Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
File:                     UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft (raw, json)
Hash identifier:          lk8ka/Opm6eaTIQDKQmnUDqRblZQNtTDWYv6kOcRzGc=
Subject key identifier:   A5:B4:86:71:0E:81:28:CE:45:A8:A4:63:6D:B1:5E:8B:89:23:46:EA
Authority key identifier: 52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF
Certificate issuer:       /CN=5232d44d9e08c873db35c02151ca44ae54b4b8af
Certificate serial:       018F885B1FE7166A90B59F1E072713BC53C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
Manifest number:          0ED9
Signing time:             Fri 17 May 2024 21:00:24 +0000
Manifest this update:     Fri 17 May 2024 21:00:24 +0000
Manifest next update:     Sat 18 May 2024 21:00:24 +0000
Files and hashes:         1: 1-CsR2GyXBHcfAAGxFLZmNPXs-vw.roa (hash: fE8RQWt1iWidUZr+7ql61Rk3+9HImFsITY9LFOLEWTk=)
                          2: UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl (hash: QcEVuFyr0g7YjlFk8ntwW8RGt9MxmJhClyTl2arO1MI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:1f:e7:16:6a:90:b5:9f:1e:07:27:13:bc:53:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5232d44d9e08c873db35c02151ca44ae54b4b8af
        Validity
            Not Before: May 17 21:00:24 2024 GMT
            Not After : May 18 21:00:24 2024 GMT
        Subject: CN=a5b486710e8128ce45a8a4636db15e8b892346ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:03:ce:06:d5:67:f7:f8:32:4a:ee:c1:0c:cd:
                    5c:8c:77:72:1c:13:64:65:3a:d2:d3:8a:78:ad:74:
                    24:fc:b6:cd:72:4f:d2:bb:17:4a:3c:60:33:67:e4:
                    43:47:a6:82:4e:bf:1a:e4:bc:88:f7:ae:60:35:d8:
                    38:2e:4a:6e:db:25:b2:e6:99:c0:92:fc:fa:0a:59:
                    7e:1a:cf:22:9b:ae:5f:a6:33:76:fa:06:a8:b5:7e:
                    a7:f2:e0:a4:a7:86:5e:f4:9a:8c:cf:64:cc:78:05:
                    d0:82:64:ee:3e:5d:48:4f:86:79:e9:86:9e:f3:22:
                    a7:5c:07:3f:e7:fc:74:c3:84:82:69:c5:97:23:c0:
                    c0:24:99:08:4d:e0:00:ff:79:48:30:a8:36:91:d8:
                    8a:48:a3:f4:9f:c7:5d:45:88:1a:7e:2b:ed:89:ef:
                    67:fd:6c:14:8e:07:8c:81:98:62:05:bc:6f:bc:41:
                    42:12:df:88:5f:93:1b:79:f7:46:33:3b:d0:2a:46:
                    36:18:aa:cf:70:69:d6:01:5a:eb:fe:2c:00:3f:37:
                    b5:fe:f6:65:5c:9a:61:77:cf:87:e5:d6:0c:02:5b:
                    bd:12:66:d8:b4:17:a6:5d:ab:96:6f:59:3f:d9:53:
                    4b:55:93:7b:10:35:9b:ec:82:44:20:cf:bb:e6:33:
                    d6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B4:86:71:0E:81:28:CE:45:A8:A4:63:6D:B1:5E:8B:89:23:46:EA
            X509v3 Authority Key Identifier:
                keyid:52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a0:75:b1:31:6e:2e:0f:a5:f2:2e:e8:e5:10:bc:13:38:1c:
         30:97:7c:59:88:31:5f:aa:76:c9:99:99:cb:46:2c:c9:5f:65:
         c9:33:e5:f1:19:8d:3b:da:58:a8:53:5d:44:41:80:be:a6:f3:
         8f:d3:07:40:05:10:48:ed:b0:4a:c2:4a:9a:23:70:9b:81:64:
         1d:3a:ce:d2:77:c8:4f:7f:be:95:13:e1:bd:05:dc:a8:8b:25:
         72:2f:cb:91:8f:86:20:98:c7:21:69:af:c3:1f:cb:92:76:20:
         72:3a:7c:f2:ef:82:7d:c4:af:94:2f:01:99:3d:f9:53:bf:c1:
         d0:10:40:97:56:23:07:11:c0:d3:e2:44:2e:10:6b:9f:74:77:
         58:22:50:78:4d:86:8b:5d:e9:cf:0a:14:86:2c:ed:3a:4f:ad:
         f6:dd:0c:e0:a2:b6:d1:f1:0f:0c:20:7f:53:1d:c6:d5:9c:d3:
         ba:a8:bb:26:d8:ac:09:c6:0d:be:b7:6e:21:17:0b:91:b9:a2:
         8f:85:83:c5:09:30:d4:47:2b:71:ad:02:65:ae:03:09:74:0d:
         2b:50:b5:f2:f9:0c:c5:6f:66:58:50:8d:ae:06:74:07:6c:4e:
         53:b3:92:95:50:0e:30:28:f9:2a:2c:17:2c:31:b0:cb:0c:67:
         ed:a5:c4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:02:06 2024 by rpki-client on console-ams.rpki-client.org