Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File:                     U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier:          wo5mQNtSL5eEKK0nE8S9rq4cLVeTxcK455JK8ytDOLo=
Subject key identifier:   FA:45:1E:4E:69:5F:90:B3:B3:AD:6D:D7:D4:3C:E2:23:AE:00:98:48
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer:       /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial:       018F5738727A1DD3D701F911F0F117F8326C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number:          0992
Signing time:             Wed 08 May 2024 08:01:07 +0000
Manifest this update:     Wed 08 May 2024 08:01:07 +0000
Manifest next update:     Thu 09 May 2024 08:01:07 +0000
Files and hashes:         1: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: hUmbPycw+8Bye7twNdQo0wYUzxBMW+Quu4UTfe4Ch+Y=)
                          2: UPRGjZp7r-Trx1VtxCWb4_GYSXQ.roa (hash: zTMCntn9K7TnO5RQp+jUm5Q2J8lZDYuJ8diNFgjPr6A=)
                          3: _BGpGzmDIm7YEve92BwjZ_sIyZA.roa (hash: PE+GVyKpzzR5kCksI0o08q10NkHGpfOiIfsmFswX9+0=)
                          4: lVv-L4FsgMAxeCwUBS2D7vNfjzM.roa (hash: x5qnzZUlpsCUUFFyW/b6XwWTDuJZbv4rZIvu0WWTimo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:38:72:7a:1d:d3:d7:01:f9:11:f0:f1:17:f8:32:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
        Validity
            Not Before: May  8 08:01:07 2024 GMT
            Not After : May  9 08:01:07 2024 GMT
        Subject: CN=fa451e4e695f90b3b3ad6dd7d43ce223ae009848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c2:4c:78:ee:3b:13:81:62:e9:af:f3:ce:8e:
                    f2:43:0b:85:10:58:5b:c1:df:18:c2:ec:5f:5a:f5:
                    60:fd:b6:79:84:21:aa:55:da:a1:72:56:44:21:cd:
                    b3:22:7b:65:0f:1a:84:00:c0:4b:90:92:48:15:4c:
                    ec:c2:8c:b9:e0:8a:b4:cc:13:a6:61:c4:d6:9f:e7:
                    d7:a4:ce:d9:49:3d:cc:d8:29:37:4d:2c:19:90:df:
                    87:da:14:c1:f5:5b:f5:63:c5:d0:20:eb:32:65:74:
                    c3:1e:b8:81:dd:3c:ff:ac:29:43:8f:9e:2c:f2:6e:
                    38:8d:7f:57:1f:54:b3:6a:6e:13:65:b4:1c:cf:57:
                    2b:ed:dd:4c:de:5b:b5:8e:d3:c9:dd:72:ea:70:a7:
                    67:28:51:6b:0a:b1:dd:28:96:93:60:58:6a:29:e9:
                    3d:17:95:16:eb:59:b7:52:08:8c:58:61:e3:76:f8:
                    99:7b:16:4d:08:a0:e7:60:24:41:1c:7a:7d:67:d0:
                    97:e3:d3:88:6b:67:3f:b2:72:13:39:a4:c9:96:62:
                    af:ac:a5:0b:48:55:db:d9:5e:13:29:6d:7b:ba:bc:
                    33:ec:aa:1e:6c:3b:85:aa:42:1c:bf:af:6c:90:c6:
                    46:7e:3a:be:2d:b3:09:07:c1:f6:28:98:f1:77:d1:
                    d5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:45:1E:4E:69:5F:90:B3:B3:AD:6D:D7:D4:3C:E2:23:AE:00:98:48
            X509v3 Authority Key Identifier:
                keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f4:43:54:cd:62:cd:50:44:f8:8e:63:58:33:78:ef:40:72:
         e0:a6:27:0e:51:23:13:9a:71:ae:9e:c2:aa:de:5d:0f:1c:50:
         d9:84:bf:7a:4b:25:ce:de:02:50:a0:88:d8:4c:eb:49:94:04:
         a4:ba:cd:e4:e7:3d:13:5a:87:5f:22:1a:ea:4b:f8:38:23:c4:
         51:23:de:76:a2:e8:42:4b:d5:88:1c:6f:59:5b:08:fe:4c:90:
         68:b0:cb:b4:f1:d7:14:f0:c2:29:84:a5:a8:90:2f:6e:cc:7d:
         4a:cd:63:c0:37:b9:d3:e1:42:0a:65:2d:ab:9f:43:73:26:16:
         5a:d8:3a:ee:1d:54:94:64:63:bf:14:42:cb:62:ce:02:15:ce:
         a1:84:a9:52:f7:89:88:2b:17:46:4c:9e:17:2a:5e:3e:d5:3d:
         d1:ca:d3:ee:58:d3:96:22:e1:3f:a9:18:1f:66:3d:4f:2c:59:
         00:85:58:28:d7:dc:f3:1f:61:29:7f:18:53:e0:85:23:80:d2:
         a2:f3:21:2c:37:09:5c:19:18:26:60:90:75:4b:b3:b5:7e:e4:
         52:18:5f:18:4e:4f:c3:02:bc:17:d1:c8:21:cf:a1:d5:d7:69:
         a0:48:a7:41:59:03:48:8c:01:1c:f4:ae:59:40:95:8d:6a:90:
         e2:a6:ad:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 13:03:52 2024 by rpki-client on console-fra.rpki-client.org