Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
File:                     UuQA66N5CiRc2rS05nu01gu-e0A.mft (raw, json)
Hash identifier:          XPsgDX9JkFa9zV+9XZ8k9ivySnI2FTPIAhSIoPox97s=
Subject key identifier:   9E:67:F6:81:50:A5:44:0E:D0:C7:EC:FD:9F:30:DF:D3:2B:CD:F4:4D
Authority key identifier: 52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
Certificate issuer:       /CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Certificate serial:       018F874A02812FFFD5A9EA1CCE67DB09E618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
Manifest number:          09CD
Signing time:             Fri 17 May 2024 16:02:05 +0000
Manifest this update:     Fri 17 May 2024 16:02:05 +0000
Manifest next update:     Sat 18 May 2024 16:02:05 +0000
Files and hashes:         1: BImMHuu-_QHZg1ndoszjD0zxKng.roa (hash: aeakVm7Gxrp3b+o1SCb0n2k9dSY1AmnkBKWo5skBFt4=)
                          2: UuQA66N5CiRc2rS05nu01gu-e0A.crl (hash: d5RerzVjHg3HRmcjflXdB0mtZeICUSGfqw5jemsoUoQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:02:81:2f:ff:d5:a9:ea:1c:ce:67:db:09:e6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
        Validity
            Not Before: May 17 16:02:05 2024 GMT
            Not After : May 18 16:02:05 2024 GMT
        Subject: CN=9e67f68150a5440ed0c7ecfd9f30dfd32bcdf44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:b9:8b:88:eb:5e:c3:09:7c:b9:4f:85:90:
                    4b:d0:2a:80:50:f6:0b:a9:46:60:ac:60:7b:10:4b:
                    d4:be:e0:74:f7:bc:5d:2b:dd:1c:cd:23:fe:83:24:
                    8b:57:32:d4:14:95:f4:ad:e3:11:67:99:27:05:64:
                    3c:be:fb:b2:c2:35:f9:18:44:bf:b3:9c:d0:bc:03:
                    de:57:e1:80:ff:6e:df:56:a1:f3:d6:51:9d:8d:a9:
                    8b:f5:5a:7c:c3:c2:a0:89:86:32:0e:eb:9c:19:de:
                    00:ac:25:21:49:f9:ba:b8:26:22:e2:06:14:3b:6a:
                    da:a0:f5:40:7a:9d:47:14:62:0e:18:ea:b8:a8:d1:
                    f2:7d:d7:11:0a:de:43:9d:cf:b6:4c:c9:f7:18:2b:
                    8d:ef:f4:7e:3d:2f:55:e2:08:d7:4c:75:1c:99:78:
                    c7:4b:a7:48:a0:3f:38:8b:09:f8:3e:37:29:04:4f:
                    aa:94:90:62:5a:b8:a1:7d:e1:2f:c4:9a:77:fd:bf:
                    e6:15:43:63:27:2c:86:a9:fd:c4:da:68:fb:ef:0a:
                    a7:14:d5:a5:28:49:ec:bd:96:92:39:6a:2c:f5:3d:
                    2c:e1:76:4f:27:7a:1d:f6:cc:2e:e2:6a:c8:0a:14:
                    db:39:1c:9b:16:42:a6:49:25:47:08:80:9b:01:ae:
                    04:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:67:F6:81:50:A5:44:0E:D0:C7:EC:FD:9F:30:DF:D3:2B:CD:F4:4D
            X509v3 Authority Key Identifier:
                keyid:52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:df:bc:9f:63:ef:8a:26:2a:68:a9:d2:5d:45:31:88:d2:ea:
         aa:1b:2e:e1:bc:42:6d:d4:5a:0a:34:db:a6:40:45:8c:92:55:
         52:29:7f:eb:23:9a:0b:05:3e:51:46:53:9a:de:4a:9a:fe:63:
         97:ce:39:17:3c:f6:f2:33:cf:fa:ec:4a:6e:f9:b8:86:1a:7d:
         c8:5b:c6:01:9f:85:4c:c5:c9:20:ee:ec:bb:0c:96:82:00:f7:
         13:33:45:bc:d2:95:ee:15:33:88:55:57:b0:60:e7:cb:71:76:
         66:bd:2e:99:2a:71:dd:d8:21:54:5e:d4:b6:77:bf:c5:7a:0d:
         bb:4f:14:90:90:35:b2:ca:b3:67:4f:03:d0:9e:f8:97:e5:bb:
         f7:fe:49:3c:de:18:08:f7:95:f6:fe:36:33:d0:33:ac:b9:37:
         9f:32:01:f3:f5:cb:fd:8f:1e:44:36:96:87:c3:0c:e6:77:af:
         2a:d4:35:09:59:2c:e0:25:f3:d2:9a:cd:81:28:fb:b7:a4:ec:
         ab:82:d2:6f:a8:c6:bd:db:96:de:34:8a:8e:6a:12:eb:ee:61:
         09:0f:f0:9c:94:65:6d:4a:b1:d2:1d:07:59:25:54:02:d4:40:
         f8:1e:70:e7:50:a0:01:c5:93:f6:53:68:50:ac:d4:47:33:d9:
         98:a7:4f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:15:19 2024 by rpki-client on console-ams.rpki-client.org