Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.mft
File:                     UpwnMJi1J2jKDkSjosFu_tSmXKA.mft (raw, json)
Hash identifier:          oUPMyHYy2sTDDGtKPwDdzaTQJhBQ0NfrzOqf1IT8fN4=
Subject key identifier:   D1:52:DC:03:55:64:9F:92:A7:72:57:E1:FD:3D:46:3C:2D:7E:B3:BD
Authority key identifier: 52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
Certificate issuer:       /CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Certificate serial:       018E874B7B4698C4640624630545BFD78A94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.mft
Manifest number:          1108
Signing time:             Thu 28 Mar 2024 23:00:54 +0000
Manifest this update:     Thu 28 Mar 2024 23:00:54 +0000
Manifest next update:     Fri 29 Mar 2024 23:00:54 +0000
Files and hashes:         1: 4I7aYRrEACqCOS0NltYDU6rFx3Q.roa (hash: I5lMiUoKrW9irs3VcG6M/Dh3l7ehQQCeHKKLXN/BxC8=)
                          2: N6r3lv2Gv0hXJ8CFNBf9rfTqDe4.roa (hash: /UHHwBSGV+7tqXSy+rpsMuDvMgyR/iGMcmLgMWd7FM8=)
                          3: UpwnMJi1J2jKDkSjosFu_tSmXKA.crl (hash: qnAvSgsgsI0bf2l/t9XYBbwwY+q9YgnOp9oeNZYEsVo=)
                          4: a9G_PWgeZerqURo64FNDhCJL52o.roa (hash: iWSxJ+yCnhAsxTDsj0WigIe9mBCNz5dN0uoECUlu9vU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:87:4b:7b:46:98:c4:64:06:24:63:05:45:bf:d7:8a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
        Validity
            Not Before: Mar 28 23:00:54 2024 GMT
            Not After : Mar 29 23:00:54 2024 GMT
        Subject: CN=d152dc0355649f92a77257e1fd3d463c2d7eb3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:cc:91:80:9c:82:e8:70:32:ee:2a:0c:6e:
                    c3:1d:5e:25:29:1b:11:b1:71:8d:48:c2:a6:3b:95:
                    30:f7:36:8e:e0:72:6b:eb:b0:d8:1b:b2:b3:47:d4:
                    65:a8:9c:e7:37:48:4b:85:a4:2b:3c:85:4b:5a:e2:
                    aa:ed:33:e6:62:2b:81:ca:8e:c1:ef:1c:dc:43:10:
                    56:53:7c:73:ea:c9:55:e1:4a:bd:43:ba:df:10:14:
                    e9:94:f0:dc:6f:90:81:83:2f:f3:57:59:17:03:d5:
                    ae:3b:23:2c:ae:64:f2:5c:1a:91:cc:dc:1e:3d:ce:
                    bb:86:d0:15:76:07:a4:6e:fa:aa:fa:5d:c8:1e:8d:
                    7a:a3:22:15:96:b2:ad:d5:fa:25:d5:c3:f1:04:b6:
                    b2:55:31:dd:67:fb:e8:ed:bc:ca:1d:25:43:36:dc:
                    36:74:30:d7:cd:3f:b6:82:19:fa:a8:7a:02:4b:12:
                    2b:f6:11:5b:53:9f:8a:35:5a:5b:0e:6a:25:2e:00:
                    67:1b:e4:fd:bf:9a:53:49:87:1c:1c:32:ec:c7:45:
                    b8:14:34:1e:fc:b0:a8:fb:49:cb:3d:64:07:7b:8d:
                    b2:0b:e3:b8:80:35:d8:ef:f7:b7:84:48:f4:23:36:
                    ab:76:c7:1e:da:c6:71:c5:f4:c8:34:b4:b2:52:f8:
                    77:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:52:DC:03:55:64:9F:92:A7:72:57:E1:FD:3D:46:3C:2D:7E:B3:BD
            X509v3 Authority Key Identifier:
                keyid:52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f9:c5:cb:d4:2f:07:54:3b:b9:f5:7c:e3:fb:c0:9f:c7:bf:
         e9:40:81:e5:69:c5:4e:82:16:27:9d:73:d0:79:aa:f6:d1:a9:
         3d:aa:2c:d4:16:f5:1c:54:fa:a7:d8:32:ea:f1:cc:77:2a:f9:
         fb:89:d4:2c:9e:e2:53:9b:d4:ee:d8:df:06:4b:54:9c:ba:11:
         95:72:dd:2a:e5:85:96:fe:ad:5c:5f:d9:10:2a:24:71:aa:4a:
         ec:d5:df:9b:e1:c7:6e:f8:1e:45:4b:06:55:47:40:ef:27:98:
         ae:d7:b9:54:66:47:f6:69:e7:74:de:f8:36:f3:0d:d8:ed:a0:
         70:d4:9a:be:9b:ec:70:26:c0:82:47:34:65:71:78:00:52:fd:
         96:a8:38:e8:53:14:a4:9f:ed:35:3b:48:c3:24:ca:02:16:7b:
         99:f9:bd:f8:e2:b0:23:8c:ce:dd:1d:16:d1:7f:82:8d:f0:e5:
         90:3f:ac:66:7c:87:3a:6e:8a:b5:a2:12:b8:14:25:a9:a4:f6:
         da:12:7a:5f:42:6f:f5:cb:6d:38:12:57:80:2a:16:50:23:b8:
         2b:49:46:77:0e:19:69:d5:f4:8f:d7:0a:87:bb:ab:94:bb:50:
         b2:8c:b6:67:31:85:f5:31:0e:d2:d2:c9:07:ef:36:d2:5e:0b:
         e9:17:76:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 00:41:08 2024 by rpki-client on console-fra.rpki-client.org