Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File:                     u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier:          et4SGBRFnQv862vRy1RAT5Q9D7BunS4Hr3S0ZEsSO+c=
Subject key identifier:   18:EA:00:32:FC:CB:CE:AB:82:68:EA:3C:42:FB:98:FA:4F:BE:D5:0C
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer:       /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial:       018F87485E9C3869B11A461E7CA1727B5FCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number:          0619
Signing time:             Fri 17 May 2024 16:00:18 +0000
Manifest this update:     Fri 17 May 2024 16:00:18 +0000
Manifest next update:     Sat 18 May 2024 16:00:18 +0000
Files and hashes:         1: kE48Fb3uA1DDH5Kku0WSV0lmbuo.roa (hash: E6snZnfjcYEUXFBmUn7li7xNkkzt3ZxWy5DBpdSfgBE=)
                          2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: 4mlRPJ3K936M6IBWLmg9/G0Ev1BgGz62lFh7fsDX6s0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:5e:9c:38:69:b1:1a:46:1e:7c:a1:72:7b:5f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
        Validity
            Not Before: May 17 16:00:18 2024 GMT
            Not After : May 18 16:00:18 2024 GMT
        Subject: CN=18ea0032fccbceab8268ea3c42fb98fa4fbed50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fb:a8:ac:71:94:6e:b7:9a:f9:b5:51:7f:c8:
                    82:16:8f:87:40:96:e5:57:83:d0:1b:aa:c2:6b:75:
                    e1:9b:8c:f1:95:fe:29:fc:3c:f9:1e:9b:15:f4:eb:
                    3a:86:68:8e:a5:06:21:89:0a:8e:c0:49:ae:a5:48:
                    cd:93:5f:42:ba:14:f6:18:11:f1:0b:b2:dd:0a:d5:
                    f6:0b:db:0b:99:18:a5:73:b6:4a:a0:93:ff:5c:96:
                    82:33:d2:dd:15:23:33:21:1f:37:19:b0:a1:f6:67:
                    39:35:52:bc:8d:2e:69:a6:a7:2e:3f:23:87:ad:3d:
                    e8:c0:e2:ef:b8:c7:b6:49:4d:96:2b:6c:52:d6:a3:
                    e6:e6:9d:49:6a:26:2a:cb:c8:47:75:c3:57:88:24:
                    40:56:d6:09:b8:f8:19:dd:f9:2e:5d:ad:04:ca:17:
                    99:e9:63:69:e3:26:11:91:1d:64:ad:51:a6:88:1a:
                    9f:75:4c:33:78:ce:fd:cc:51:d6:f4:ab:a6:9c:5b:
                    06:c2:79:9f:43:21:bd:05:20:37:fb:54:82:e4:5a:
                    09:b1:3b:9c:6f:36:11:29:84:92:f7:13:e0:ff:7a:
                    14:51:74:4d:e9:b9:54:1c:72:f0:00:7c:a4:46:42:
                    f6:c9:33:c8:2f:b1:8a:1b:21:97:6b:d7:7b:7a:c6:
                    24:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EA:00:32:FC:CB:CE:AB:82:68:EA:3C:42:FB:98:FA:4F:BE:D5:0C
            X509v3 Authority Key Identifier:
                keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:1c:dc:b9:c8:d0:c4:ff:aa:7b:7d:56:17:4b:b4:c4:80:09:
         1f:cc:b8:e8:09:36:38:0d:f3:64:7b:38:e0:dd:6d:d8:a1:7f:
         f5:da:11:c6:17:77:03:00:b3:1d:d9:a1:ee:f2:f1:8d:61:c8:
         c2:0a:e5:e0:e1:4f:2b:1a:70:83:61:45:1e:c7:f0:38:e8:b7:
         9e:05:dd:c5:37:b8:c0:df:58:c5:ce:ed:5c:52:4e:b3:a2:39:
         6d:97:1a:9f:e3:fb:e8:84:d4:26:67:01:5d:e1:2b:b3:98:ff:
         b5:03:24:47:b1:97:ad:ef:6b:6c:4b:a6:b2:ce:4b:f1:14:50:
         06:46:e2:17:a4:4c:62:2b:5f:70:69:60:c2:39:0f:98:79:8b:
         b9:fd:74:5a:12:92:af:84:0e:b4:ba:52:b7:46:e1:1b:f8:4f:
         a7:2e:cf:0f:9a:dd:a2:5d:2a:cd:83:55:65:35:7b:4a:58:86:
         0f:a6:15:0e:cd:ec:cb:29:f0:60:90:59:37:ed:35:4a:03:9b:
         6f:83:06:82:c1:ca:02:07:84:6c:cd:a4:63:5d:1b:79:0e:08:
         21:4d:ac:e1:87:9c:5e:73:39:3c:17:8f:5e:15:79:37:fa:90:
         14:06:3f:00:4b:62:d5:5a:2f:33:ee:0c:52:61:08:2d:37:df:
         20:fc:86:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:08 2024 by rpki-client on console-ams.rpki-client.org