Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
File:                     u-Eo3LaBD_3FArowR81BkTLaInQ.mft (raw, json)
Hash identifier:          JnzUa8z4RIfTH8/05d2dhAovgNfv6IGlddycHYDqvOE=
Subject key identifier:   D2:6F:49:DB:FE:2A:93:B9:BA:34:9E:B4:B9:44:75:24:18:6D:41:A5
Authority key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
Certificate issuer:       /CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Certificate serial:       018F89379BE222B335200FA36C7BE137D236
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
Manifest number:          10CB
Signing time:             Sat 18 May 2024 01:01:13 +0000
Manifest this update:     Sat 18 May 2024 01:01:13 +0000
Manifest next update:     Sun 19 May 2024 01:01:13 +0000
Files and hashes:         1: u-Eo3LaBD_3FArowR81BkTLaInQ.crl (hash: I37yzUynm+PdI4zNmAm5koH3Wc9/HfMakAAax3NhPx8=)
                          2: wyiBFKsG7mhieb9Aca9FzDZ_Sl0.roa (hash: a2wBSTdy+4JP7tb65w7vsC2KCZCYJCeTlMmF/ryiLlY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:9b:e2:22:b3:35:20:0f:a3:6c:7b:e1:37:d2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe128dcb6810ffdc502ba3047cd419132da2274
        Validity
            Not Before: May 18 01:01:13 2024 GMT
            Not After : May 19 01:01:13 2024 GMT
        Subject: CN=d26f49dbfe2a93b9ba349eb4b9447524186d41a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:97:b1:af:74:e2:b8:61:f2:15:05:e4:98:
                    38:8d:f7:23:ac:35:d7:4c:1d:b4:0b:5e:41:91:92:
                    e3:66:03:28:89:19:6b:83:a6:08:1d:75:1d:96:1a:
                    2a:d2:dd:35:63:33:6b:d7:0d:6d:a9:98:52:59:ef:
                    bb:3a:b0:ad:6e:2b:6b:d4:7d:4e:a7:df:79:8b:ed:
                    6f:3d:04:6a:23:f7:e7:09:17:d3:11:b6:a4:ba:ef:
                    08:b6:8e:29:6b:c4:9c:0e:a1:19:b9:7a:0b:8b:bb:
                    c6:88:23:7b:50:07:e8:a8:b0:a9:64:21:21:e8:83:
                    55:4e:85:eb:3a:1a:1f:d5:05:59:00:0f:a8:f9:ec:
                    59:67:9b:e8:03:f4:0b:79:f6:7a:8b:89:93:ad:71:
                    ee:d4:52:61:15:f7:6c:d3:57:9f:37:f1:3c:fc:9d:
                    81:10:df:85:79:02:b6:54:82:9f:e1:4d:b4:39:54:
                    03:43:65:cc:6f:14:ec:01:1d:75:2b:dd:f8:93:5a:
                    ca:43:c2:74:5c:da:01:b3:fe:23:6c:24:8f:fa:f4:
                    f3:10:6d:ce:67:96:30:46:42:64:16:d2:e4:92:0e:
                    3e:b9:3d:91:46:09:34:f5:6e:d0:8c:30:8f:b4:a8:
                    d0:33:69:6b:aa:4a:33:2d:1e:71:f7:b3:e7:b1:f6:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6F:49:DB:FE:2A:93:B9:BA:34:9E:B4:B9:44:75:24:18:6D:41:A5
            X509v3 Authority Key Identifier:
                keyid:BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:76:7a:5f:35:ca:69:0f:ef:f4:9a:b6:2a:c3:03:17:c5:34:
         74:c1:05:fc:80:fd:b8:63:5a:af:13:d2:d1:e4:62:91:4f:bd:
         3e:9c:dd:1d:d7:76:0e:5c:87:1c:ad:21:68:a2:7b:fc:ee:20:
         a4:56:ff:85:fa:b2:99:e8:c9:eb:a9:45:e6:58:42:13:f5:3d:
         fe:f5:9a:58:3d:eb:2f:8b:81:02:2b:bc:3c:1f:97:1d:c1:ad:
         d5:7f:e8:a4:b3:e2:8b:0f:fc:50:ab:f1:6c:d4:f0:38:ad:9a:
         5f:d7:9a:3f:9f:40:8e:ef:cf:22:2a:68:7b:ad:f8:ba:00:96:
         3a:0a:16:bc:b2:d7:c6:08:a4:13:54:d9:3c:13:cb:c1:f8:52:
         60:de:09:eb:fb:84:0d:1e:b8:8c:26:e4:34:5b:34:4f:f8:e6:
         89:cd:0d:a4:da:f4:05:f3:9d:d0:dd:e8:2c:f8:f8:f3:21:3e:
         0b:30:2d:fb:be:79:48:a1:d3:b0:9a:5e:77:0b:a3:1a:e5:e2:
         b9:eb:4c:b4:3c:7d:3c:92:dc:72:69:d2:2d:d1:29:c0:c0:7d:
         c6:03:42:91:be:7f:d9:73:74:f5:a5:cf:cb:75:e9:8f:1e:6d:
         76:0f:c3:0e:9a:56:e1:f8:62:49:c4:33:e9:fe:c5:c3:99:b9:
         6d:df:35:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:14:40 2024 by rpki-client on console-ams.rpki-client.org