Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
File:                     u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft (raw, json)
Hash identifier:          l5n8w7TlEYTymz3w96DBDz5eN4rF7pgJTggWLOyjce8=
Subject key identifier:   5A:4A:AB:FC:3F:C0:09:7F:AD:26:3B:42:CE:0A:44:19:0E:9C:97:BF
Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
Certificate issuer:       /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Certificate serial:       018F87ED7D74633E6AC5B4405E30D3A169B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 19:00:39 +0000
Manifest this update:     Fri 17 May 2024 19:00:39 +0000
Manifest next update:     Sat 18 May 2024 19:00:39 +0000
Files and hashes:         1: pqtwPrg1B01rINPAyyRohqIfJFk.roa (hash: ytSymUugKzS/jCGAGyBfSEjyF9vVXyEq04+8JyOGgFg=)
                          2: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl (hash: hUdtA1vA112/yrh7d8dYj3hOpN2jq/YNyF2plE/EBTc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:7d:74:63:3e:6a:c5:b4:40:5e:30:d3:a1:69:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
        Validity
            Not Before: May 17 19:00:39 2024 GMT
            Not After : May 18 19:00:39 2024 GMT
        Subject: CN=5a4aabfc3fc0097fad263b42ce0a44190e9c97bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d2:d8:ed:0c:ea:15:c6:7b:43:5e:67:d4:c2:
                    87:9d:b0:7c:5d:d8:a0:83:5f:db:21:36:cd:f1:3e:
                    10:af:fe:d2:f4:97:7a:61:77:19:8f:88:18:1c:50:
                    42:64:f0:4b:28:62:7f:07:11:20:35:f0:57:6e:29:
                    66:71:67:56:97:74:8d:3e:e6:f9:a5:54:34:3a:da:
                    67:79:5b:93:3d:77:a4:cc:b4:3b:4b:6c:8c:d0:ed:
                    94:5f:32:f3:f5:e4:e3:86:83:06:01:4e:ad:aa:a3:
                    25:79:84:4a:be:29:82:f0:9b:c4:7e:43:bb:b4:85:
                    66:88:64:04:9c:95:96:8b:ef:77:58:42:9a:e2:f5:
                    fd:f4:f6:32:70:df:0f:de:87:66:e3:38:9d:32:a1:
                    50:ef:fc:c4:c1:07:7d:f7:5b:7f:e5:8a:73:5d:93:
                    18:e6:96:62:fc:6d:f6:f3:83:6a:b2:9b:20:19:f5:
                    eb:3b:5d:d7:08:53:c3:5f:d5:8b:f0:76:1c:c9:a8:
                    2b:cd:3b:18:98:14:19:7a:ac:66:c8:64:46:fa:cb:
                    3d:df:7a:31:05:17:3d:69:d3:ac:12:ce:f1:31:20:
                    c2:ae:42:40:2f:b9:d0:b7:8c:21:6b:17:86:07:54:
                    bd:29:ae:f7:d2:61:ad:e9:37:b5:32:73:51:91:9d:
                    14:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4A:AB:FC:3F:C0:09:7F:AD:26:3B:42:CE:0A:44:19:0E:9C:97:BF
            X509v3 Authority Key Identifier:
                keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:04:96:d5:5d:b6:99:9e:02:71:55:ee:79:41:4d:93:bf:aa:
         2c:99:5e:93:15:55:93:d7:77:80:c1:14:a6:a3:57:08:f1:bd:
         62:1d:18:d7:14:b0:27:97:ed:c2:29:e0:fc:52:89:4e:a7:ab:
         62:8c:43:8b:d3:81:35:53:6f:01:8b:9d:76:f1:c8:45:d5:bd:
         c4:84:6f:6b:e5:9f:ae:a4:31:56:94:4e:64:7f:94:0a:59:c0:
         03:b2:59:5c:f8:e2:8f:5b:8d:3a:bd:bd:6f:8c:72:91:51:1b:
         56:57:af:d2:84:10:c0:a1:9f:3d:43:28:1c:99:0d:c0:72:04:
         e8:2c:aa:4b:24:44:72:3d:ee:aa:3e:f8:96:70:c1:94:c1:6d:
         b9:9f:6e:dd:e5:5d:69:5c:fe:e3:a5:e0:86:a6:3f:83:94:c9:
         ae:43:70:37:5e:5e:dc:46:6e:ac:0e:32:6c:92:d4:63:14:2f:
         9a:70:ca:de:d2:48:bc:14:11:d4:2d:b8:a7:6d:be:01:d2:44:
         18:90:ce:61:c6:0b:92:44:10:b4:f0:d7:64:48:47:95:5f:6a:
         b3:3e:6b:fd:4d:a7:64:be:bc:e5:c1:13:c4:91:c2:07:59:cd:
         0c:c0:1c:4f:f5:31:f9:63:a3:80:a1:c3:3a:bc:12:e0:d1:4c:
         22:83:01:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:09 2024 by rpki-client on console-ams.rpki-client.org