Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
File:                     uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json)
Hash identifier:          C9tp9GTopL5R1JbKhKglxbffkgwQKk/JvcnJc6iwWlo=
Subject key identifier:   57:43:8B:86:74:81:F5:84:5A:A1:E8:C6:D6:C1:64:0D:25:4D:B0:C1
Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
Certificate issuer:       /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Certificate serial:       018F877F3C9346F5827A185A691AB95412AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
Manifest number:          010A
Signing time:             Fri 17 May 2024 17:00:13 +0000
Manifest this update:     Fri 17 May 2024 17:00:13 +0000
Manifest next update:     Sat 18 May 2024 17:00:13 +0000
Files and hashes:         1: dQvAeoHJBaTYbQ8iNuGnnSDWYSk.roa (hash: viESUXHq0yMcUWYiqlCzxnRc3GMSdCp4o26GKzPIMZo=)
                          2: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: isZwXSQMHg47ZNP/8uN9zSJuVpwZUsz6Zm98R+YrgIw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:3c:93:46:f5:82:7a:18:5a:69:1a:b9:54:12:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
        Validity
            Not Before: May 17 17:00:13 2024 GMT
            Not After : May 18 17:00:13 2024 GMT
        Subject: CN=57438b867481f5845aa1e8c6d6c1640d254db0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:28:e4:d0:3b:57:6f:64:a8:ce:55:ef:b0:
                    01:69:c6:a3:8e:ee:87:3b:2f:23:02:1a:2c:7e:d7:
                    14:26:00:c3:7d:ef:7e:69:ea:db:ac:4f:f5:61:54:
                    51:ac:74:98:56:9b:2d:5e:62:34:9c:5a:d3:75:ea:
                    08:e0:fc:58:2e:9b:2d:9d:48:d9:d2:80:e3:c4:0a:
                    31:88:44:15:4d:33:06:33:46:13:ae:d7:f7:4c:ff:
                    91:2d:e0:0a:b3:a9:61:88:1d:2a:b9:e7:20:55:a8:
                    c8:d3:4d:6a:57:53:37:ff:21:0c:b4:fc:13:16:53:
                    1c:f1:d5:9d:5d:ad:fc:ab:f9:16:43:fc:01:55:5e:
                    83:ee:74:68:21:19:2b:e1:31:23:44:e2:22:7e:f6:
                    57:66:ea:f6:78:ca:df:e5:f9:30:56:58:57:92:ec:
                    fd:88:1d:97:eb:38:4d:29:74:e4:f8:20:04:39:76:
                    98:b1:ad:26:fd:f1:bd:b1:75:ec:fd:0f:33:bf:81:
                    ab:08:b4:2c:e2:19:35:14:27:e5:db:7d:a7:0d:b1:
                    3d:19:9e:a0:86:bc:9e:2a:a8:cf:b0:27:7b:66:57:
                    00:fc:8c:64:33:b6:8b:a4:55:c5:18:cd:4b:df:77:
                    42:01:b5:c9:da:a3:ac:45:0a:d3:85:d7:a8:e1:42:
                    c6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:43:8B:86:74:81:F5:84:5A:A1:E8:C6:D6:C1:64:0D:25:4D:B0:C1
            X509v3 Authority Key Identifier:
                keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f1:8d:97:1d:ec:21:a9:f2:1f:6a:5c:d4:eb:9b:38:c5:73:
         73:cf:98:6a:3c:8b:b8:8a:f4:21:44:5f:42:8e:02:4e:ad:3a:
         b6:af:38:46:e7:19:2d:1c:3f:a8:e3:2d:34:93:8d:da:9e:56:
         7a:a8:87:b1:31:76:90:e9:c3:57:e9:de:5b:3f:3f:88:1d:5b:
         7a:46:9d:f9:99:8b:3f:e0:e5:d4:53:d8:5f:8e:46:5d:45:81:
         77:ec:ab:d3:69:e6:e2:ef:83:d4:0a:11:9b:7d:31:7a:19:f6:
         39:ec:c6:a8:a3:de:bd:a9:58:1a:09:ca:94:59:28:b8:dd:9d:
         a9:9b:8d:d2:d4:50:90:46:f9:ba:d2:fb:eb:bc:46:9c:00:1a:
         51:79:e4:0a:5b:eb:d9:53:85:61:7d:c4:f7:c0:73:87:ca:2d:
         56:a8:02:50:2c:7f:d3:3f:86:32:ba:60:57:c5:99:d4:9e:7a:
         55:ff:bb:9c:77:39:cb:da:0a:a7:8a:80:82:50:cb:74:45:df:
         3b:57:6c:03:75:ae:76:18:38:44:ad:e9:f2:ce:78:f8:14:fb:
         c0:31:79:56:ae:4c:05:1c:7c:41:c8:1e:c2:1f:e9:dd:3f:33:
         18:61:ac:fd:c5:db:d7:be:ab:fc:a4:0b:ec:ee:e5:45:69:4b:
         0e:f3:21:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:37:38 2024 by rpki-client on console-fra.rpki-client.org