Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
File:                     U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json)
Hash identifier:          1AlSde/ptH6e0QMMjanNHC7cqwqE+lrYt09i4ExdUsw=
Subject key identifier:   10:61:D0:D4:E3:B1:F2:FC:8D:4E:64:DF:6D:A3:91:6D:E8:89:2A:A9
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Certificate issuer:       /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial:       018F87ED079BA51A0F30E600E91AC25F6F30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
Manifest number:          0762
Signing time:             Fri 17 May 2024 19:00:09 +0000
Manifest this update:     Fri 17 May 2024 19:00:09 +0000
Manifest next update:     Sat 18 May 2024 19:00:09 +0000
Files and hashes:         1: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: V/YHyesVqkUqIR67jEQCuzcr9xSUA8xpY/73ZTVTUOc=)
                          2: arytXZ6LFO0omfxb1Y_v0FyJS-g.roa (hash: NGg7/Q0qdjlNBB79DSTk0b4nbKrSXaF62xi5RBu5pfQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:07:9b:a5:1a:0f:30:e6:00:e9:1a:c2:5f:6f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
        Validity
            Not Before: May 17 19:00:09 2024 GMT
            Not After : May 18 19:00:09 2024 GMT
        Subject: CN=1061d0d4e3b1f2fc8d4e64df6da3916de8892aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2e:40:c7:92:90:ee:9e:a8:38:ca:d2:57:19:
                    fa:1e:cd:da:d0:a6:45:8c:e9:dd:5d:4f:21:71:1d:
                    79:10:90:ce:7b:db:ca:17:2f:b3:30:48:d4:49:12:
                    0f:ea:82:e6:43:fb:1e:f2:ba:ca:1b:21:1b:4e:f1:
                    24:11:25:1a:d4:fb:a6:4f:57:d6:cc:96:a6:31:a9:
                    c7:c9:4a:57:96:c2:8c:28:36:bc:5a:05:62:cb:1a:
                    8c:52:45:00:0d:88:e8:65:29:d1:91:dd:c5:23:4e:
                    e1:87:93:73:7c:90:ee:09:76:bf:d6:b7:1b:97:3d:
                    39:f1:82:65:74:f8:6c:e3:03:50:73:6a:64:73:16:
                    cb:1a:99:1c:f3:06:37:95:f5:10:57:66:ba:ee:af:
                    1e:49:2d:28:9d:e5:ef:57:40:77:f8:2a:54:45:04:
                    c7:71:63:64:86:41:4a:2c:65:6a:58:d9:1a:4b:b6:
                    8e:b4:29:aa:bf:07:77:97:a9:30:70:be:8d:63:80:
                    12:b9:9e:86:40:c2:03:86:e9:6b:8a:b2:79:9f:d1:
                    1b:ba:0f:23:62:7f:01:15:ac:4c:87:bc:5c:4d:d4:
                    bb:a9:b5:b1:39:96:1f:15:40:99:9f:c0:62:5e:15:
                    be:ba:36:2c:f5:32:85:b3:5b:ce:1d:20:c3:36:f1:
                    d5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:61:D0:D4:E3:B1:F2:FC:8D:4E:64:DF:6D:A3:91:6D:E8:89:2A:A9
            X509v3 Authority Key Identifier:
                keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:4a:e5:b5:63:51:ae:9c:17:47:b4:ff:79:2b:33:7b:77:46:
         d2:b4:1a:cf:20:85:f4:1f:ee:70:5a:7a:38:e0:be:56:47:29:
         8c:b6:1a:b9:81:b8:da:e7:7d:e6:fa:8f:27:80:86:07:f3:50:
         38:6e:a1:ef:13:93:23:2e:9c:e6:3f:6f:53:d8:dd:64:a9:f4:
         65:f3:40:15:26:8b:d2:9f:2b:10:d1:ec:92:cc:57:5f:e3:67:
         78:c7:a6:77:57:17:ce:ba:63:1d:e3:ec:ae:1a:43:ed:07:81:
         97:88:ef:2c:68:4a:d5:d5:5c:2b:5a:4d:45:b9:2a:76:cc:8b:
         61:d3:45:af:69:1f:6b:a3:e6:85:e3:5f:74:25:69:3f:e1:b2:
         0a:dc:07:0e:64:6c:24:a2:02:7a:25:b4:76:b8:c8:70:42:b9:
         29:7a:39:5f:eb:ff:80:0e:94:b6:8d:8e:14:29:d0:4b:c8:37:
         9e:ba:0a:00:15:b0:e3:be:4b:66:a7:a5:21:8f:a3:12:79:95:
         d5:01:a6:0c:ba:ec:af:4e:c4:67:4d:6c:b9:3c:8b:62:46:81:
         90:fd:47:94:d3:49:8d:d1:49:5a:f2:6d:03:09:d6:99:1f:19:
         e8:10:43:98:b8:a4:53:53:af:2f:7e:f6:68:b3:39:ec:49:37:
         01:72:0a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:17 2024 by rpki-client on console-fra.rpki-client.org