Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
File:                     UqWb8EMIAwY1n1opSR9UWwcFHAU.mft (raw, json)
Hash identifier:          /IO3rykGoVWiO2INCwmPxbJ8rHbrJIcERnBJM3znAtQ=
Subject key identifier:   03:A5:77:9B:14:50:B4:E6:F2:89:A3:F9:E7:59:29:90:CA:86:33:D3
Authority key identifier: 52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
Certificate issuer:       /CN=52a59bf043080306359f5a29491f545b07051c05
Certificate serial:       018F874A172FD99EBFD065799F140E8DFE5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:02:10 +0000
Manifest this update:     Fri 17 May 2024 16:02:10 +0000
Manifest next update:     Sat 18 May 2024 16:02:10 +0000
Files and hashes:         1: I7L-RX8AfJfyyRlByagDjiuIGxo.roa (hash: ohxO+HYxRvU+WqulTjWuS+qpMNCmglZvgUXJ89EhGFA=)
                          2: UqWb8EMIAwY1n1opSR9UWwcFHAU.crl (hash: 6hVGwDRvMC16VHDWUjU3hkRrntyRgrzO+vbO7nNydm8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:17:2f:d9:9e:bf:d0:65:79:9f:14:0e:8d:fe:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a59bf043080306359f5a29491f545b07051c05
        Validity
            Not Before: May 17 16:02:10 2024 GMT
            Not After : May 18 16:02:10 2024 GMT
        Subject: CN=03a5779b1450b4e6f289a3f9e7592990ca8633d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ba:eb:61:e7:b3:a3:97:95:8d:2a:69:05:c5:
                    cd:6b:64:47:73:2c:c3:25:5c:32:a0:02:dc:32:04:
                    45:d9:ba:e4:8c:28:3b:ef:30:b8:17:8c:b7:fe:b6:
                    55:9b:62:52:ea:8d:76:c6:5f:ca:bf:33:ad:ce:54:
                    87:19:24:44:79:f4:91:12:76:c2:29:51:df:46:a2:
                    fc:6a:4a:4d:bc:3c:98:4b:4d:e6:f0:78:ae:1d:31:
                    c2:98:bc:c1:35:a9:62:23:36:bc:5e:6e:a0:66:3e:
                    a7:d6:b9:ca:37:6f:65:fc:47:3b:11:a6:0a:46:59:
                    75:f7:c8:1f:9d:46:ca:d8:b4:29:a5:af:8c:39:ea:
                    0b:c8:26:b6:9a:bf:89:50:b0:b3:76:2b:b8:ee:37:
                    5c:e3:e7:0e:85:9e:64:69:c6:52:08:77:46:6b:71:
                    4c:cd:21:e6:5b:eb:26:e4:41:11:37:6b:a5:33:e8:
                    c1:1e:c4:73:2b:25:d1:ed:08:7e:ad:65:e9:c3:be:
                    25:c7:13:f1:59:f1:a2:f5:b2:87:a7:56:97:98:9e:
                    d9:d4:bc:5a:b6:0a:8c:97:18:8a:49:1d:b8:90:2e:
                    0f:c5:18:02:ae:49:f3:e5:4c:6b:aa:5a:3f:ae:88:
                    5f:ce:01:a6:dc:1b:d9:86:c7:8c:2f:94:22:fe:ae:
                    8e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A5:77:9B:14:50:B4:E6:F2:89:A3:F9:E7:59:29:90:CA:86:33:D3
            X509v3 Authority Key Identifier:
                keyid:52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:72:bb:6c:df:04:b6:75:1f:5d:75:38:72:67:50:0a:6d:00:
         c4:a2:46:3a:a3:c5:af:10:63:c1:8c:53:d3:8d:56:87:13:8b:
         3b:0d:f8:80:79:ad:fe:f5:0a:c6:87:e8:7f:1f:71:44:bb:6b:
         72:66:d5:e9:4c:ff:c6:b3:58:0a:e1:b4:a0:be:a6:09:55:e7:
         97:c2:87:00:e5:db:17:46:88:3c:fe:81:c1:12:90:59:b5:f0:
         0e:31:d8:0a:bf:a5:1c:b5:0b:a7:a1:32:db:96:1b:f6:02:98:
         3e:5b:fe:a6:0c:cc:34:18:c4:8d:67:cb:e9:51:3f:1f:d1:8f:
         ba:11:dd:77:3e:46:dd:82:0b:f5:c7:b9:1e:53:19:2f:14:e3:
         6a:68:3a:05:12:ce:82:09:84:12:b1:1e:2d:64:60:12:ba:f2:
         aa:97:26:cd:b1:77:b4:56:f2:0f:57:58:42:63:18:fa:df:be:
         69:6d:e8:b8:d4:51:2b:2e:33:36:00:42:b2:e9:21:1e:f3:40:
         cb:98:f8:18:0b:7e:f1:09:94:4d:d2:25:86:23:58:57:4d:b3:
         20:5e:5e:09:3f:e9:ce:46:93:55:45:ba:b8:79:8e:09:14:cc:
         70:76:d9:cf:d2:5d:d5:19:e6:7d:2e:7a:cd:33:ca:1e:83:c1:
         01:6c:53:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:41:23 2024 by rpki-client on console-ams.rpki-client.org