Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
File:                     1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft (raw, json)
Hash identifier:          yCJ+CjJWA2vbjXtSJz0rDGkiYTDILqWQM7i6HZxH8xs=
Subject key identifier:   BF:D2:D1:6E:44:3B:4C:AD:06:A2:FF:0A:05:74:86:CB:F0:8D:1E:11
Authority key identifier: D6:E0:4D:50:9E:D1:E9:CD:B3:54:B7:45:99:9D:B9:41:7A:8C:B8:73
Certificate issuer:       /CN=d6e04d509ed1e9cdb354b745999db9417a8cb873
Certificate serial:       018F42686A7F2CC48C27178F21D5B0CE04DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
Manifest number:          10E5
Signing time:             Sat 04 May 2024 07:01:30 +0000
Manifest this update:     Sat 04 May 2024 07:01:30 +0000
Manifest next update:     Sun 05 May 2024 07:01:30 +0000
Files and hashes:         1: 1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl (hash: 4gGJhiVvCqC/9ixmo9RmLYx+m2G+V20k8jrff1G/2no=)
                          2: SdcSt3vnjpXLd3oi_b2MEH5PgOY.roa (hash: F3WSiWvwgWregodmWuObrSZe/Ta9xwDxfBNv/i4z0ks=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:68:6a:7f:2c:c4:8c:27:17:8f:21:d5:b0:ce:04:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e04d509ed1e9cdb354b745999db9417a8cb873
        Validity
            Not Before: May  4 07:01:30 2024 GMT
            Not After : May  5 07:01:30 2024 GMT
        Subject: CN=bfd2d16e443b4cad06a2ff0a057486cbf08d1e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:5f:4e:54:50:04:8b:6c:0b:1a:91:5e:02:
                    28:90:0d:e8:f5:eb:5e:ea:08:fa:d7:81:54:52:5b:
                    88:e1:63:96:87:4d:a0:f0:ba:89:48:45:58:7e:e6:
                    de:4d:f8:3d:47:b1:c0:11:c1:7c:d3:37:34:4f:09:
                    d1:12:a5:72:44:fe:3f:2e:9d:f3:54:a3:61:ea:99:
                    db:3c:d6:e7:ad:ec:a9:c0:17:eb:ff:2c:1d:a3:10:
                    05:58:f6:8c:fc:96:d0:b9:76:35:c2:53:eb:f2:a5:
                    24:34:99:f7:9d:a5:36:6e:1f:c2:a8:db:80:4e:fc:
                    88:f5:49:51:9e:db:2d:4c:ae:0e:0a:82:16:ac:f7:
                    95:a8:c6:bb:f8:dc:eb:80:fc:14:63:ac:7b:5b:aa:
                    c3:d2:ca:13:d2:ad:27:2a:f5:36:23:8e:f1:4c:b3:
                    33:8b:46:65:b8:2c:16:88:53:19:d2:47:e9:6c:b4:
                    55:a1:3e:cd:a7:42:e7:ea:b3:ce:bf:99:29:50:a6:
                    79:98:28:a4:bc:2a:98:4a:dd:c4:d9:f0:18:db:d3:
                    6e:7e:e7:4c:a4:86:c3:4e:1a:e3:68:78:5b:d6:e7:
                    e3:b6:00:24:69:ef:f1:73:17:57:e0:da:da:d4:36:
                    ff:a4:cd:4b:06:5c:b6:4a:f0:1e:01:08:01:f6:97:
                    6e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D2:D1:6E:44:3B:4C:AD:06:A2:FF:0A:05:74:86:CB:F0:8D:1E:11
            X509v3 Authority Key Identifier:
                keyid:D6:E0:4D:50:9E:D1:E9:CD:B3:54:B7:45:99:9D:B9:41:7A:8C:B8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:cb:fe:48:47:0f:60:d1:88:2c:03:7f:ff:91:2c:78:b6:b0:
         7d:eb:bb:b0:3b:f5:d6:b4:f7:6c:33:46:e9:84:f2:1b:b6:10:
         ba:93:bb:71:33:49:e0:52:b8:41:3f:cb:bd:c8:39:9a:cc:3d:
         3e:6e:0b:e1:69:d9:3d:84:42:b4:cf:c5:94:c9:fb:cc:55:31:
         9e:62:cb:59:09:aa:7c:64:d4:4f:ba:48:9d:66:e3:17:0c:a2:
         3a:a7:93:5b:84:d6:7e:9f:6c:53:62:8e:e5:dd:ed:7a:8c:ed:
         9d:ba:42:d8:18:d7:3c:e9:36:bd:dd:98:ee:9e:ed:06:e2:07:
         13:3b:b2:49:a3:23:eb:99:71:4f:70:a2:8a:c4:3d:5a:50:e3:
         7d:11:8e:65:b2:bd:92:65:7b:fc:79:3f:ed:99:c3:d6:f9:91:
         9b:5f:4d:ec:4e:ff:b9:08:37:0f:68:5e:8e:36:19:39:08:39:
         37:b6:17:ad:ec:fb:60:60:5c:9e:53:40:a8:43:80:5d:7c:8d:
         d6:dd:d6:94:5e:7a:c3:d1:47:9e:d1:19:34:9b:be:ba:f9:e3:
         e0:63:d5:73:d4:67:da:2a:1f:51:06:7e:56:c1:04:ff:e2:ab:
         55:53:8f:84:be:06:ac:d9:a2:07:d2:96:f5:9b:6d:46:d4:25:
         82:d6:3c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:45:55 2024 by rpki-client on console-ams.rpki-client.org