Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
File:                     U9qZ-TUY4pqUWwf2ChjvhumznmU.mft (raw, json)
Hash identifier:          KGywRC7hWtSESl59gbGiJLi+rYWULGtI3xXmRcp1q4g=
Subject key identifier:   37:E0:6B:A8:B2:1E:B2:28:D1:57:13:7A:D4:5F:9D:96:65:41:D6:40
Authority key identifier: 53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
Certificate issuer:       /CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Certificate serial:       018F88921CE05666B8E6F607CFAE2C2021BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
Manifest number:          0EBB
Signing time:             Fri 17 May 2024 22:00:28 +0000
Manifest this update:     Fri 17 May 2024 22:00:28 +0000
Manifest next update:     Sat 18 May 2024 22:00:28 +0000
Files and hashes:         1: CgE8NSTegkS17sein6O8_sKq9zQ.roa (hash: YZYbVd9lRCqaUFxhGjaGuaQWVMkZhpsnRfT2buueP8M=)
                          2: U9qZ-TUY4pqUWwf2ChjvhumznmU.crl (hash: THXZqm9zf7EhAK0QF3FN0kehyXtyLhf3QdfQEJ6FEd4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:1c:e0:56:66:b8:e6:f6:07:cf:ae:2c:20:21:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53da99f93518e29a945b07f60a18ef86e9b39e65
        Validity
            Not Before: May 17 22:00:28 2024 GMT
            Not After : May 18 22:00:28 2024 GMT
        Subject: CN=37e06ba8b21eb228d157137ad45f9d966541d640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:b8:26:1e:33:5f:92:3c:42:35:31:b2:d9:
                    c0:e2:04:55:fb:1f:44:66:d8:a7:ca:59:18:02:7f:
                    bf:1e:13:d7:3b:da:71:df:16:1d:c1:a7:81:20:91:
                    6a:26:c1:78:e4:c3:46:6b:0a:40:5f:a4:57:e0:45:
                    22:94:e4:20:0a:6e:7d:4f:73:4e:af:58:f2:94:8c:
                    b7:01:fa:9a:dd:43:0e:dd:c2:9e:e0:97:f1:d4:70:
                    6c:bc:4c:9a:e0:a1:07:34:9b:1b:ae:b8:2c:24:b1:
                    5b:81:65:22:eb:a0:34:69:93:26:2f:f7:9d:42:8d:
                    44:da:a8:9c:80:98:34:79:b1:36:6e:ec:23:2b:06:
                    9d:25:5e:4b:15:f7:29:74:a4:20:52:7c:7e:fc:68:
                    8e:90:24:e1:23:27:c5:b9:87:a1:df:e2:f4:64:c1:
                    3f:aa:df:9d:d7:77:aa:e8:c2:67:f8:67:e0:35:99:
                    76:be:b4:3b:30:18:3f:8e:c3:17:c2:96:0e:4f:49:
                    d0:d3:5f:fa:ca:69:28:b7:e1:f0:8b:69:d0:21:77:
                    e9:5c:68:80:e1:f3:84:fc:ae:6b:25:4e:7f:a4:de:
                    65:91:4b:a6:c1:e1:09:97:69:88:44:9b:b9:f2:ba:
                    2b:8c:0a:a6:44:e8:f3:7d:69:71:11:48:92:8f:d9:
                    7f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E0:6B:A8:B2:1E:B2:28:D1:57:13:7A:D4:5F:9D:96:65:41:D6:40
            X509v3 Authority Key Identifier:
                keyid:53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ad:14:e8:76:6c:4b:38:94:74:e3:cd:15:13:6b:e5:f6:d2:
         b4:3b:5b:38:e5:21:1a:d8:67:b0:dc:36:bd:10:54:a3:f1:cf:
         19:39:84:f1:a8:e9:6c:3f:ef:05:48:d4:6c:80:98:4c:ba:97:
         ce:2f:85:29:12:da:63:e8:48:c8:68:47:7e:bf:9b:a4:ea:68:
         68:14:4a:af:6c:8e:ef:f2:04:b0:63:43:58:67:09:65:54:65:
         91:f0:2c:8b:92:53:5c:61:9a:4d:a6:67:68:63:60:36:32:dc:
         52:f6:5f:de:3e:3e:09:c1:ed:36:13:9d:a5:28:5f:70:eb:cb:
         d6:f9:5f:d8:c6:70:ad:b7:5b:1e:f7:31:eb:28:52:64:f7:55:
         3d:8b:a8:60:df:4f:68:02:f9:72:da:f1:a9:c9:bf:a9:e2:80:
         68:d4:03:14:6b:59:86:a0:d8:a8:b5:0c:66:64:43:62:74:f9:
         32:27:cd:92:b4:66:14:14:f0:8a:cb:52:3a:9d:17:32:d1:85:
         15:c1:9d:8d:65:12:5f:41:eb:a6:56:65:8c:be:69:88:b1:67:
         3e:99:a1:1b:fd:d3:42:9d:01:9c:99:74:92:fb:8c:1c:79:bc:
         95:52:6c:ed:78:a5:b6:1f:94:d5:dd:ce:c1:a9:81:55:d4:54:
         02:06:84:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:20:57 2024 by rpki-client on console-ams.rpki-client.org