1:bd:40:53:d1:
                    3a:d2:dc:f7:50:25:cb:28:b9:d9:d9:6e:9b:75:ac:
                    e1:4d:05:d4:31:f9:a1:21:ed:8d:f0:b6:ca:86:f5:
                    ac:04:bb:b6:11:a5:a0:55:16:94:4d:cb:bc:a1:2f:
                    1f:63:20:fd:9e:cd:be:67:d8:08:1b:8a:ed:94:dc:
                    32:cf:22:41:46:f9:27:4e:ba:92:cf:d4:54:00:2d:
                    c7:aa:b2:aa:97:95:e6:47:06:5f:ea:7f:00:98:a4:
                    8b:f4:34:ee:c8:9c:23:ce:e6:34:df:0d:9f:1d:0b:
                    8d:fc:26:9f:94:c4:37:23:0a:20:0f:cf:dd:3d:86:
                    28:99:85:55:4e:64:2c:d6:97:6a:28:4c:b4:bd:ae:
                    4f:6d:3b:12:ff:6f:aa:4f:e6:e1:6a:94:79:2c:3a:
                    a4:d7:93:ec:39:f2:b1:fb:15:8e:ef:71:91:2f:4b:
                    3a:1c:fd:9e:98:46:a2:47:96:6d:78:c9:bc:cd:39:
                    6d:2e:33:51:b5:03:56:53:b2:bf:05:10:b8:2b:ee:
                    3a:99:94:89:9e:e8:6c:33:5c:d8:9e:a0:b8:76:0c:
                    53:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:24:D2:E7:3B:F3:92:93:97:F8:B3:EF:45:22:E6:4B:E8:B6:EE:9C
            X509v3 Authority Key Identifier:
                keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4d:77:bc:2d:a7:d7:28:8d:50:bd:75:9b:3c:ea:23:a8:39:
         7e:ca:eb:e9:1a:bc:97:26:52:5b:ca:6e:51:81:3b:d0:2e:37:
         47:f6:c2:0a:2c:37:49:c2:8f:db:18:66:8c:97:14:e9:a6:67:
         a5:59:a5:f5:2b:ca:0e:f1:52:67:7e:c6:08:06:fb:39:71:6a:
         c4:d6:8c:ea:89:2f:ce:e6:b1:5b:01:3c:be:0c:52:f0:40:45:
         11:b5:15:84:59:16:9c:dd:d5:f8:5a:d2:34:58:b4:9a:51:14:
         9a:4b:72:01:54:5d:9c:1b:28:0f:4b:9b:45:b2:06:f0:29:c0:
         f8:7d:86:b4:19:f3:37:d9:58:c7:58:bf:84:73:9c:a7:70:e0:
         d6:e3:3b:25:73:58:80:f9:e9:a4:08:7e:c6:d4:f4:eb:7a:3c:
         b9:3c:04:69:09:9c:a7:12:90:07:11:4b:b0:3d:55:6b:b0:8e:
         bd:e2:20:5b:2c:71:e6:88:d2:4a:8b:b2:de:b7:98:51:a2:54:
         05:b9:46:8a:59:94:54:c3:fa:f3:93:69:a4:24:f2:6a:0e:b6:
         6e:77:65:97:42:73:a2:cf:58:d3:2a:05:25:d7:0a:bb:45:53:
         94:1f:8a:b1:0f:76:ea:9b:e2:65:17:66:c4:d0:48:0b:8a:97:
         20:41:df:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:43:10 2024 by rpki-client on console-fra.rpki-client.org