Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
File:                     UkEeUtq30L4mdDE7a10udL0RNg4.mft (raw, json)
Hash identifier:          5Ux8CdppQNSIy9OHLl1ApFI2E5ypV3grk+zjLO2bLdk=
Subject key identifier:   EA:18:9F:7E:DA:EB:FA:8A:A7:85:14:E6:60:27:B1:FD:44:5A:5C:D3
Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Certificate issuer:       /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Certificate serial:       018F86DA5CAF46E8D303A46698BB5C723FC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
Manifest number:          096C
Signing time:             Fri 17 May 2024 14:00:08 +0000
Manifest this update:     Fri 17 May 2024 14:00:08 +0000
Manifest next update:     Sat 18 May 2024 14:00:08 +0000
Files and hashes:         1: UkEeUtq30L4mdDE7a10udL0RNg4.crl (hash: qNRzLNrZ2TT3t1lNySA/PwsYfjgPzg8Aga8IbG5QwNY=)
                          2: ZM1dhLREHUK9THyRbQhmbYvH-go.roa (hash: N1Sa8G0Rm15Kvd0+4hmG1B9UX0vybL83hTGxPQknPt0=)
                          3: byfZkmLSb7ajm_75Ax6iG_ZlCu4.roa (hash: ER/6VxPqiJN/K5DSIpfRV2uSXC5bS6RfspWAI1iq+yg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:5c:af:46:e8:d3:03:a4:66:98:bb:5c:72:3f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
        Validity
            Not Before: May 17 14:00:08 2024 GMT
            Not After : May 18 14:00:08 2024 GMT
        Subject: CN=ea189f7edaebfa8aa78514e66027b1fd445a5cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:83:ab:a8:c9:fe:84:0c:e7:cb:70:2d:3e:21:
                    cb:69:ad:f0:ba:9f:d8:f7:ba:48:f3:07:6d:56:d5:
                    02:ac:72:76:63:a9:6f:e4:d5:ed:a3:ab:c6:e8:a0:
                    ed:39:32:66:f1:8c:bc:26:0a:c7:a7:20:5a:d2:b0:
                    27:b7:02:6b:4e:10:29:d1:db:6c:e8:5e:bf:ea:0c:
                    05:7d:a2:3e:58:9c:c6:72:5d:40:2f:73:af:23:ec:
                    3d:40:97:ca:9c:91:f9:44:7f:cb:8d:1e:6e:8c:82:
                    9b:42:67:78:39:99:d5:68:a2:85:88:a7:ca:9a:7f:
                    19:4a:ef:f3:17:ad:2b:4f:1a:a6:b1:82:1c:ef:86:
                    dd:fb:a3:96:67:1d:38:b8:ae:18:e3:4c:99:38:20:
                    a3:6f:e9:80:7d:d6:39:ae:29:cc:26:f0:3f:36:48:
                    ed:1f:d8:e4:3b:0c:01:d3:00:e3:eb:69:36:a2:10:
                    d7:43:10:c6:62:32:bf:d4:bd:0f:c3:65:15:52:48:
                    71:c8:5c:09:74:77:43:1b:fa:4f:cf:b7:a9:e7:57:
                    fb:e9:fd:30:3d:26:46:4f:e3:1e:e9:a8:47:2f:b6:
                    f8:30:f1:11:c4:1b:a0:29:a3:de:52:05:bf:dc:a8:
                    63:56:8d:49:be:c2:06:6c:50:81:f1:5d:f2:08:e1:
                    e2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:18:9F:7E:DA:EB:FA:8A:A7:85:14:E6:60:27:B1:FD:44:5A:5C:D3
            X509v3 Authority Key Identifier:
                keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:60:e7:9c:2b:bd:a5:72:2a:32:8a:f3:30:ce:a7:6c:7f:10:
         27:97:91:22:3b:0d:7d:ce:e2:8e:28:9e:2e:27:48:93:90:32:
         bd:2f:78:be:af:cd:09:35:9b:78:a9:90:3f:fc:66:05:54:fa:
         8f:87:65:da:35:92:1b:4b:0b:b2:ec:53:c6:37:eb:e3:9a:55:
         39:fd:f9:aa:8e:0e:65:8a:05:56:c7:e4:d8:ec:1e:ee:3f:99:
         2f:e3:36:7b:f8:aa:ab:08:2f:2b:5e:1b:a1:db:9a:f3:da:e7:
         96:15:e6:83:99:e1:9e:87:fe:67:f7:c6:8b:e2:73:c3:20:f6:
         d0:17:f3:67:79:8e:2c:3e:f8:67:04:d5:42:ce:52:5c:2f:e5:
         4e:22:05:61:d9:91:e1:45:37:49:c7:09:f6:d9:5e:0e:db:e7:
         93:13:58:c5:f0:b4:6b:e3:85:03:e9:2b:4c:b5:b8:2e:66:d9:
         4f:95:91:4b:16:41:1f:3d:6d:3e:8b:3e:9f:4a:37:f8:cb:ff:
         76:2b:38:0d:47:2f:ad:48:6d:e3:32:ca:05:d9:30:12:19:dd:
         5a:dc:8f:79:c0:6f:f0:08:79:b9:92:f9:84:ca:da:42:4a:fc:
         8a:b3:75:06:b5:d5:2e:49:82:cc:a2:2b:8b:93:53:9e:4a:6f:
         15:c5:6f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:47:01 2024 by rpki-client on console-fra.rpki-client.org