Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File:                     ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier:          1w93EgSGaFq5eqZ0xlkhhYJ6XFQ+YZ5aSvLgjn8cOFY=
Subject key identifier:   4D:F9:D4:8B:8D:66:69:A9:0D:86:B2:BD:0E:3B:06:2D:38:50:E6:E1
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer:       /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial:       018F874AC7992173D7CAA4F03C6A9A8A8DAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number:          07F5
Signing time:             Fri 17 May 2024 16:02:55 +0000
Manifest this update:     Fri 17 May 2024 16:02:55 +0000
Manifest next update:     Sat 18 May 2024 16:02:55 +0000
Files and hashes:         1: GS048ncjeEAO10aTXM-G1NECLIE.roa (hash: mQdsgNFvE8Ge/gSshLuU/8gqvSs4TUoWRP0OO5FafFY=)
                          2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: gD2nXjsVWsIK8rcB56C3T93euP/TCuj1n3YvBCN4i8I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:c7:99:21:73:d7:ca:a4:f0:3c:6a:9a:8a:8d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
        Validity
            Not Before: May 17 16:02:55 2024 GMT
            Not After : May 18 16:02:55 2024 GMT
        Subject: CN=4df9d48b8d6669a90d86b2bd0e3b062d3850e6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:16:38:a0:82:6e:cb:7d:a7:0a:30:d5:cc:9e:
                    e6:f8:4f:c9:1f:93:84:54:7f:a9:1d:e6:c7:4e:a4:
                    66:6b:68:2a:7f:8e:63:c4:ac:95:0c:3e:ca:a4:cc:
                    3a:f3:ba:62:15:59:e9:d4:86:0d:c3:54:cf:78:46:
                    c6:00:d0:20:c4:b6:6b:4c:47:fd:98:71:15:43:09:
                    83:97:9a:15:94:85:7a:25:7c:fb:c7:67:20:cd:b2:
                    e3:42:46:3a:28:c4:26:30:61:ca:66:fc:ea:f7:85:
                    8b:5f:cb:a8:e3:c4:52:b8:e5:d6:21:9d:cd:f6:20:
                    38:e7:78:64:c1:58:b7:ff:0a:0c:ba:76:64:21:c9:
                    39:9e:1f:7b:24:05:82:5d:d9:db:f9:1f:b8:69:af:
                    96:b9:55:05:42:f0:03:bd:4a:5c:2b:a1:c3:21:a9:
                    f2:2f:cc:0e:17:c0:c0:3f:d3:87:9c:35:f5:b8:29:
                    1f:fe:08:b5:92:91:2a:fb:18:70:be:f4:a0:53:d0:
                    c8:ed:d5:7f:bd:84:11:e4:a8:80:b6:d7:89:6f:cf:
                    47:23:99:36:c1:93:74:d1:aa:da:ed:63:81:9d:95:
                    de:6c:da:10:91:0f:53:1b:79:eb:83:c1:23:d7:f3:
                    f1:8e:1b:35:86:6b:a0:8a:b6:28:c9:82:46:1b:8f:
                    20:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F9:D4:8B:8D:66:69:A9:0D:86:B2:BD:0E:3B:06:2D:38:50:E6:E1
            X509v3 Authority Key Identifier:
                keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:62:cf:93:7e:ba:35:88:14:1c:42:9a:0a:51:e7:48:95:e3:
         b7:8f:5d:20:ee:85:bc:af:f4:7f:82:dd:a9:3c:61:4b:8a:16:
         ad:35:f8:67:4b:b4:35:b1:fb:b6:3d:e3:42:f3:fa:33:f2:80:
         a0:fe:76:60:f3:d8:53:b8:95:4d:05:51:01:8a:23:0c:e1:f6:
         49:46:d9:1c:5e:5a:9c:c4:43:bb:c7:58:3a:1d:0e:86:5e:46:
         5b:5d:ee:bb:ba:04:d8:c2:14:73:88:04:be:e4:a0:ed:18:11:
         82:38:e4:c9:24:c2:2f:c2:5d:0b:ce:53:df:ad:30:dd:6f:a5:
         c5:bf:6b:96:a6:5e:36:e6:82:39:5d:f6:22:6e:02:95:e6:3b:
         f9:0e:28:01:db:a4:30:a6:1d:d8:1e:8f:c9:c3:79:8c:05:80:
         05:b3:aa:cc:71:5e:49:0a:3e:64:7c:e6:e0:37:72:41:49:09:
         30:f5:71:1a:63:e1:e3:91:68:a8:ec:33:16:94:de:55:2f:9a:
         9a:7f:6e:00:d0:86:c7:27:6a:52:ba:9f:d9:65:86:7a:18:03:
         f1:c3:75:4f:bc:c4:65:00:97:00:25:26:8e:2e:5f:c3:ee:b7:
         75:0b:c5:e3:bf:97:ef:89:7a:ce:98:cf:a3:b7:a2:51:39:8a:
         15:ea:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:36 2024 by rpki-client on console-ams.rpki-client.org