Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
File:                     uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft (raw, json)
Hash identifier:          IdroiWBuFZk7jyB3B9Z25RKDaZ0EPcBisSZ2SqoPhjg=
Subject key identifier:   88:67:57:80:9F:54:5C:B2:92:6F:B8:D5:D8:E5:14:9E:89:05:EE:85
Authority key identifier: B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44
Certificate issuer:       /CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
Certificate serial:       018F8748C717B8AE001E6CA82896E6B30CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
Manifest number:          D3
Signing time:             Fri 17 May 2024 16:00:44 +0000
Manifest this update:     Fri 17 May 2024 16:00:44 +0000
Manifest next update:     Sat 18 May 2024 16:00:44 +0000
Files and hashes:         1: U3BjNRSp7b_kWot0GIRWjwWBzSg.roa (hash: KVJnOCNVRE+dG6rE/DqPqZH+mLpDk6aX/eyn1xauf1k=)
                          2: uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl (hash: yU+2+gKA8sARn1WvdE4XedddEEFhVgA/U5iulApGj4M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:c7:17:b8:ae:00:1e:6c:a8:28:96:e6:b3:0c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
        Validity
            Not Before: May 17 16:00:44 2024 GMT
            Not After : May 18 16:00:44 2024 GMT
        Subject: CN=886757809f545cb2926fb8d5d8e5149e8905ee85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:73:b2:4a:db:ed:c7:c0:65:36:ed:5a:41:b0:
                    44:62:e1:bc:21:d2:57:a2:9f:aa:31:60:4f:06:19:
                    ae:2a:90:0f:7e:df:1e:cb:05:8a:86:66:17:27:5d:
                    21:f2:16:18:5c:98:94:6c:df:64:67:b4:19:7c:4c:
                    ee:3d:49:2c:b0:16:32:ad:ef:a7:5b:de:d5:d7:db:
                    e3:69:d0:73:fd:7c:b1:5a:52:db:b2:d5:73:fd:d8:
                    95:9a:6f:26:8f:a0:89:2e:25:e1:6b:8c:a6:9c:ac:
                    d1:92:55:77:6a:43:f7:37:3a:6f:34:f2:f7:92:e7:
                    8a:16:d5:ee:2a:f0:10:d9:4f:ac:fa:4f:41:e3:28:
                    81:13:b1:74:5e:8b:3b:ba:33:0f:a7:6a:fc:b8:0f:
                    75:2a:3b:68:0c:b7:40:6d:d7:b6:8b:bb:a2:0a:a0:
                    f5:e7:79:ba:00:a5:fa:f1:c7:90:b5:4f:c8:3e:58:
                    85:f9:49:29:19:07:58:97:3d:4c:57:a6:cd:fa:cc:
                    d6:36:be:89:49:1a:30:d2:67:31:75:5f:3d:d8:e8:
                    b1:68:ad:4b:70:37:91:be:24:e3:d4:11:b5:39:92:
                    7a:1b:9e:d2:aa:9e:dc:29:03:f0:33:5b:40:3d:99:
                    2b:49:7b:c9:e7:f6:4a:60:57:ee:7e:a0:2e:70:7f:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:67:57:80:9F:54:5C:B2:92:6F:B8:D5:D8:E5:14:9E:89:05:EE:85
            X509v3 Authority Key Identifier:
