Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
File:                     U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft (raw, json)
Hash identifier:          2t/5FxCQq9Js7lx31UBaSv2iTxGbHTKm12ON99hEhE0=
Subject key identifier:   26:52:90:15:A0:78:13:BF:D8:F9:83:F0:A5:91:46:EC:E5:13:75:B0
Authority key identifier: 53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE
Certificate issuer:       /CN=53799560453dcf4af31f9b2a40cd238b8457c5de
Certificate serial:       018F87ED05F7C1020143BA8643392DEE98BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
Manifest number:          05AC
Signing time:             Fri 17 May 2024 19:00:08 +0000
Manifest this update:     Fri 17 May 2024 19:00:08 +0000
Manifest next update:     Sat 18 May 2024 19:00:08 +0000
Files and hashes:         1: SLB_YBeyg-w7MmP6Zye2DxwxZi4.roa (hash: b/h9CxWKP8ZneboUqdpH7av0Iuah8zn6NPGe+RGTU8A=)
                          2: U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl (hash: 0jO5sDaLehnBHSgxeVzVQFtyXm+vtMPMzHH7dy0sjPY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:05:f7:c1:02:01:43:ba:86:43:39:2d:ee:98:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53799560453dcf4af31f9b2a40cd238b8457c5de
        Validity
            Not Before: May 17 19:00:08 2024 GMT
            Not After : May 18 19:00:08 2024 GMT
        Subject: CN=26529015a07813bfd8f983f0a59146ece51375b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:3f:bd:d6:1b:73:d8:a7:29:25:94:8b:23:
                    54:3e:ea:8f:fd:b0:d4:8b:8d:80:b3:6e:42:2e:76:
                    d6:a5:df:7f:56:c0:00:86:d6:4e:7a:86:c5:e7:3c:
                    cf:e5:e4:4d:e6:dd:d5:6f:02:d2:f7:12:cb:26:f9:
                    29:6b:54:2b:11:84:2c:8f:58:50:fa:14:41:18:e1:
                    39:4d:f5:d9:fa:7d:89:f1:ab:ec:7f:4b:82:e3:e5:
                    c3:a9:3a:67:9d:95:5c:1b:d1:f3:f6:0b:89:e2:f0:
                    23:68:5e:85:c0:14:62:ed:67:2c:45:48:74:72:36:
                    3c:45:0d:3f:f0:54:98:e7:3f:ae:f4:6d:6c:15:07:
                    0b:4a:d8:81:ae:cf:43:84:4d:7b:b0:81:02:98:af:
                    80:9d:69:ee:5d:9d:07:7e:df:db:40:fd:ee:d7:ba:
                    07:6a:6b:21:04:61:82:a3:3a:2c:6a:3f:d3:77:fb:
                    63:26:ad:c2:23:07:74:64:2c:69:66:81:97:ce:be:
                    8f:06:9c:d8:9f:17:88:58:5f:e1:9d:67:33:87:4b:
                    20:7c:2a:e5:7a:b6:dd:61:7f:a5:06:4d:4a:74:c0:
                    1e:f6:6c:f5:22:80:1c:a7:46:5b:27:f1:6c:72:5b:
                    65:c6:f9:23:07:2e:a2:9e:d6:be:d9:6d:23:84:50:
                    fb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:52:90:15:A0:78:13:BF:D8:F9:83:F0:A5:91:46:EC:E5:13:75:B0
            X509v3 Authority Key Identifier:
                keyid:53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c9:94:58:e4:0a:ad:81:61:c8:b3:f0:5e:1d:65:c9:fd:e8:
         d4:75:65:e7:d6:e2:ed:8b:76:55:8a:57:03:fa:09:cd:d6:aa:
         3b:50:c4:4a:07:03:99:72:58:4f:70:1a:e4:2b:96:0a:90:64:
         5c:a2:3d:2f:b6:63:c1:f6:58:ef:0e:5a:f7:c9:d7:be:d5:3e:
         ee:75:da:a0:79:8a:50:de:c8:5f:e3:0d:51:bd:25:e1:a6:9c:
         7c:e9:21:00:a6:d7:f8:01:20:dc:0d:1d:c5:12:a4:61:65:e6:
         2e:6c:6e:22:c9:6c:d8:e6:73:c3:3e:ce:1d:5f:4b:4f:e6:20:
         ce:ac:9f:15:31:5c:88:ab:61:78:37:51:fc:52:a7:9c:78:d5:
         b9:22:f0:f5:0d:2e:1a:ef:02:e6:66:78:cd:9f:bb:3a:76:00:
         5a:b1:c4:66:20:8b:0a:c3:8f:01:53:e6:32:a2:41:20:e1:12:
         74:75:e3:7a:a0:a8:2c:4e:9f:ac:ee:13:fd:48:2e:a8:88:51:
         cb:f7:ba:47:24:d6:91:7b:d4:d6:24:46:a7:6d:db:e1:d8:e3:
         d9:40:61:73:41:bd:0e:23:d1:5f:c8:b5:13:bd:e4:45:7b:9b:
         29:0f:eb:40:61:ac:d7:19:b8:cb:4c:2f:b9:75:07:11:55:31:
         c6:88:38:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:25:14 2024 by rpki-client on console-ams.rpki-client.org