Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File:                     uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier:          Db1ZW5LEA6LFSRcNu+MZauiFsEpWqeD8nA2JMPCZ+oo=
Subject key identifier:   2E:78:79:A6:4F:BF:F4:CD:7A:47:2B:0F:46:4D:BB:03:66:EC:AB:8F
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer:       /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial:       018F87B6529E4A1615064CB8DDDF12A27572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number:          0383
Signing time:             Fri 17 May 2024 18:00:23 +0000
Manifest this update:     Fri 17 May 2024 18:00:23 +0000
Manifest next update:     Sat 18 May 2024 18:00:23 +0000
Files and hashes:         1: ZYSWak6s6T19qjLTklL7dJuFAPQ.roa (hash: H/Fws6N52yxoiMYerKX2SQUg/mSzBv+7pD/BX0YUhbY=)
                          2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: aByk4Jz3epoNdJXZNEficRV3+VcrDLKk4exZ15YuRNE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:52:9e:4a:16:15:06:4c:b8:dd:df:12:a2:75:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
        Validity
            Not Before: May 17 18:00:23 2024 GMT
            Not After : May 18 18:00:23 2024 GMT
        Subject: CN=2e7879a64fbff4cd7a472b0f464dbb0366ecab8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:88:5d:b4:a2:ca:df:65:ec:d1:2e:98:31:
                    2b:7c:64:73:fa:88:be:14:1a:ac:c5:1a:89:68:b8:
                    a6:6a:f1:b0:83:52:00:0a:18:20:f4:b2:39:d4:49:
                    e4:8e:8a:ac:7e:2e:4b:60:da:44:31:4c:9b:82:30:
                    f6:e6:0f:77:8f:d4:3a:1b:f2:1c:3f:d4:fc:84:6c:
                    29:56:db:c9:c8:82:db:c5:14:87:c9:68:04:d1:47:
                    e0:f8:de:46:c3:3d:95:96:a0:ec:97:87:6a:07:fa:
                    3e:a7:79:a3:e2:9d:f9:2c:59:2c:8b:e3:6d:1a:d6:
                    4c:bf:e6:24:52:1a:64:76:17:0a:c9:d6:c5:af:a5:
                    cf:17:c7:bf:94:56:06:41:34:70:5b:b4:5b:47:d0:
                    55:e1:3c:c9:b4:80:4e:71:ea:1e:21:5b:d0:55:4b:
                    91:a4:52:3c:f4:86:38:b8:f5:57:a0:fb:c8:13:50:
                    8f:da:83:ea:18:ee:32:ad:e7:3e:ad:4f:27:cb:33:
                    44:6c:45:56:62:d3:0f:a2:13:0a:bb:96:74:01:47:
                    1f:da:be:30:41:bd:83:85:c0:34:31:c5:e8:26:f4:
                    34:e1:0f:37:cd:73:5b:49:46:a6:ba:48:68:ff:8f:
                    fa:49:d1:ef:55:d9:70:9d:f5:aa:c5:db:b8:02:f9:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:78:79:A6:4F:BF:F4:CD:7A:47:2B:0F:46:4D:BB:03:66:EC:AB:8F
            X509v3 Authority Key Identifier:
                keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:76:44:65:15:fc:ce:8a:05:bc:cd:eb:3e:33:da:f7:0c:f2:
         ea:33:dd:ff:14:9d:db:94:e1:44:4e:d1:05:30:b6:9c:ce:b3:
         d2:d0:57:99:7b:15:f0:5a:06:c6:8d:ee:31:55:72:40:e6:1e:
         00:12:af:2d:ea:69:cf:c0:14:59:f9:b8:70:b3:0d:d0:a5:f7:
         02:95:ae:2f:31:17:6f:00:02:e0:bb:c2:86:9c:88:39:33:32:
         18:9d:54:3a:8e:87:bb:e0:ce:db:20:79:e7:a8:f8:bd:de:2c:
         e7:97:86:63:0a:52:42:f2:93:95:c5:42:b9:a8:2e:ca:3c:c6:
         26:2f:28:64:26:04:b4:82:7a:6c:0f:db:7f:37:b0:1e:04:db:
         e9:1d:4d:d6:8a:8b:00:ba:2d:8a:79:f2:b3:cb:59:8d:13:31:
         4d:ef:75:3a:f1:20:ac:cd:e2:17:1e:45:1c:fc:49:77:a2:c4:
         89:cb:8f:40:00:ba:54:b4:d7:55:29:1b:be:48:02:03:7b:c3:
         aa:da:49:bd:b5:a5:c5:a0:99:1f:66:4a:f0:c8:b4:d8:3d:f4:
         e8:72:be:f7:3f:55:8d:b9:54:e0:0c:7a:fb:6e:cd:a8:52:14:
         02:44:5f:a5:74:fb:f6:ad:13:0f:e4:e7:3e:dc:0f:95:e6:03:
         de:25:fa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:53 2024 by rpki-client on console-ams.rpki-client.org