Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
File:                     uqpkzSnJTM3hREj2GhcsdjseQFA.mft (raw, json)
Hash identifier:          f2CBIoPCYgzOAa0erMuw7fwjEyln0WjVzCyp3RrM5x4=
Subject key identifier:   E2:77:7D:5E:3E:01:0F:62:2C:D0:FE:1A:2D:3A:6C:00:AF:E9:60:6F
Authority key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
Certificate issuer:       /CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Certificate serial:       018F87492907E2E9F6535C8618C4B92CD76E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
Manifest number:          01C9
Signing time:             Fri 17 May 2024 16:01:09 +0000
Manifest this update:     Fri 17 May 2024 16:01:09 +0000
Manifest next update:     Sat 18 May 2024 16:01:09 +0000
Files and hashes:         1: Lpvaq6-zbnkdie5v3BwUoT0cSwY.roa (hash: MVypOaH62vPkO6R82RSSatM61NWrFDdso1DeE8LbouI=)
                          2: uqpkzSnJTM3hREj2GhcsdjseQFA.crl (hash: AFFPj5QJ3V455Mezvd3VPBBs67y84Rs+CGbUNOLxBzQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:29:07:e2:e9:f6:53:5c:86:18:c4:b9:2c:d7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaa64cd29c94ccde14448f61a172c763b1e4050
        Validity
            Not Before: May 17 16:01:09 2024 GMT
            Not After : May 18 16:01:09 2024 GMT
        Subject: CN=e2777d5e3e010f622cd0fe1a2d3a6c00afe9606f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:30:53:41:53:22:bf:a4:1d:7e:04:ae:44:
                    be:fc:74:e4:f8:08:fe:57:87:e4:ec:02:18:a1:5e:
                    30:b0:4e:0b:d6:56:02:41:37:d6:0e:f8:b4:8d:21:
                    b4:62:d6:fe:9c:a2:a1:7b:fe:67:86:78:5b:d6:42:
                    fc:89:e0:6f:c4:a7:c5:86:60:7a:a1:24:55:e1:66:
                    4d:f0:50:bc:dd:94:eb:40:d7:ac:ca:10:da:7b:c5:
                    fa:ec:5f:83:09:33:70:e9:e7:9d:ff:06:d0:10:40:
                    b0:e6:82:c5:bd:d9:30:b0:ca:7f:7a:d6:99:21:91:
                    2c:5e:ea:1a:05:7d:55:72:a5:24:5c:ca:91:ba:a4:
                    45:5c:55:af:46:9d:58:c4:bc:7b:3e:a7:2c:7a:a9:
                    d3:39:1b:03:a3:c2:4d:32:4f:48:1b:ad:47:21:35:
                    ea:30:96:33:18:82:3a:19:10:cd:9d:00:d0:5d:30:
                    66:a9:92:05:ca:40:b1:45:67:3c:48:77:3d:33:7a:
                    5c:ed:a2:c1:16:9a:cb:7f:47:96:b7:ed:9e:e8:4a:
                    b5:d7:b7:c1:47:a0:9d:ad:31:92:01:31:71:7d:fa:
                    56:54:84:f3:d0:30:b7:56:91:2b:e0:3e:17:37:65:
                    93:cc:cc:6b:e6:d7:8e:4d:b6:3e:77:d3:5d:f9:7f:
                    31:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:77:7D:5E:3E:01:0F:62:2C:D0:FE:1A:2D:3A:6C:00:AF:E9:60:6F
            X509v3 Authority Key Identifier:
                keyid:BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:54:68:55:ea:a1:87:58:d7:d2:bf:bc:f8:31:80:b4:86:1b:
         84:15:50:d7:d5:8c:d4:5c:2e:72:77:bb:8d:50:f4:3a:c4:f2:
         71:5e:f7:05:fd:4d:f3:c8:28:c2:4d:50:fc:ff:96:c7:61:3b:
         aa:15:59:10:d8:fb:fe:28:44:1d:c3:70:a0:e8:75:fa:af:10:
         50:ec:1a:cb:c1:4c:a9:b2:40:8b:ee:44:1d:5f:f2:dc:3d:1b:
         3a:d4:4f:98:eb:fa:75:dd:bf:da:42:51:de:3b:ac:72:4a:62:
         cc:84:14:d1:6f:ea:11:3f:5a:68:e7:bf:ea:73:c8:12:62:ec:
         d3:cb:72:5b:39:14:9f:d1:60:e3:f1:e4:e5:52:eb:04:2d:2e:
         02:6a:18:36:e9:92:6f:e5:46:ae:68:3e:0e:e1:d6:b7:cb:64:
         bd:bc:2a:8d:60:e4:b7:7a:46:17:83:ed:02:de:aa:b4:b1:92:
         5a:be:b8:30:8a:21:0f:2a:61:f8:7b:93:5d:c0:49:82:da:96:
         43:99:96:7a:9b:55:69:65:c7:d0:dc:2f:59:27:d5:4f:9e:7c:
         c9:e2:d7:f2:47:d9:a7:53:c1:5b:fc:7f:a5:82:a7:27:43:b4:
         ab:d4:2b:7a:c5:b6:db:00:9f:a3:1c:a5:4c:3f:12:f5:f2:2f:
         43:e6:f1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:38:33 2024 by rpki-client on console-fra.rpki-client.org