Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File:                     uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier:          XsRu3WODPdZLv02VOZ49nt4IA92m4UfVYtFCJwr7Miw=
Subject key identifier:   C1:29:82:02:8B:74:1D:BD:6F:E7:FC:7A:4B:C6:9D:85:6C:AB:85:93
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer:       /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial:       018F87ED323389B545B8511B5406B06B31A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number:          0110
Signing time:             Fri 17 May 2024 19:00:19 +0000
Manifest this update:     Fri 17 May 2024 19:00:19 +0000
Manifest next update:     Sat 18 May 2024 19:00:19 +0000
Files and hashes:         1: ahPuG3b0TscgRV22b823DGyexKQ.roa (hash: eqvp88w9pFXyFdBaBbUd2NoOlNzQ5bBBbUunggZG+8g=)
                          2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: jsXoRKKJaxEXc2YNcC/3VrbgNWaV+fM+a6ihM3hgxPA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:32:33:89:b5:45:b8:51:1b:54:06:b0:6b:31:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
        Validity
            Not Before: May 17 19:00:19 2024 GMT
            Not After : May 18 19:00:19 2024 GMT
        Subject: CN=c12982028b741dbd6fe7fc7a4bc69d856cab8593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4c:3c:fb:6c:db:ac:35:0f:d7:06:b5:6f:f4:
                    08:ed:8e:8c:d7:59:6b:0e:9d:da:7b:29:85:de:5d:
                    43:0d:2d:1c:68:3b:24:17:b3:71:a2:1f:4a:4c:a4:
                    2a:7e:9d:36:f8:0b:ae:d5:08:a4:1d:45:26:b8:d7:
                    31:10:87:0a:b7:85:3a:f7:09:bf:03:7f:70:ac:2b:
                    81:3e:39:69:00:25:2d:ce:68:18:17:41:d7:48:4c:
                    81:88:55:81:49:86:e9:54:4e:8e:3b:54:90:a1:19:
                    b2:97:bc:ae:6a:10:2a:7c:b4:d9:f2:ed:f7:a6:22:
                    4f:8d:b7:d6:58:98:20:3d:b0:1f:e2:50:d0:07:2d:
                    40:8b:9b:9c:cc:93:18:fc:0f:4f:4d:97:f1:88:a0:
                    4e:92:f4:c9:fc:85:9e:34:2c:5e:dc:70:f3:a6:27:
                    c9:9e:67:81:dd:ef:98:a3:58:95:4c:a7:c4:cb:33:
                    bf:04:f3:90:ec:c8:1b:ff:36:41:b1:93:ce:99:78:
                    2c:64:49:cd:57:07:3b:7b:d4:b8:27:d0:dc:03:c0:
                    c6:9a:63:ed:58:40:85:db:ae:d0:db:3f:cf:00:cd:
                    96:e6:ee:c6:d8:92:d1:5d:76:5f:6e:89:7f:d4:46:
                    f1:95:1b:27:31:f6:47:22:8a:ad:89:84:fa:81:36:
                    50:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:29:82:02:8B:74:1D:BD:6F:E7:FC:7A:4B:C6:9D:85:6C:AB:85:93
            X509v3 Authority Key Identifier:
                keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:27:98:e8:c1:59:e2:50:5d:f3:c6:d0:30:7b:59:e8:f1:ea:
         39:85:21:fa:3a:77:29:dd:23:9d:a5:74:d5:68:23:a0:71:c5:
         2c:1c:b7:28:28:5d:13:7b:0f:c7:55:c1:01:fc:ff:a1:5e:36:
         35:3b:97:1f:2b:fc:4c:a1:f4:35:b5:e6:2b:54:07:d7:9b:2a:
         9f:93:ff:bf:59:b1:07:61:b1:4a:c0:6b:0b:fb:0c:c1:30:45:
         5c:df:df:f9:0f:15:4e:24:be:78:ca:ec:7d:e2:40:6d:fc:99:
         05:fc:ba:86:ae:a5:1f:54:eb:e7:8f:c3:16:e9:14:ed:d8:62:
         2f:75:0a:a6:0a:78:f0:41:1f:f3:fd:72:db:d7:72:06:d5:a0:
         ca:d6:3b:67:20:4e:42:fd:57:aa:1f:33:95:b3:cb:d8:8f:0c:
         a5:f7:ba:69:27:2e:db:16:f9:ea:01:cb:ec:94:a6:55:ae:57:
         7d:77:76:22:58:81:4c:f2:a7:05:32:2d:47:85:05:00:75:d5:
         db:2c:9f:60:82:e8:ea:36:d7:db:d1:41:b7:14:4c:1e:bb:d1:
         0a:fb:6c:ba:08:d6:9b:fd:2b:ba:0f:9e:ad:2a:de:d4:a3:86:
         a2:79:50:96:4d:62:fd:a3:7c:60:68:ab:51:dd:8b:fa:bd:a0:
         58:d0:3f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:55 2024 by rpki-client on console-fra.rpki-client.org