Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
File:                     uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft (raw, json)
Hash identifier:          kmSPO3TbhbmFitYmNQIU7MLmUtBsbPBwJQi1AV243QQ=
Subject key identifier:   39:CF:EA:F8:3A:DE:12:FE:27:81:45:8B:63:98:A0:A5:02:19:C8:44
Authority key identifier: B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
Certificate issuer:       /CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Certificate serial:       018F99BC851B635D1392A9AA96882549432B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
Manifest number:          0E31
Signing time:             Tue 21 May 2024 06:00:19 +0000
Manifest this update:     Tue 21 May 2024 06:00:19 +0000
Manifest next update:     Wed 22 May 2024 06:00:19 +0000
Files and hashes:         1: aEJQq8mpzlFt35B-BD_QJo9THGc.roa (hash: BMCkTjd9fapdoPIqEbGYKz2qhU1rWaB5GhnFoKSKO6w=)
                          2: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl (hash: CwCn0ZUcBXL/bhF/bN5yBZxcyi6btQYIltjyvHTIKm4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:99:bc:85:1b:63:5d:13:92:a9:aa:96:88:25:49:43:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
        Validity
            Not Before: May 21 06:00:19 2024 GMT
            Not After : May 22 06:00:19 2024 GMT
        Subject: CN=39cfeaf83ade12fe2781458b6398a0a50219c844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:e4:3c:be:45:6b:70:17:53:77:e6:c4:22:
                    4a:a5:2d:21:23:8d:42:ce:03:53:a5:4b:96:0e:66:
                    41:a3:06:91:7a:ef:60:c7:ac:87:51:cc:e6:7f:da:
                    26:63:11:d2:b5:3c:4c:72:8a:4b:a9:fb:e6:25:67:
                    e6:f5:48:3a:cf:26:47:87:48:b1:de:8d:2b:61:30:
                    5f:1c:35:2c:3a:d9:2d:38:2d:40:68:85:92:bf:92:
                    b6:46:bd:e0:a1:9a:32:c9:95:b3:fb:0a:46:7d:3b:
                    53:31:5d:fe:35:f6:44:7a:6c:36:43:a9:68:27:0d:
                    58:5e:ea:06:56:ba:69:ee:d6:e5:96:e6:f6:d6:4c:
                    9b:d3:d2:be:f1:a8:c8:d0:58:b1:ee:a0:08:b8:41:
                    10:19:6c:08:28:d0:54:7e:ea:0c:8b:48:bf:ff:6c:
                    9f:1d:be:8b:be:6d:d0:25:b0:41:40:bf:8a:0a:8b:
                    90:48:3b:44:53:6b:f0:f4:d2:2a:3a:fa:4b:3b:51:
                    44:e8:73:3d:27:46:26:2d:56:30:61:00:6e:9b:85:
                    98:9a:2b:de:0a:e9:cc:86:6e:05:af:ef:f1:0d:f4:
                    88:53:2e:1b:30:a3:c4:d3:db:2e:78:21:12:d3:f4:
                    89:d5:03:d2:22:aa:2f:b3:d0:0d:fb:89:6e:32:41:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CF:EA:F8:3A:DE:12:FE:27:81:45:8B:63:98:A0:A5:02:19:C8:44
            X509v3 Authority Key Identifier:
                keyid:B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:1e:18:b5:3e:3c:22:83:8f:7a:42:f2:57:5f:f6:4d:da:98:
         dd:4a:10:ba:f3:f3:ad:7c:72:f4:e2:9f:be:84:0f:f2:ad:7d:
         57:13:b4:25:96:81:62:34:cb:0f:5c:51:ad:3e:38:11:88:87:
         42:7e:f1:a3:29:42:a6:f7:98:df:0e:3f:7f:ba:b0:6c:fb:91:
         a2:f6:5c:84:26:67:da:29:5c:9d:70:44:af:10:6c:cc:ca:29:
         d0:0d:e9:bc:bf:43:94:4c:b3:b2:a1:c1:3d:0e:69:12:4d:ca:
         62:36:9b:d1:06:aa:bf:6e:f4:94:75:bb:23:ce:dc:63:fb:31:
         be:ec:03:86:41:0d:81:13:99:4f:e6:f1:a6:72:53:47:95:25:
         c5:b0:5f:ba:5d:c5:0b:eb:1d:bc:f6:c6:73:92:3e:b1:4a:e4:
         72:94:ce:47:21:88:18:8d:57:86:ac:51:8f:40:7c:90:2a:bc:
         9c:f3:00:45:8f:38:39:17:99:9a:34:de:0e:61:6b:b2:c1:76:
         e8:fe:fc:62:ca:a4:e3:12:17:2d:45:3d:fc:ca:39:66:8c:3e:
         78:76:68:c7:4c:83:f9:7f:ee:03:85:62:e5:55:a5:89:d9:02:
         6d:28:e5:4e:51:0f:fc:57:8b:81:a6:c7:a4:9b:99:c7:17:8c:
         d7:64:17:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 07:01:43 2024 by rpki-client on console-fra.rpki-client.org