Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
File:                     9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft (raw, json)
Hash identifier:          HRjFlITyK3TXinf16BSWBKVyqZX0jow2tDxev2VkLCA=
Subject key identifier:   AA:18:24:F2:A5:B6:CF:B7:3C:7F:17:BD:BB:19:2B:7A:B2:1C:FE:84
Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
Certificate issuer:       /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Certificate serial:       018F45A1D15D9CB958DE6F35DB0FAAA76341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
Manifest number:          1111
Signing time:             Sat 04 May 2024 22:03:03 +0000
Manifest this update:     Sat 04 May 2024 22:03:03 +0000
Manifest next update:     Sun 05 May 2024 22:03:03 +0000
Files and hashes:         1: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl (hash: L5Mh7eC4AAN4frpDiNt6M6ejpeUkndRlS5d53blgy48=)
                          2: RdRZwOT7CiZw2TgIysG1GypCbA0.roa (hash: tpkxjCi4Cjckbj1IkXH9yXskkUL8BQPJPECZKqbjbyU=)
                          3: fqY0S0KoL6WfLkmmSRzp6HTD9Lk.roa (hash: 9MEbRg3kVGrIgZjIiWNIT72ahNPk1/TouSsH/DlsMiM=)
                          4: lRf1EYlBZa8kOgRnb9XUZnW1JJY.roa (hash: 6BBl2zr99ZMZ/3ecSmFWvdHNi+6lErJVS10gijWFg+I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 22:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a1:d1:5d:9c:b9:58:de:6f:35:db:0f:aa:a7:63:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
        Validity
            Not Before: May  4 22:03:03 2024 GMT
            Not After : May  5 22:03:03 2024 GMT
        Subject: CN=aa1824f2a5b6cfb73c7f17bdbb192b7ab21cfe84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:f3:29:6e:97:79:8f:8e:c2:73:df:31:62:
                    f7:f3:d6:69:d5:a7:0d:4c:cb:f2:07:ef:a4:ec:7c:
                    5f:e6:01:32:3c:c5:91:c9:67:b1:56:fe:e0:e1:19:
                    d4:e3:a2:7f:33:d4:0a:6d:97:8f:a6:db:fa:85:22:
                    04:12:0f:e1:9d:de:75:cb:60:22:8e:36:b8:fc:2d:
                    de:50:0b:83:88:60:75:80:cb:9b:8f:37:9d:92:e4:
                    09:a2:f4:e1:bc:de:bf:72:d9:7f:d0:c7:d3:b2:6b:
                    e5:c0:86:80:20:60:50:de:4c:16:85:56:c2:2c:ec:
                    36:29:42:f1:22:f7:2a:88:62:be:9a:57:3e:45:4d:
                    bb:60:a4:e8:0b:ad:19:0b:42:d9:b5:27:dc:47:ca:
                    11:ac:50:31:28:c8:8f:3f:6d:c3:ad:54:be:bc:02:
                    a5:a8:72:d4:4a:42:aa:2e:43:4d:2f:b4:d8:33:49:
                    e4:5d:96:be:d8:d1:4d:f9:c2:4a:83:61:dd:99:5b:
                    ab:d3:54:fa:f9:29:fd:94:54:d4:73:d5:1a:11:37:
                    c1:8b:74:87:72:25:e2:e3:15:1f:03:1c:76:5c:d9:
                    ba:05:44:27:65:0e:39:66:cc:4b:e8:da:e8:ff:03:
                    56:db:88:e9:60:49:4f:19:a9:83:b7:d6:3e:26:cc:
                    a7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:18:24:F2:A5:B6:CF:B7:3C:7F:17:BD:BB:19:2B:7A:B2:1C:FE:84
            X509v3 Authority Key Identifier:
                keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b1:19:e3:b0:0d:14:87:f5:b9:e7:a3:bc:63:fb:0b:65:34:
         e6:46:19:f9:69:30:97:97:46:ad:6d:63:6f:ee:1d:75:79:c1:
         34:9c:98:e4:b3:31:6c:47:6c:6e:fa:a2:28:34:56:f3:24:15:
         78:70:39:d4:47:8c:1c:8f:84:b9:ea:56:da:38:9f:59:99:4f:
         75:a8:61:61:24:3a:10:53:cf:5b:5b:1e:cb:a6:88:9a:c0:e6:
         35:74:de:07:ec:76:06:33:21:80:0c:6d:ae:a2:f3:07:d4:12:
         2a:5c:08:5a:49:a6:56:dc:1c:0d:25:74:2a:8f:c0:98:1b:16:
         2c:d6:62:47:a1:53:f8:62:34:57:dc:d2:f8:89:7f:ec:7a:24:
         b5:c9:8b:9e:49:16:16:81:43:f3:2b:01:09:3b:15:d6:41:fc:
         52:0f:9f:b3:03:9a:dc:da:d4:0b:0d:d1:6f:b2:f6:dc:6a:02:
         77:7d:fc:16:4d:8c:a1:2f:0b:7f:93:c4:8e:2e:26:2e:98:3a:
         8a:5c:13:92:30:13:00:ca:21:15:35:b3:ca:1d:b5:03:73:82:
         00:5f:6e:4f:87:2e:50:a8:f6:d0:48:80:58:8e:58:d4:9e:14:
         db:70:ad:ea:53:66:2c:d9:70:85:2e:37:08:66:03:3b:45:cb:
         d4:91:96:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:21:27 2024 by rpki-client on console-fra.rpki-client.org