Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
File:                     uRvis2eZBLYKL8OZt4CByGsDjZk.mft (raw, json)
Hash identifier:          nfw/K1p3+LXaFDkaNzOkHc/3bPz5LpY4BuG3hivFT1k=
Subject key identifier:   25:EE:B0:FD:6F:37:FC:45:06:12:82:2C:11:A5:E1:2F:3B:0F:1C:F2
Authority key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
Certificate issuer:       /CN=b91be2b3679904b60a2fc399b78081c86b038d99
Certificate serial:       018F87ED7C439931D4F398D29D632621ECB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
Manifest number:          03B5
Signing time:             Fri 17 May 2024 19:00:39 +0000
Manifest this update:     Fri 17 May 2024 19:00:39 +0000
Manifest next update:     Sat 18 May 2024 19:00:39 +0000
Files and hashes:         1: DyEVA85Ygw50CWJCZjoG5j0hQiI.roa (hash: yeFD+xOmh0Js7i3CdvSFbodn7u9dSny2tmOjegN6Gww=)
                          2: uRvis2eZBLYKL8OZt4CByGsDjZk.crl (hash: KKztSJC8/Bpbxc66czFW7k+NDvyebcSH7OBHJupsXGc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:7c:43:99:31:d4:f3:98:d2:9d:63:26:21:ec:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91be2b3679904b60a2fc399b78081c86b038d99
        Validity
            Not Before: May 17 19:00:39 2024 GMT
            Not After : May 18 19:00:39 2024 GMT
        Subject: CN=25eeb0fd6f37fc450612822c11a5e12f3b0f1cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3a:1c:43:6e:0d:58:f2:49:41:1e:34:89:f1:
                    1d:8b:b7:01:77:3a:c2:f7:67:39:40:00:31:32:72:
                    21:4c:ae:ca:fd:16:2c:95:f4:a0:11:a2:98:33:d4:
                    85:d5:16:bf:91:c7:64:39:09:0b:89:b4:e8:06:ba:
                    bf:cc:77:00:88:cd:e4:94:8b:5b:82:e9:78:01:03:
                    a9:8b:ac:1a:5b:72:79:62:92:2d:36:2e:3c:99:77:
                    1a:7a:3d:08:24:fb:03:eb:34:f3:48:39:c1:03:36:
                    e3:bf:28:29:31:32:25:c7:ce:c7:95:95:c1:dd:7d:
                    90:e4:8c:b9:58:af:13:2d:26:db:5e:da:5b:62:82:
                    e6:03:af:c2:59:bd:9a:c1:a3:9e:1c:94:ba:74:b3:
                    dd:52:6a:fc:8f:9d:4f:18:2a:a9:c3:60:de:4e:31:
                    7b:1f:5f:d0:cd:4e:ab:9e:b1:8f:5f:03:10:91:fa:
                    99:ad:52:a6:ad:8b:12:2e:e9:22:88:c8:05:10:b6:
                    fc:e5:2f:b6:fa:a3:b4:a9:4e:6b:7b:74:e0:2a:f2:
                    99:d2:64:ec:da:0c:cf:2b:34:df:04:5b:a5:fa:2d:
                    a9:a0:7d:c3:fd:93:4e:4a:67:e3:c8:64:db:b0:75:
                    87:f6:89:22:50:9f:0f:2e:13:2a:3b:d1:dd:b2:b1:
                    d4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EE:B0:FD:6F:37:FC:45:06:12:82:2C:11:A5:E1:2F:3B:0F:1C:F2
            X509v3 Authority Key Identifier:
                keyid:B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:59:11:ff:ea:d5:9a:68:ce:30:98:89:e0:f3:0c:ac:1c:31:
         ec:bf:2d:75:1c:85:bf:42:19:56:3a:5d:7b:c5:94:2c:b2:72:
         b2:2b:fe:9e:3a:4a:ff:d7:1f:9b:b1:19:b4:00:b9:eb:9b:53:
         08:e4:e1:1a:ac:76:ed:8f:44:99:12:12:a7:f6:c0:9c:5e:e8:
         d9:82:6a:a9:93:59:c3:ba:27:b9:b6:58:62:f4:63:d6:11:41:
         99:d6:3a:2b:fc:ae:13:48:c9:28:f1:37:a1:f6:67:df:ef:ba:
         fd:37:b9:a8:b4:2a:5b:e7:86:7e:76:64:36:07:be:67:3b:67:
         22:ad:e8:d4:59:50:f0:64:7d:c0:06:aa:5f:4d:9a:8c:db:ff:
         ba:55:f5:12:b2:91:6c:b2:c5:3c:d8:ec:76:1a:f7:77:1d:a0:
         78:76:d6:8c:2a:bd:fc:42:0e:63:bb:0d:11:bc:39:9b:ba:10:
         9d:1f:4c:fa:d8:aa:84:77:b7:5a:69:51:36:4c:04:d7:1a:06:
         5a:69:53:6e:d6:03:83:46:f5:3f:c4:80:00:12:64:ba:b9:df:
         41:b1:9e:05:5a:b2:29:3c:33:07:ad:e2:9d:c6:24:77:c2:57:
         3c:f8:3d:1c:00:59:ce:b7:d7:c4:8d:52:0b:8e:8c:b1:33:ee:
         bf:38:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:00 2024 by rpki-client on console-fra.rpki-client.org