Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
File:                     UuAiJP-5cRcuSTXtfdll0RVQibY.mft (raw, json)
Hash identifier:          LXt9lKmmrzQue3+NMggSDZJU7e7oUY8kmKWceFfSv/E=
Subject key identifier:   8E:CC:6F:50:20:84:DB:A5:9F:64:19:C3:5C:81:58:79:C3:3B:E6:75
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Certificate issuer:       /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial:       018F8749D9A8E2892CA83F1F2C6B096B5B22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
Manifest number:          0B03
Signing time:             Fri 17 May 2024 16:01:54 +0000
Manifest this update:     Fri 17 May 2024 16:01:54 +0000
Manifest next update:     Sat 18 May 2024 16:01:54 +0000
Files and hashes:         1: DJlUiycmS-0IantNfOzNnCZlD28.roa (hash: TKq2bXe/6SUBA9m0rqK21H6RcIkKC3fKHIWiDdgoNDw=)
                          2: OJLjih2YK6F69isB8bA5lX8i0Lo.roa (hash: BwsEX3wN6WMS1mmxiIMTSv+jpc2XIqzOPei4JvQJ9KY=)
                          3: UuAiJP-5cRcuSTXtfdll0RVQibY.crl (hash: qXKRiIlYS9MSOwFPz0Bw/p6G3JfA+Ny4QgBWSct/+so=)
                          4: jQ3D5xL_a3lOF6YH9fGLK0r6pBY.roa (hash: 7A3uH2UeJwZf9FJIFGRdr7pyipkslPh/kxSqPdItrmQ=)
                          5: lhWwovv1oVuuMkQ4hrQXApIdSx0.roa (hash: WNdLR9jT8Xfl4u0fQTLrgoy4W4TGPqMWCqLVMAEEtXk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:d9:a8:e2:89:2c:a8:3f:1f:2c:6b:09:6b:5b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
        Validity
            Not Before: May 17 16:01:54 2024 GMT
            Not After : May 18 16:01:54 2024 GMT
        Subject: CN=8ecc6f502084dba59f6419c35c815879c33be675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:54:62:c3:3d:f4:76:dd:ab:04:ee:9c:14:
                    06:8b:43:bd:a9:fd:80:6f:d4:46:3b:7a:b6:25:b4:
                    f8:2b:d9:4a:0a:29:dc:84:26:1a:1a:f4:17:12:f9:
                    82:ea:4d:e6:55:61:f1:09:22:2b:23:b1:35:22:ab:
                    e9:23:9d:74:17:9b:59:5b:9b:f6:28:5f:df:66:e5:
                    6c:4c:86:ff:a4:21:94:ce:e3:f2:75:8d:53:69:f6:
                    c4:95:64:30:f1:11:a9:5d:d0:34:c0:76:61:da:55:
                    ee:92:9d:72:b0:ff:78:23:1e:de:ba:35:8d:99:f3:
                    a6:84:1a:e3:ba:c3:5b:ff:81:f7:44:f1:0c:b9:8f:
                    60:74:eb:04:5d:91:7d:b7:ea:ce:e4:72:69:77:12:
                    f9:9a:15:09:f9:f3:d7:8a:ae:1f:48:f9:30:26:bd:
                    a9:e0:ce:25:0c:1b:db:53:7b:e9:0e:88:74:76:00:
                    e8:a5:d7:df:de:1e:b3:39:f3:57:13:9a:58:93:55:
                    52:3f:1d:08:ad:07:38:15:4e:83:33:68:2a:b0:1c:
                    2c:84:d1:d1:1b:c4:d4:43:4d:82:83:fc:1c:ba:e9:
                    df:dd:cf:0b:46:db:e2:25:f6:bb:09:d8:eb:f5:54:
                    e4:6a:68:dd:fa:d0:be:b2:d2:5e:16:e5:14:08:52:
                    3d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CC:6F:50:20:84:DB:A5:9F:64:19:C3:5C:81:58:79:C3:3B:E6:75
            X509v3 Authority Key Identifier:
                keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0a:ec:d0:d0:9b:81:d1:d9:3f:ce:dc:f0:2c:a8:c4:f6:8d:
         63:03:3d:4a:27:52:5e:14:0d:df:50:2b:15:e7:38:a2:d5:3c:
         36:4e:18:4e:05:bc:be:b7:f7:ca:88:6c:09:97:f6:69:98:fc:
         3a:d7:72:f1:59:18:fb:0b:2e:45:ed:a0:9e:de:09:58:6a:95:
         f9:b7:52:e7:dc:62:c0:b0:54:38:f0:18:6d:2e:f5:c8:79:e9:
         b0:c0:7c:a9:cf:41:94:8d:40:8e:55:78:0d:a1:71:90:71:41:
         78:fc:23:4c:9b:e2:4c:88:e0:80:ee:20:aa:40:ae:77:19:95:
         3a:b8:0c:57:0a:ed:c9:bc:c0:b6:2a:6c:19:33:57:55:20:82:
         f6:d0:ed:a5:b1:95:f2:49:36:2a:5b:67:b8:68:3f:41:03:f4:
         7c:c4:b7:8a:aa:0a:7e:60:67:43:82:d0:95:4c:94:63:80:89:
         92:94:1f:f3:83:0a:39:04:fe:f6:04:89:82:af:56:46:cd:4d:
         04:56:f8:11:d4:f3:f6:80:e6:89:ad:8e:34:b5:89:99:fa:c8:
         97:f5:bb:6c:57:63:43:0d:7d:c8:5f:1f:bf:1e:dd:d7:81:43:
         79:96:31:8b:1a:59:12:56:da:ab:21:b7:7a:7b:00:df:bf:cd:
         15:42:e2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:39:48 2024 by rpki-client on console-fra.rpki-client.org