Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
File:                     uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json)
Hash identifier:          BPcR2N3fV4D65kf/jr0coWwbWiqbHuEEhZ/EAL7Mde0=
Subject key identifier:   5B:B8:2F:9E:17:B6:E3:B0:BC:65:FC:A0:09:39:AF:58:46:12:92:35
Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
Certificate issuer:       /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Certificate serial:       018F8748B0108B6293D8F8AD4862968C356B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
Manifest number:          08D9
Signing time:             Fri 17 May 2024 16:00:38 +0000
Manifest this update:     Fri 17 May 2024 16:00:38 +0000
Manifest next update:     Sat 18 May 2024 16:00:38 +0000
Files and hashes:         1: V226l57bjqpSEo7ifV6ysOLg3WQ.roa (hash: AuaXOpmsz83FQFV8/n8Gk0gR41mDYf3HcGcPCJpSakU=)
                          2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: F3O71gh7T5E+Ahg6CtAu/V9Zu1XhMKoHBi+FgbKdsJA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:b0:10:8b:62:93:d8:f8:ad:48:62:96:8c:35:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
        Validity
            Not Before: May 17 16:00:38 2024 GMT
            Not After : May 18 16:00:38 2024 GMT
        Subject: CN=5bb82f9e17b6e3b0bc65fca00939af5846129235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:07:96:3e:3c:1d:7c:95:de:03:1f:bf:49:d2:
                    eb:51:a9:6f:63:94:0b:3b:f6:96:94:99:23:5d:0b:
                    65:8f:c1:93:ff:ed:57:a5:48:92:d6:3d:fd:7f:b3:
                    df:82:ce:35:c4:44:b7:4b:83:a2:b2:f7:98:74:32:
                    5c:35:9d:8a:c9:9c:fa:0f:18:1e:36:46:cb:d2:fc:
                    f2:73:01:01:79:4a:f0:08:2c:03:e3:b4:c0:3d:e0:
                    e9:a4:ad:e1:78:94:c1:86:45:3a:53:8c:25:fc:27:
                    cd:98:20:92:d1:3f:62:43:76:0c:24:9f:39:eb:ed:
                    f0:88:1d:43:98:ed:23:45:15:98:07:dc:85:e4:15:
                    50:43:fa:57:be:7e:a7:6b:70:fc:a7:7d:f5:ae:6f:
                    75:57:cc:d0:b5:1a:41:90:30:e7:21:88:18:37:09:
                    4c:bc:23:f2:4f:95:36:be:93:c1:4d:f8:c1:f2:e4:
                    e1:0b:fd:8f:80:92:15:24:99:e5:75:d7:13:dd:9d:
                    7f:f9:ec:80:2f:38:97:5e:e0:d9:df:ee:4e:c4:6a:
                    f2:04:63:b2:8c:69:29:71:b0:84:ee:11:36:d8:22:
                    86:ac:95:f3:c0:87:d1:0a:25:14:48:fa:8a:ee:96:
                    f5:dc:bf:6f:e0:a9:5b:8d:ec:eb:da:2f:da:61:05:
                    b0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B8:2F:9E:17:B6:E3:B0:BC:65:FC:A0:09:39:AF:58:46:12:92:35
            X509v3 Authority Key Identifier:
                keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3f:02:be:00:b5:f4:da:17:2d:99:4f:81:f7:e5:33:ca:28:
         5d:e2:36:c3:03:9a:11:1b:cf:28:2a:f1:9b:ba:ed:7d:a2:4f:
         70:8f:48:be:27:3e:d2:6f:f5:a9:9b:71:c4:59:b1:12:79:85:
         81:06:c2:2f:3e:b3:bc:0a:7d:68:db:44:2a:e9:8d:57:ff:8d:
         3f:0d:d7:2a:11:3e:01:67:7a:7e:37:ee:6e:97:7a:c7:91:02:
         d4:63:f7:1e:bb:ba:63:d6:b8:54:c8:31:70:60:44:08:f0:31:
         c5:42:b4:1c:2b:5d:7c:c7:23:18:18:3e:42:06:62:ad:82:d1:
         f6:7c:8d:e8:92:c1:95:54:0c:8d:01:ab:e5:4b:36:21:da:a6:
         29:7d:b8:3d:fa:df:12:8c:b4:9c:e9:3e:c6:7f:bb:b5:db:c1:
         c4:3f:2d:e0:7a:44:20:4e:11:e9:53:98:c1:60:32:f8:42:f1:
         b5:04:09:11:d5:82:55:1c:0d:2c:26:40:67:8b:98:b2:27:c2:
         97:43:d6:67:33:e8:82:fc:d8:ef:8f:2e:47:ed:97:7d:a3:d7:
         7b:00:6b:ec:ab:04:a8:38:77:38:9a:99:d7:9f:bd:1c:3d:61:
         ba:88:c4:ca:a4:31:28:38:ba:ca:f6:1c:19:ac:02:5d:56:e8:
         f2:27:3c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:07:07 2024 by rpki-client on console-fra.rpki-client.org