Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/648a08-3513-426e-8eee-98efc80a1593/1/Um-cDZfWNn4Mpy0WJMWFCmENZa4.mft
File:                     Um-cDZfWNn4Mpy0WJMWFCmENZa4.mft (raw, json)
Hash identifier:          iBbMUPO9P7emFmRHJdERZzJfyhIaNSlBJ8jLIIBJzcY=
Subject key identifier:   B1:62:D3:74:5B:05:B0:A5:EC:1A:25:5E:C9:00:B2:3E:5E:3A:03:17
Authority key identifier: 52:6F:9C:0D:97:D6:36:7E:0C:A7:2D:16:24:C5:85:0A:61:0D:65:AE
Certificate issuer:       /CN=526f9c0d97d6367e0ca72d1624c5850a610d65ae
Certificate serial:       018F874ACE9BC3D6A0EC27078C2E4446BA4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Um-cDZfWNn4Mpy0WJMWFCmENZa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/648a08-3513-426e-8eee-98efc80a1593/1/Um-cDZfWNn4Mpy0WJMWFCmENZa4.mft
Manifest number:          0B42
Signing time:             Fri 17 May 2024 16:02:57 +0000
Manifest this update:     Fri 17 May 2024 16:02:57 +0000
Manifest next update:     Sat 18 May 2024 16:02:57 +0000
Files and hashes:         1: DvWQs26WlJ24zUXp-j0TQ-oi5iU.roa (hash: zdPsDspjL7C0aTIsY+yTFV4H9JbmSYxNqmvoVjeYjlA=)
                          2: Um-cDZfWNn4Mpy0WJMWFCmENZa4.crl (hash: s3ZJqhIhGl7O/zEIsJCVjDqzYhCBhpH9BKDDt+1HQcQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/648a08-3513-426e-8eee-98efc80a1593/1/Um-cDZfWNn4Mpy0WJMWFCmENZa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/648a08-3513-426e-8eee-98efc80a1593/1/Um-cDZfWNn4Mpy0WJMWFCmENZa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Um-cDZfWNn4Mpy0WJMWFCmENZa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ce:9b:c3:d6:a0:ec:27:07:8c:2e:44:46:ba:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=526f9c0d97d6367e0ca72d1624c5850a610d65ae
        Validity
            Not Before: May 17 16:02:57 2024 GMT
            Not After : May 18 16:02:57 2024 GMT
        Subject: CN=b162d3745b05b0a5ec1a255ec900b23e5e3a0317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:97:bc:ea:29:94:2f:4b:d6:65:65:94:c0:
                    b7:00:4e:39:c0:46:9a:2a:ed:ef:55:9f:66:e7:c9:
                    91:43:f7:38:07:12:96:fb:f4:98:a8:6b:81:23:61:
                    20:92:d8:ba:bf:44:2d:4b:a6:4a:86:5a:23:a8:d2:
                    12:65:9f:8f:f5:0c:50:30:da:97:00:8d:5c:09:fd:
                    8d:73:79:cd:a0:1b:f6:e5:90:d9:50:cd:27:f5:00:
                    2b:f2:c8:a3:4f:89:d0:2e:e4:38:27:2f:e7:87:56:
                    17:e7:4a:20:2c:b6:2e:0b:99:60:0c:d2:92:ef:f6:
                    56:55:dd:20:ad:cb:04:dd:f2:d2:f9:c8:a4:89:d0:
                    35:b7:f5:0d:68:bd:2e:be:81:03:7d:1f:11:8b:b1:
                    a4:d7:1a:67:43:ff:88:6c:80:d7:50:0b:2f:f4:40:
                    1d:16:72:31:ad:fe:50:f3:17:22:4f:65:2a:17:d6:
                    65:de:1a:fb:95:fc:84:5f:66:f6:7c:60:6b:dd:60:
                    1c:37:5b:9c:bd:cc:b1:35:98:18:f2:34:68:6b:36:
                    40:6a:a2:c2:fd:4a:82:3c:c1:3b:43:ac:5d:07:03:
                    81:98:e5:b8:fd:68:fc:34:c3:f0:64:fe:ab:41:59:
                    f9:af:bc:cc:0d:4a:a5:17:e1:a2:4f:20:9a:b2:e1:
                    69:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:62:D3:74:5B:05:B0:A5:EC:1A:25:5E:C9:00:B2:3E:5E:3A:03:17
            X509v3 Authority Key Identifier:
                keyid:52:6F:9C:0D:97:D6:36:7E:0C:A7:2D:16:24:C5:85:0A:61:0D:65:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Um-cDZfWNn4Mpy0WJMWFCmENZa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/648a08-3513-426e-8eee-98efc80a1593/1/Um-cDZfWNn4Mpy0WJMWFCmENZa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/648a08-3513-426e-8eee-98efc80a1593/1/Um-cDZfWNn4Mpy0WJMWFCmENZa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b3:41:50:20:cc:89:21:f7:bc:01:c1:4f:bc:d2:5a:05:c8:
         cc:c6:55:43:ae:8b:cc:b8:b7:a4:cc:a5:53:f3:78:c6:86:d6:
         15:a7:8c:39:40:a9:28:9d:d0:6b:1e:ae:d6:6f:92:80:ce:13:
         86:72:39:24:eb:4a:22:e6:d7:fa:d2:be:63:5d:56:a3:97:bb:
         e4:28:23:ff:25:a1:88:a9:1b:af:12:93:cf:72:b4:30:8e:05:
         43:dd:67:3d:b3:d5:2c:b4:29:17:59:90:71:e2:ca:99:16:e7:
         44:c2:f7:1c:5d:d2:86:30:59:50:5a:ed:76:06:95:0b:98:a5:
         9f:a8:04:54:db:f9:0b:24:ef:9f:c2:72:fd:30:b4:f8:86:16:
         70:dc:a3:bf:62:83:e1:71:f1:8f:a9:5a:f9:fb:ce:70:68:6c:
         b1:6f:92:56:94:be:d2:97:02:84:a2:78:3a:94:c7:44:35:5c:
         d7:e1:ec:2f:50:ed:1c:09:1e:63:8d:ae:bb:33:da:e7:29:5f:
         2f:80:aa:2e:2a:7c:93:f3:11:78:c2:c7:12:17:69:09:59:8f:
         0c:ab:bc:06:30:ca:b5:a4:a4:e4:64:95:a1:c4:1b:ec:eb:e7:
         a3:46:c8:3a:50:4e:73:3a:a4:37:37:f6:48:25:c2:7d:e7:d4:
         47:c8:65:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:11:28 2024 by rpki-client on console-ams.rpki-client.org