Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          58ePsiF6GegY8ABdAhHb7+j4XU/jLJmzUjQQCIiQbno=
Subject key identifier:   5F:FA:45:11:85:35:B6:E9:2B:D2:4B:8C:37:2B:74:1C:C6:D1:C0:D4
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       018F885B5B3564BE4D40A88E9975A559D17E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          0DF0
Signing time:             Fri 17 May 2024 21:00:39 +0000
Manifest this update:     Fri 17 May 2024 21:00:39 +0000
Manifest next update:     Sat 18 May 2024 21:00:39 +0000
Files and hashes:         1: 1el2VHY2KSBqSFamjkLGUElNqmk.roa (hash: K0WAZOT5346Voq8jkw8ldw5De1mqnugqxpCsSy3tF84=)
                          2: 7xJzZuXVkw14u4HIKBgu9T528JM.roa (hash: srQ3RyevNjwc4jKrZflbpcqjf4hiN6EaOh0ZilNd5Ec=)
                          3: KpMQAtPuHdlX7rG5Rn7GkNjdkvo.roa (hash: mLO9YcGJa5MjqoJDWHsNEflkwos3bDXmJkVUum24YVI=)
                          4: pf1N8n7STtur0vjt-b41ebDS6C0.roa (hash: ZSviE6Mn4Z/jmEHNDWc3gBys8T5peHEhv1hf355RXb0=)
                          5: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: yrAbs7BEcZdJ4Ge360+4rM2czz13CqJPfMmVdufnm94=)
                          6: ypjKkH0fP4ystAVBrqq8hDcs4iE.roa (hash: CgiQvBL03vM7kBZsrdF8RgHAx97srDW0kc2XyJuBkBk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:5b:35:64:be:4d:40:a8:8e:99:75:a5:59:d1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: May 17 21:00:39 2024 GMT
            Not After : May 18 21:00:39 2024 GMT
        Subject: CN=5ffa45118535b6e92bd24b8c372b741cc6d1c0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:5f:9f:ff:41:ac:c2:a7:3a:1e:4b:e6:2b:
                    f3:da:cd:89:e4:0d:a7:ed:65:d8:76:ba:aa:b6:ba:
                    0b:da:9e:df:be:2a:ab:fd:7e:2f:03:a0:81:7a:5a:
                    df:2c:9c:17:ff:29:09:7c:9a:b8:1b:ab:8f:1b:e8:
                    ec:a4:5b:f3:ce:f7:a2:48:96:07:14:84:dc:3b:29:
                    4b:1d:d3:cf:13:b6:a8:71:7f:66:f5:97:27:c8:ee:
                    7f:41:21:90:83:c9:c5:b5:e9:d7:bd:14:8d:18:e8:
                    a4:c2:9f:4a:54:32:d0:c6:ea:ff:52:07:a8:b6:98:
                    46:de:e4:45:e2:23:81:de:b6:42:25:2a:a0:fb:96:
                    61:74:04:85:7f:c6:e0:a1:7d:a3:54:e6:09:38:25:
                    de:0d:a4:04:3c:15:ac:f0:b4:96:93:71:51:bd:a9:
                    be:f0:c3:78:b0:1b:c3:88:39:37:92:4e:44:25:d3:
                    e7:7b:16:31:ed:54:15:33:50:28:4b:e4:25:64:ee:
                    55:c2:be:36:f8:31:86:a6:42:44:c9:46:bb:8a:00:
                    96:43:00:ae:77:74:d3:f4:7d:96:91:4f:2e:01:89:
                    a4:15:75:1b:df:03:c8:22:ba:69:37:3e:d8:66:5e:
                    26:6f:08:39:99:29:01:50:84:0e:e0:60:f3:40:5a:
                    15:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FA:45:11:85:35:B6:E9:2B:D2:4B:8C:37:2B:74:1C:C6:D1:C0:D4
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:92:4e:37:3d:bc:29:31:a3:ff:30:6c:a4:2b:df:a9:f3:80:
         1b:a5:36:54:b8:3f:e6:3b:c2:82:28:2e:de:0b:f3:bf:54:c4:
         b0:5c:09:e7:8d:30:38:c7:e0:2a:62:6c:b0:de:e8:ba:64:27:
         d2:13:62:7e:48:ea:bc:9f:34:88:95:7f:4f:83:ff:e2:9b:aa:
         20:07:02:38:93:c4:e2:f4:e2:ea:bf:f7:a8:ce:f7:6d:2a:0f:
         ef:27:d5:fd:3f:f5:ac:aa:01:23:71:0c:fa:36:0c:16:66:7b:
         bc:32:f1:96:a8:7e:ff:47:b4:cb:20:17:a7:68:5b:1e:01:1f:
         fa:72:55:fa:d2:36:bb:01:73:c9:93:07:40:93:fb:d7:eb:53:
         1d:28:95:9b:03:db:16:dc:fe:1e:ba:be:c5:fe:3e:23:9d:b1:
         3e:ec:a0:5d:0f:dd:20:42:76:75:68:87:26:e0:58:dc:b3:f2:
         a9:98:10:ac:58:13:5c:97:03:78:42:61:e3:8f:80:7d:29:28:
         0a:23:e6:00:5d:08:b5:81:ee:23:a3:6a:69:1f:ae:ce:76:50:
         bf:92:1b:19:fc:51:d3:3d:14:ef:0a:ff:b1:31:18:f5:0c:13:
         6f:02:03:53:f0:82:8d:3b:22:9e:00:39:98:f0:52:82:0c:81:
         2f:dd:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:43:20 2024 by rpki-client on console-fra.rpki-client.org