Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File:                     UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier:          Qz6IrMoguCobeoX6ocNcd7LrCXUpvoat43+W3WrK0SM=
Subject key identifier:   86:EC:1C:F3:EF:1F:0D:9C:AE:99:74:00:14:82:E1:BF:A9:E5:DE:80
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer:       /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial:       018F88241393E37353770248140A7188E2BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number:          053F
Signing time:             Fri 17 May 2024 20:00:16 +0000
Manifest this update:     Fri 17 May 2024 20:00:16 +0000
Manifest next update:     Sat 18 May 2024 20:00:16 +0000
Files and hashes:         1: 8gAXPk6OPwsdzuzPkFH-cPOoN-M.roa (hash: k8CKKJhEQDRa32tw9E3a0TA6WjTO9yR6DUeWsgRV5eY=)
                          2: EpswE5tyLi1VlIDgGnHvz_y8Up4.roa (hash: oGevmpVRKYwtzOZgSfaIVr7lQe9aTv50JB4lho4vq0Y=)
                          3: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: vK3F/SCzJui3SuHYwQu5I8NfgeAUdIBlPoaJvvbfFRk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:13:93:e3:73:53:77:02:48:14:0a:71:88:e2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
        Validity
            Not Before: May 17 20:00:16 2024 GMT
            Not After : May 18 20:00:16 2024 GMT
        Subject: CN=86ec1cf3ef1f0d9cae9974001482e1bfa9e5de80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ac:dd:eb:c8:c7:c4:03:47:93:c9:0f:36:1d:
                    2c:0c:ce:4a:bf:a9:b2:f0:4a:9e:52:14:2d:97:20:
                    e7:65:90:05:09:8c:07:1a:2a:d5:f6:ac:5c:b2:19:
                    9a:aa:63:94:87:69:62:e4:16:7c:95:f5:19:32:1a:
                    14:cb:56:c5:71:04:9b:5a:ef:00:f3:3c:48:c8:c9:
                    ee:2d:04:8a:a8:6d:77:97:c7:de:8e:f6:af:ac:82:
                    b0:a6:85:ad:f0:5a:83:90:a7:22:91:11:93:8c:bc:
                    70:12:3c:ce:76:99:a9:09:36:97:88:29:86:be:f2:
                    3a:10:bb:97:e9:02:b4:34:6b:ac:b8:f7:44:ac:33:
                    42:f5:f4:7c:10:62:03:1b:2b:77:a0:7d:ef:4a:25:
                    5f:34:2a:61:5c:e3:12:a1:53:78:61:53:1a:8f:ca:
                    77:94:3c:a0:f9:d3:4b:22:33:a0:c7:4a:71:59:6f:
                    fe:0f:d7:fd:d3:55:15:d2:98:f7:e5:6f:16:3d:86:
                    79:48:66:ae:47:f4:32:cc:33:cf:3e:48:47:fa:57:
                    b9:5f:ec:5b:48:5a:c9:bb:fa:17:8d:91:f0:58:d7:
                    1c:74:66:54:59:8b:0c:e3:e8:bb:31:57:0d:a6:53:
                    ae:ea:d4:77:b2:f9:52:f4:00:31:eb:52:55:a2:c9:
                    db:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EC:1C:F3:EF:1F:0D:9C:AE:99:74:00:14:82:E1:BF:A9:E5:DE:80
            X509v3 Authority Key Identifier:
                keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:90:a5:91:91:11:fb:5a:7a:f1:75:01:02:27:ae:71:1e:17:
         4b:04:dc:0b:f1:3d:92:b3:cd:bc:ba:50:e6:18:77:b0:09:4e:
         d3:d4:bb:9e:05:ee:51:d1:7c:b4:f5:39:84:69:e4:8b:14:26:
         d2:57:59:d2:53:f8:db:5a:7f:3d:ba:63:95:82:07:e5:fe:0e:
         89:a4:ed:23:26:1f:55:83:ce:f6:67:40:42:0d:bc:f6:f6:d6:
         10:d4:ad:45:bf:5f:9c:ec:a2:eb:ce:a2:8a:79:72:42:ec:ac:
         a1:8c:cb:1b:a7:04:d1:2a:03:41:04:4d:de:57:ff:19:60:30:
         42:93:49:17:ab:14:5a:0f:38:c4:e2:22:f0:24:cd:9d:56:ff:
         c2:ec:3c:07:a2:85:2a:39:82:fb:c1:54:83:20:8e:8b:fd:12:
         f6:dc:a4:3d:1d:1d:47:92:0d:51:57:d0:42:e2:8c:b4:92:29:
         e2:96:19:96:bb:76:23:bf:06:bc:b4:1c:26:4a:9b:b4:18:2a:
         75:8e:ba:cc:44:c2:a7:0a:df:ae:a6:95:2b:ca:79:ab:24:41:
         9f:9c:7c:8c:34:66:16:03:6b:a0:d3:ad:61:38:c6:56:75:4e:
         cd:cc:c6:44:c1:f4:29:5a:ff:99:94:49:f1:f3:91:63:49:44:
         92:b8:6f:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJBOT43NTdwJIFApxiOK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNTllMDAwYzk5MWY3OGYyNDNmZGU1OTgwY2Q1Y2VmNjQ5
NDA5ZTYwHhcNMjQwNTE3MjAwMDE2WhcNMjQwNTE4MjAwMDE2WjAzMTEwLwYDVQQD
Eyg4NmVjMWNmM2VmMWYwZDljYWU5OTc0MDAxNDgyZTFiZmE5ZTVkZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Kzd68jHxANHk8kPNh0sDM5Kv6my
8EqeUhQtlyDnZZAFCYwHGirV9qxcshmaqmOUh2li5BZ8lfUZMhoUy1bFcQSbWu8A
8zxIyMnuLQSKqG13l8fejvavrIKwpoWt8FqDkKcikRGTjLxwEjzOdpmpCTaXiCmG
vvI6ELuX6QK0NGusuPdErDNC9fR8EGIDGyt3oH3vSiVfNCphXOMSoVN4YVMaj8p3
lDyg+dNLIjOgx0pxWW/+D9f901UV0pj35W8WPYZ5SGauR/QyzDPPPkhH+le5X+xb
SFrJu/oXjZHwWNccdGZUWYsM4+i7MVcNplOu6tR3svlS9AAx61JVosnbiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbsHPPvHw2crpl0ABSC4b+p5d6AMB8GA1UdIwQY
MBaAFFJZ4ADJkfePJD/eWYDNXO9klAnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEt
MDQ4M2QxYzAxYjI1LzEvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEtMDQ4M2QxYzAxYjI1
LzEvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZClkZER
+1p68XUBAieucR4XSwTcC/E9krPNvLpQ5hh3sAlO09S7ngXuUdF8tPU5hGnkixQm
0ldZ0lP421p/PbpjlYIH5f4OiaTtIyYfVYPO9mdAQg289vbWENStRb9fnOyi686i
inlyQuysoYzLG6cE0SoDQQRN3lf/GWAwQpNJF6sUWg84xOIi8CTNnVb/wuw8B6KF
KjmC+8FUgyCOi/0S9tykPR0dR5INUVfQQuKMtJIp4pYZlrt2I78GvLQcJkqbtBgq
dY66zETCpwrfrqaVK8p5qyRBn5x8jDRmFgNroNOtYTjGVnVOzczGRMH0KVr/mZRJ
8fORY0lEkrhvYA==
-----END CERTIFICATE-----
Generated at Fri May 17 21:02:23 2024 by rpki-client on console-fra.rpki-client.org