Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
File:                     uUUIWZXzy3x9vQXkF3TaYksa8uk.mft (raw, json)
Hash identifier:          PPnLUJ0QUnQwb7wn/AqQqN6FPVGOgVc20iwzro0306o=
Subject key identifier:   F0:B4:71:AE:65:DA:0F:C3:FC:9E:24:0F:78:97:20:3E:9F:23:73:F3
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Certificate issuer:       /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial:       018F87483A37E8CD97AA0C2945F9D5C8F135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
Manifest number:          1124
Signing time:             Fri 17 May 2024 16:00:08 +0000
Manifest this update:     Fri 17 May 2024 16:00:08 +0000
Manifest next update:     Sat 18 May 2024 16:00:08 +0000
Files and hashes:         1: YHCzpdx3QlF1VtA6SUTuSfQuxfA.roa (hash: 29gPbHhB2HxQ6mjaSKBJ8CzQgQfqUPyV5BQbyd2W5Zo=)
                          2: uUUIWZXzy3x9vQXkF3TaYksa8uk.crl (hash: /knBKbUyJkXzxoYjsBDaD9WlqD2XuIq0X2gUI5XfDXY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:3a:37:e8:cd:97:aa:0c:29:45:f9:d5:c8:f1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
        Validity
            Not Before: May 17 16:00:08 2024 GMT
            Not After : May 18 16:00:08 2024 GMT
        Subject: CN=f0b471ae65da0fc3fc9e240f7897203e9f2373f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:38:5c:1c:6c:7b:c8:66:c0:55:82:00:e3:
                    26:70:ec:5b:ff:01:40:14:7d:78:33:84:1c:a3:89:
                    f9:ae:12:22:bb:14:37:21:df:e4:15:ad:db:fc:25:
                    c3:ba:d9:2a:9b:7d:ba:be:bd:48:e9:f1:15:48:bc:
                    42:82:8b:53:75:4c:a0:d8:dd:e8:98:0d:fc:36:04:
                    10:e4:52:a1:57:c2:26:86:08:be:0b:ac:f0:03:8c:
                    c2:f4:75:f7:58:68:c5:9a:bc:dd:97:30:ae:50:c3:
                    03:15:19:78:1c:c4:0f:e6:66:05:cb:f2:b1:50:8f:
                    34:be:2a:f8:87:2d:90:79:81:d9:33:66:3c:25:4a:
                    55:4f:40:ed:88:03:03:7e:db:28:d3:26:9d:85:51:
                    f5:01:79:d8:ab:17:d0:03:d2:35:4a:7a:d3:f0:34:
                    eb:8e:97:13:ff:9b:c2:b7:72:1d:62:be:f8:d6:81:
                    10:34:94:60:9a:65:ab:a6:b5:41:ba:e0:0f:e3:b6:
                    9d:a7:f7:d9:61:80:35:73:74:68:ef:94:94:0d:84:
                    72:99:78:cf:11:fe:6d:a8:79:df:17:1c:92:b7:37:
                    b4:58:2c:6b:85:1c:64:42:63:d3:be:3b:a2:0f:11:
                    aa:b0:d2:76:06:6a:6d:25:cb:5d:d2:fe:f3:c8:d3:
                    45:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B4:71:AE:65:DA:0F:C3:FC:9E:24:0F:78:97:20:3E:9F:23:73:F3
            X509v3 Authority Key Identifier:
                keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:52:e6:62:91:80:74:94:89:bb:ec:b3:c2:3b:ec:11:1d:b2:
         2f:90:fc:e0:c4:53:48:7d:0f:a8:2e:04:dd:aa:0c:f5:1e:15:
         e4:46:0e:ce:3f:c4:15:f2:09:86:ef:73:28:3b:45:e0:d8:f8:
         9b:61:d7:3f:0c:12:c9:d9:6c:47:1b:e6:38:cd:dd:5d:01:ce:
         61:c9:4d:97:a4:6c:83:15:b2:e5:50:a7:b2:e8:01:68:ac:b7:
         d3:f6:de:4a:3e:d4:13:d5:10:5c:c1:da:df:92:3a:7f:e4:38:
         c7:d6:6a:f0:80:a1:07:88:a0:5d:88:48:24:aa:44:ec:9a:6c:
         19:b9:9e:dc:0a:d4:7a:1c:f2:2e:9e:57:78:ec:37:2a:e1:ad:
         4e:99:47:52:d4:83:7f:03:28:55:10:c3:58:db:92:3e:4e:30:
         b7:54:e5:28:8a:06:3a:a6:26:b2:ac:6b:54:38:41:a1:7b:c9:
         d0:fb:1b:08:90:e3:86:d4:90:78:02:ee:a0:4e:b6:4d:43:f2:
         e8:e5:be:9a:d4:e4:e6:8a:0f:cd:9c:d6:b6:f6:89:a5:e8:73:
         e4:e7:9e:2e:e3:24:90:a8:a5:47:43:4e:9a:a1:c5:71:fc:39:
         93:9e:fd:0f:05:a0:a8:1e:63:ff:fc:91:fb:ce:86:88:a8:4e:
         f6:60:40:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:37:42 2024 by rpki-client on console-fra.rpki-client.org