Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
File:                     uakIi7QgHORtjrg9yfOMeLjzvhs.mft (raw, json)
Hash identifier:          9DXexNwvVNaWuJcGt8LK6KOJ4kkDbgZNNSEKzpOAVhw=
Subject key identifier:   BB:16:B7:AD:1D:4B:2F:FD:F2:AD:C8:0F:55:1B:EB:9D:09:20:E1:7A
Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
Certificate issuer:       /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Certificate serial:       018F96BB92246DA9F8A38229977B7A8AE4A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
Manifest number:          08B6
Signing time:             Mon 20 May 2024 16:00:25 +0000
Manifest this update:     Mon 20 May 2024 16:00:25 +0000
Manifest next update:     Tue 21 May 2024 16:00:25 +0000
Files and hashes:         1: uakIi7QgHORtjrg9yfOMeLjzvhs.crl (hash: ylU/j7yL847lNi6N3DClFTDMifLHbBN261Xvr7pbM7M=)
                          2: yXN_qeGZGjPjL8VFCkPilcFdLOQ.roa (hash: qsW3eKyT8AaKFFNiwnVQmY2emjL8cecBsJ/o3K9Lo6I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 16:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bb:92:24:6d:a9:f8:a3:82:29:97:7b:7a:8a:e4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
        Validity
            Not Before: May 20 16:00:25 2024 GMT
            Not After : May 21 16:00:25 2024 GMT
        Subject: CN=bb16b7ad1d4b2ffdf2adc80f551beb9d0920e17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1a:ef:0f:8b:26:d5:70:ab:e0:57:57:68:75:
                    e6:c5:36:99:55:38:7b:bc:6f:95:ce:a1:7c:8c:56:
                    b3:61:e2:9e:1d:ba:6a:ea:fe:3f:a2:e2:f5:fe:93:
                    29:29:12:bf:1c:2f:1e:ee:47:1e:fe:fb:9e:e2:dd:
                    c1:91:ac:9c:d6:fc:8f:dd:a1:43:0d:da:da:02:aa:
                    f7:93:cf:aa:48:ff:ad:64:d8:98:36:08:00:d2:05:
                    b5:dc:e6:47:cd:28:ef:8d:8d:38:b7:9a:04:46:d0:
                    1b:56:cd:e7:0e:e7:d8:50:ba:7a:b1:fd:6d:90:c3:
                    94:f2:73:81:17:f6:92:aa:14:dc:f5:6e:5c:c8:e3:
                    a4:1c:2b:84:54:90:f3:4b:01:08:52:a4:6f:a0:40:
                    4a:48:30:89:98:f7:4c:b4:5f:5a:d4:15:1a:48:be:
                    23:df:a6:de:14:11:88:1b:85:6d:56:de:fc:54:41:
                    e9:0c:c5:42:94:51:92:9b:31:b2:f7:78:73:ef:7f:
                    b2:7b:a5:b0:f7:84:82:8d:99:c5:e9:86:49:50:51:
                    4f:62:aa:b8:78:a5:64:89:6e:e3:5c:ce:02:51:1e:
                    f2:1e:27:19:51:ad:5e:65:89:1b:7a:88:69:c5:3d:
                    9b:6b:c4:a1:ff:f0:22:ea:e6:64:9f:16:f7:9d:e6:
                    29:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:16:B7:AD:1D:4B:2F:FD:F2:AD:C8:0F:55:1B:EB:9D:09:20:E1:7A
            X509v3 Authority Key Identifier:
                keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f0:53:b8:f4:30:49:63:65:91:65:b6:3f:ef:50:22:28:26:
         1d:69:26:e0:37:22:b0:e0:3b:ff:f8:6e:f1:b7:07:4d:00:c0:
         d8:90:b9:c1:ae:5a:58:eb:aa:ce:41:18:1f:2c:20:a8:bc:74:
         27:fa:5b:df:87:2b:52:88:5d:a0:77:65:d8:48:08:cc:9e:5d:
         98:48:78:e5:ea:08:b0:30:0d:2d:1f:46:32:02:bb:72:c1:13:
         7f:fb:6b:76:6c:64:fa:38:c0:ad:f4:d3:a7:01:3e:e8:79:e2:
         3d:7b:9e:ac:d6:6b:d6:14:5a:63:9d:46:aa:76:5d:84:5d:6d:
         5e:ea:12:2b:9c:d3:ff:66:8e:44:e7:1f:a6:a7:33:6d:2e:4d:
         03:39:d9:99:d0:7d:36:34:9e:b6:ea:a0:21:b9:74:ac:f6:cd:
         e6:f9:e9:83:22:e6:a6:6c:a6:e2:67:cb:78:d2:8b:b6:fa:e8:
         ed:fe:6f:95:17:e4:30:a9:ff:87:7d:a7:d5:2e:c0:40:98:de:
         40:01:cd:11:26:d9:c6:4e:fb:c9:eb:c1:35:4c:71:53:35:61:
         f4:20:60:44:b0:d1:2a:39:aa:ef:95:08:cd:7e:51:7b:05:c3:
         3e:60:09:0c:59:b0:eb:8b:ee:54:ed:b3:fd:46:ef:b9:29:3e:
         9d:8e:64:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:03:01 2024 by rpki-client on console-ams.rpki-client.org