Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
File:                     zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json)
Hash identifier:          XX3HCMETQG8JOCzXpOsAwMfHZec9eB4BIDUWV3TyfLA=
Subject key identifier:   B9:65:7E:4E:C9:20:CC:4A:6F:10:B4:D1:16:54:63:56:0F:5F:8E:46
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Certificate issuer:       /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial:       018F874ADAA7E1E58A542A5C21FA04113213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
Manifest number:          0990
Signing time:             Fri 17 May 2024 16:03:00 +0000
Manifest this update:     Fri 17 May 2024 16:03:00 +0000
Manifest next update:     Sat 18 May 2024 16:03:00 +0000
Files and hashes:         1: _CvwUjar5ZUxLAy3roKYymksehI.roa (hash: iluO24vRx3sclOz4E6pArVGby7W3zCK/ocYiv7ONNfM=)
                          2: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: 1UimZUH/vsua1iUrY8qqr2cqjNa1uUCY6e0CXjR0IYM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:da:a7:e1:e5:8a:54:2a:5c:21:fa:04:11:32:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
        Validity
            Not Before: May 17 16:03:00 2024 GMT
            Not After : May 18 16:03:00 2024 GMT
        Subject: CN=b9657e4ec920cc4a6f10b4d1165463560f5f8e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e1:53:17:a6:5b:70:5b:4d:9e:26:28:d3:81:
                    cd:a4:60:0e:82:c8:5e:39:57:2b:72:c3:fe:5d:a1:
                    18:83:6e:76:d3:79:af:b6:fe:ca:13:a6:b1:e2:c4:
                    1b:f7:0a:3f:d1:87:bb:31:32:65:b4:3a:fa:bc:97:
                    33:73:7e:74:ad:80:a9:72:65:85:28:29:51:dd:67:
                    1b:41:e4:84:90:5c:dc:c6:79:0b:c5:92:ee:03:67:
                    08:a3:ac:df:1f:c3:6c:89:f3:73:c7:2b:0e:5e:91:
                    a9:27:b1:69:7f:5d:02:e9:2b:9e:f0:b7:b0:be:8d:
                    20:e8:95:84:24:09:a2:52:ea:59:57:57:56:e9:36:
                    bd:98:47:5e:24:d1:36:fc:e0:ab:ce:2b:9d:0f:42:
                    66:bb:d1:8f:93:f8:93:26:40:64:cc:e2:56:73:97:
                    ea:c9:cf:d9:38:e9:27:a4:d4:92:ea:e8:73:72:b4:
                    5e:61:5f:6f:c2:dc:69:ba:d9:36:54:fb:a5:8c:73:
                    6e:af:15:69:e8:3c:9c:b0:60:b1:bd:c1:5c:be:27:
                    8c:3f:fe:ec:78:ad:7c:c7:ca:ce:72:04:b4:66:90:
                    b8:4e:b4:76:19:cc:b4:13:c3:62:1f:84:88:3c:b4:
                    1d:0e:fe:cc:62:3e:ab:11:d0:79:b5:92:17:ae:30:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:65:7E:4E:C9:20:CC:4A:6F:10:B4:D1:16:54:63:56:0F:5F:8E:46
            X509v3 Authority Key Identifier:
                keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:07:35:a4:e8:cb:cd:cf:7e:f4:46:72:ea:74:86:10:77:a8:
         e4:6a:29:94:36:47:ff:18:6e:66:c8:e1:a3:20:c1:fb:57:70:
         d1:71:e3:3f:36:1e:ad:6c:0b:75:94:d9:66:40:c7:af:87:f0:
         5e:0c:01:9e:27:2d:75:7f:16:4a:96:42:f6:9a:12:16:35:3f:
         15:0f:3d:4c:7a:b4:34:d0:b5:06:00:d9:e6:b1:0f:b0:d2:6f:
         ce:db:31:0b:d3:12:61:cc:ac:e4:e3:23:50:a0:56:0a:6c:20:
         66:1b:e6:6e:9c:46:2e:30:6f:51:f7:58:9b:07:ec:07:9f:ee:
         ef:d5:d8:1d:5b:ed:55:fc:af:17:3a:51:6f:05:c9:43:31:9d:
         f8:6a:10:e7:07:43:56:bc:da:20:68:69:8c:76:d4:bb:7b:08:
         28:75:c8:02:b3:45:76:8b:15:b7:2b:21:22:6e:25:bd:87:fa:
         60:f5:71:e6:0a:73:00:57:1d:5e:aa:3d:e8:97:2e:dd:84:1d:
         09:3d:c1:3a:d8:b4:3d:58:86:71:1f:fe:d5:b8:5e:08:a9:ee:
         8c:68:57:f3:2f:5e:d1:4d:b7:79:7d:a2:e3:78:d4:16:7a:60:
         ed:fd:6d:c4:91:8d:59:cc:e3:7f:99:35:06:4d:c8:84:2d:a9:
         1e:64:42:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:29:58 2024 by rpki-client on console-fra.rpki-client.org