                keyid:B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:94:ee:8a:50:c4:90:84:e7:73:9d:ea:49:a8:64:fa:5d:52:
         1b:28:9f:a1:51:f1:65:db:cd:f1:16:8b:63:fe:12:26:a2:44:
         16:df:16:d2:8f:53:49:14:cd:db:6b:40:65:63:91:b1:19:7d:
         73:62:6b:e4:26:b0:40:3b:be:13:0d:d4:c1:03:14:43:59:e3:
         5c:32:b6:55:27:50:0d:80:f9:db:a5:84:f4:3a:08:14:0b:07:
         a3:0d:39:e7:4d:e5:0e:3c:84:5e:ff:db:3c:53:1b:b7:2e:ff:
         86:98:fd:84:36:00:00:4c:b6:6c:5f:b0:b2:34:d3:ee:fa:16:
         fa:b2:e7:84:83:f3:e4:38:b0:7f:aa:44:de:b8:a8:4d:00:06:
         9b:4a:43:39:87:28:b4:85:aa:2e:b4:d0:40:cc:28:c9:5b:34:
         a6:91:ce:5e:77:5a:f7:fb:1b:57:cc:d2:0b:6f:eb:58:2d:d3:
         ad:3d:de:c1:7e:e7:47:d7:48:41:2e:8a:de:67:47:25:89:e3:
         0d:9b:94:7f:9e:2b:e4:26:27:2b:6a:c8:05:35:c1:ed:12:a9:
         e3:db:c3:2c:f5:09:c3:1a:b7:a9:f0:62:32:48:4f:11:79:21:
         06:0c:a3:09:7a:2a:fd:ef:3f:58:fd:25:5f:f1:9f:27:fa:c9:
         de:a2:00:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSMcXuK4AHmyoKJbmswylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDYxOTg3ZDAwMGQ4ZTYxODg1NGNlNGUzZmY4MTlmZjhm
NGQyNDQwHhcNMjQwNTE3MTYwMDQ0WhcNMjQwNTE4MTYwMDQ0WjAzMTEwLwYDVQQD
Eyg4ODY3NTc4MDlmNTQ1Y2IyOTI2ZmI4ZDVkOGU1MTQ5ZTg5MDVlZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXOyStvtx8BlNu1aQbBEYuG8IdJX
op+qMWBPBhmuKpAPft8eywWKhmYXJ10h8hYYXJiUbN9kZ7QZfEzuPUkssBYyre+n
W97V19vjadBz/XyxWlLbstVz/diVmm8mj6CJLiXha4ymnKzRklV3akP3NzpvNPL3
kueKFtXuKvAQ2U+s+k9B4yiBE7F0Xos7ujMPp2r8uA91KjtoDLdAbde2i7uiCqD1
53m6AKX68ceQtU/IPliF+UkpGQdYlz1MV6bN+szWNr6JSRow0mcxdV892OixaK1L
cDeRviTj1BG1OZJ6G57Sqp7cKQPwM1tAPZkrSXvJ5/ZKYFfufqAucH+SpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhnV4CfVFyykm+41djlFJ6JBe6FMB8GA1UdIwQY
MBaAFLlGGYfQANjmGIVM5OP/gZ/49NJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVZWmg5QUEyT1lZaFV6azRfLUJuX2owMGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8yY2E3YzQtMTViYi00NzI4LThjOWIt
YWUxNzk5YTNkOTE0LzEvdVVZWmg5QUEyT1lZaFV6azRfLUJuX2owMGtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8yY2E3YzQtMTViYi00NzI4LThjOWItYWUxNzk5YTNkOTE0
LzEvdVVZWmg5QUEyT1lZaFV6azRfLUJuX2owMGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5TuilDE
kITnc53qSahk+l1SGyifoVHxZdvN8RaLY/4SJqJEFt8W0o9TSRTN22tAZWORsRl9
c2Jr5CawQDu+Ew3UwQMUQ1njXDK2VSdQDYD526WE9DoIFAsHow05503lDjyEXv/b
PFMbty7/hpj9hDYAAEy2bF+wsjTT7voW+rLnhIPz5Diwf6pE3rioTQAGm0pDOYco
tIWqLrTQQMwoyVs0ppHOXnda9/sbV8zSC2/rWC3TrT3ewX7nR9dIQS6K3mdHJYnj
DZuUf54r5CYnK2rIBTXB7RKp49vDLPUJwxq3qfBiMkhPEXkhBgyjCXoq/e8/WP0l
X/GfJ/rJ3qIA3w==
-----END CERTIFICATE-----
Generated at Fri May 17 18:13:28 2024 by rpki-client on console-ams.rpki-client.org