Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File:                     U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier:          v1wM1wDJeuqgmFLmtZ0JWOeifnHgUYAc6ZBju+ZySjU=
Subject key identifier:   71:89:C3:5F:8C:39:08:86:70:95:A8:78:14:6A:7C:11:39:4F:C0:66
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer:       /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial:       018F866CD27E8E3025AF58A02683E0FE93DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number:          0EC4
Signing time:             Fri 17 May 2024 12:00:29 +0000
Manifest this update:     Fri 17 May 2024 12:00:29 +0000
Manifest next update:     Sat 18 May 2024 12:00:29 +0000
Files and hashes:         1: 7JriugTXq82kgSyLLPI7UfWi7P8.roa (hash: NjWfexXGAT4VViglz4xtfoNNp53B5muRN6bFCEaTEiI=)
                          2: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: 3t+mGkbTZfbLs/1dklNblF0BDQGC3NDh1viUNuol4E4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:d2:7e:8e:30:25:af:58:a0:26:83:e0:fe:93:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
        Validity
            Not Before: May 17 12:00:29 2024 GMT
            Not After : May 18 12:00:29 2024 GMT
        Subject: CN=7189c35f8c3908867095a878146a7c11394fc066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:7f:82:d3:1c:b6:e9:45:cc:11:a6:74:8b:
                    ec:1c:3b:da:17:85:d6:4a:9a:5e:ad:65:13:b0:7f:
                    64:c2:4e:76:c8:98:55:8d:75:f5:4c:13:d5:73:15:
                    0f:f9:96:fa:3b:53:ba:15:37:18:5c:36:39:b6:d4:
                    be:b2:6e:5e:bb:47:a2:d2:44:ec:3d:7b:3d:68:e8:
                    ab:68:df:2c:61:0f:c9:d2:12:7d:b5:d6:5f:41:94:
                    a1:36:78:eb:14:b3:c8:61:20:ef:f0:51:3a:40:9d:
                    42:77:c2:dd:2a:d0:32:a7:6a:7e:9e:a6:e6:36:1d:
                    4c:15:1c:e3:c3:41:33:71:ec:ca:6e:44:7f:5d:5b:
                    34:cd:ac:08:0f:35:67:88:87:82:89:23:61:02:00:
                    49:12:ee:6c:cf:bf:f6:1b:31:92:eb:5f:32:f1:59:
                    76:41:c6:10:f1:9c:32:6c:2e:43:54:78:15:6d:17:
                    4d:d7:8b:a5:dc:e4:7b:64:a8:73:e8:b4:60:1e:bb:
                    06:b7:9b:06:e2:9c:18:e0:3a:3b:82:02:27:34:81:
                    68:db:08:aa:1a:2f:77:01:39:95:67:16:e6:de:60:
                    f5:5c:dd:aa:47:b3:0e:55:a4:35:a6:4e:ba:bb:af:
                    0b:b4:7a:a0:0b:c2:a0:b6:5f:98:8f:79:fb:9c:4b:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:89:C3:5F:8C:39:08:86:70:95:A8:78:14:6A:7C:11:39:4F:C0:66
            X509v3 Authority Key Identifier:
                keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c7:25:0b:0e:34:17:1c:d5:b0:70:13:e1:54:4a:25:1c:97:
         19:c7:22:b1:42:d4:c5:d8:e9:6c:62:ba:20:dd:14:f0:b4:78:
         16:de:c1:c3:c7:29:b2:95:cd:0e:09:23:48:c2:71:82:56:fb:
         54:e6:19:21:b6:76:76:ae:4a:aa:c5:9a:90:d2:f9:24:cb:30:
         bb:1b:25:9f:ce:bc:ff:b1:e8:35:b5:8b:0a:58:7f:ad:16:9b:
         1b:a2:68:52:86:1d:6c:25:8a:b3:dd:b4:66:dd:dc:20:73:de:
         77:ae:b8:dd:2e:95:9d:73:e0:6d:c8:ad:0e:84:1d:f8:55:75:
         cc:cf:20:90:6d:f4:a3:a1:33:ea:3b:43:fb:0b:44:47:0a:73:
         1b:e4:36:b0:d9:5e:5c:34:5f:f8:c6:6a:a2:54:c3:fb:83:79:
         ac:48:86:ae:a2:db:80:10:aa:76:79:5d:5a:25:c2:b8:db:92:
         5d:7e:a0:8f:ed:67:3c:ce:7c:bc:94:db:b1:03:91:95:1c:3f:
         70:59:76:ec:c5:8d:16:e4:d6:f6:1e:3a:e7:b1:6d:7a:d8:7c:
         de:e3:ae:1d:aa:97:c1:cc:bd:de:5e:1d:56:d4:3a:33:35:30:
         ac:f8:22:b9:f5:a9:bf:82:51:a5:04:06:ef:7e:58:4c:5c:91:
         f5:30:d5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:23 2024 by rpki-client on console-ams.rpki-client.org