Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
File:                     uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft (raw, json)
Hash identifier:          RDi49bzIZfnN0628B7RdMiwb39vis74VqiDA+0jlXfw=
Subject key identifier:   B0:B0:00:48:10:C8:0B:32:35:C4:91:79:26:22:3B:2B:58:25:BD:E8
Authority key identifier: B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
Certificate issuer:       /CN=b801c33094a09922c0a10486d21df5589675bc94
Certificate serial:       018F889258D2E54889B36B90261A1AE30EEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
Manifest number:          0978
Signing time:             Fri 17 May 2024 22:00:43 +0000
Manifest this update:     Fri 17 May 2024 22:00:43 +0000
Manifest next update:     Sat 18 May 2024 22:00:43 +0000
Files and hashes:         1: PC5XeyNCvMvK2WqOSgikmlVUqhY.roa (hash: XmS9oVtxdaLjmoboJDMGMa2bVZYR5Us0cTxs7aJfh1A=)
                          2: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl (hash: zzfKtlL2iOlW6qjUvvJRpkG7dAn2GImZj3xiGAbV18k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:58:d2:e5:48:89:b3:6b:90:26:1a:1a:e3:0e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b801c33094a09922c0a10486d21df5589675bc94
        Validity
            Not Before: May 17 22:00:43 2024 GMT
            Not After : May 18 22:00:43 2024 GMT
        Subject: CN=b0b0004810c80b3235c4917926223b2b5825bde8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:92:f6:cf:50:d3:d2:cf:50:46:4a:54:57:bf:
                    e3:3e:52:fb:af:a9:3c:80:70:91:6f:db:64:6e:3b:
                    c4:42:41:54:89:9f:34:f8:1d:78:31:29:75:34:15:
                    39:b9:9f:c6:4f:f2:ea:1a:d1:f2:ba:dd:16:31:d7:
                    bf:8e:e9:81:6b:56:33:b0:d2:6b:ab:1b:96:62:22:
                    6a:2d:f8:fc:0e:0e:d5:13:cf:7b:06:0a:f4:9e:d2:
                    30:cc:7d:83:08:02:86:e8:77:c6:d9:bc:50:9f:86:
                    12:6b:ab:5a:1c:35:69:19:f3:20:dc:8a:c1:69:37:
                    95:dd:fc:89:41:36:04:fb:b2:41:51:12:b9:71:43:
                    fe:3c:db:8c:7f:32:81:e7:56:53:f0:ec:e2:b7:ef:
                    97:11:8f:bd:f3:60:16:14:82:47:2e:24:87:e0:0c:
                    02:b1:9d:0d:45:78:8b:aa:c2:5a:bf:a1:7f:e3:fd:
                    d9:32:3c:23:90:3b:e0:96:fb:48:a6:9f:3f:3e:cb:
                    56:fc:87:01:8d:73:17:78:d1:b3:bf:1b:b2:c2:7c:
                    13:9e:3a:62:47:51:ea:a2:6f:22:8c:57:11:fe:ec:
                    60:48:fa:d9:80:bb:f0:3b:7b:a0:6f:7b:82:50:ae:
                    60:d8:6e:1e:ed:5f:22:63:67:fe:9c:74:3a:e5:22:
                    07:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B0:00:48:10:C8:0B:32:35:C4:91:79:26:22:3B:2B:58:25:BD:E8
            X509v3 Authority Key Identifier:
                keyid:B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:94:c5:44:22:31:69:b6:63:65:6c:1a:0a:cd:d4:44:a6:09:
         31:e9:98:2d:9d:9b:83:41:5e:06:44:9a:33:29:bc:b2:a9:07:
         23:03:fc:08:aa:26:cd:05:86:ba:6c:a2:ce:01:b7:68:48:03:
         fc:ec:42:19:ef:2d:a0:33:87:9d:a0:68:f4:a9:99:e9:f3:8f:
         8a:44:f9:40:23:5e:a0:8d:bd:cb:be:09:db:85:42:75:20:ee:
         0c:49:d0:d8:b4:99:cb:28:1d:ed:42:ff:c7:f8:4b:04:ed:5d:
         6a:ea:5d:40:a3:04:d0:05:e2:fd:48:0c:48:06:20:99:20:60:
         0d:a2:75:5d:cc:4f:41:89:23:e7:27:a8:da:55:f4:d5:37:a1:
         50:62:33:6b:47:04:7c:d0:68:74:1f:99:06:ec:84:74:46:1e:
         6b:a4:23:83:b7:51:5b:13:95:2e:ab:8a:55:dd:b5:a3:2a:4c:
         7a:45:53:98:b1:ea:57:2c:cb:90:68:ef:23:52:42:b7:6b:d4:
         b6:31:f9:17:50:b5:52:20:34:a8:28:23:b2:01:08:0f:1f:ac:
         14:e9:64:30:ca:e1:56:fa:be:1c:d7:d7:13:9e:5a:ae:54:4f:
         93:0f:5a:14:ca:56:67:a4:b3:e7:fa:c8:91:52:4f:65:74:df:
         12:0b:59:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:03:45 2024 by rpki-client on console-fra.rpki-client.org