Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
File:                     U6hLUj3-Mriom5zdMKn4cRAH_bk.mft (raw, json)
Hash identifier:          Pbfh3/hcZmW1ot/WSnya6wAQLD40gn4Ysbf/c0nZ/q8=
Subject key identifier:   32:DF:5A:14:CC:C5:FE:EF:B4:82:54:6E:B4:E3:31:95:02:06:49:6D
Authority key identifier: 53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
Certificate issuer:       /CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Certificate serial:       018FB26A2BAE24AA362BD9A774A8AB92333C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
Manifest number:          0864
Signing time:             Sun 26 May 2024 01:00:53 +0000
Manifest this update:     Sun 26 May 2024 01:00:53 +0000
Manifest next update:     Mon 27 May 2024 01:00:53 +0000
Files and hashes:         1: U6hLUj3-Mriom5zdMKn4cRAH_bk.crl (hash: mvfIKfLh3fzUVPKoDzhrMpiXEZ/Q9F7dHgtgR1R5g3M=)
                          2: qlH5m8NILZSoN_N4yGBt9QSMwoE.roa (hash: +3k+Nc0H4wc+AeQ2K8+uh3hdPchvVpmBJLlpcbLNqwA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:6a:2b:ae:24:aa:36:2b:d9:a7:74:a8:ab:92:33:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
        Validity
            Not Before: May 26 01:00:53 2024 GMT
            Not After : May 27 01:00:53 2024 GMT
        Subject: CN=32df5a14ccc5feefb482546eb4e331950206496d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:19:3d:49:07:4e:d1:d1:e0:e3:91:aa:0e:af:
                    3c:b3:c4:4a:c4:eb:4e:b5:43:65:b8:e8:2e:50:a4:
                    51:f5:d9:d2:e6:c6:5f:b2:c2:ab:e3:d0:14:12:cd:
                    57:20:74:22:d3:4e:8f:91:a2:d0:a2:a7:41:b3:3b:
                    cd:5a:7b:17:9a:a5:1c:2e:aa:9d:ee:ec:83:6d:f5:
                    e8:3d:90:d4:74:e0:6a:4a:76:53:0c:dc:7c:d1:ca:
                    97:e2:b0:48:53:d6:c3:8a:c8:4e:6b:c5:3a:d3:39:
                    b9:e6:85:c3:76:e5:84:e6:ab:9e:35:ea:f7:c7:d1:
                    a9:ce:c9:5c:09:9b:3d:e5:b3:3d:eb:42:96:a1:91:
                    ab:8c:4b:f0:8c:63:1b:a2:24:58:f6:bb:6d:90:88:
                    ab:f8:86:fe:85:5d:19:e2:8e:67:c5:d7:c5:19:8e:
                    83:6d:16:0d:7c:f3:71:2e:e3:37:65:03:6c:17:08:
                    b3:02:74:f1:16:19:18:28:2b:a2:5d:dc:7c:d4:ab:
                    c4:08:4e:19:0d:f9:91:33:a2:0e:e1:ba:3b:cc:2d:
                    84:51:fc:51:c0:70:2a:70:91:b8:cd:bf:fa:e2:cd:
                    83:2d:d4:60:e5:59:7a:ac:f8:58:6d:ab:26:4f:5a:
                    4e:f2:5e:24:e1:1a:9a:d3:8d:56:61:1a:81:40:d9:
                    08:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DF:5A:14:CC:C5:FE:EF:B4:82:54:6E:B4:E3:31:95:02:06:49:6D
            X509v3 Authority Key Identifier:
                keyid:53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:4c:0f:45:4b:ae:8a:79:9d:5d:17:38:83:a2:04:d4:89:8d:
         43:a4:42:e1:c5:6d:37:74:03:c9:6a:3c:49:91:17:f0:e7:24:
         b9:02:3b:ef:c4:a8:7c:7a:9f:23:ea:b0:4b:b6:c5:63:1d:c6:
         a2:25:de:d7:1b:a3:38:d3:9a:84:22:6a:59:d5:a8:95:f0:36:
         68:10:b1:63:7f:1e:6a:6a:d0:70:3e:2b:18:d6:5a:7e:16:24:
         40:0c:fd:91:b9:58:87:22:bd:f6:39:b7:60:e0:d9:59:af:2c:
         63:81:9f:ef:70:fe:80:22:32:53:24:69:5d:2a:fd:d4:d1:fd:
         9b:35:3d:6e:f6:72:45:9d:4a:21:6a:5b:51:9d:fb:9e:2e:40:
         41:f8:e7:74:3c:f3:d4:aa:1b:fe:f7:99:57:6f:02:c4:af:e9:
         b6:a0:72:69:c5:e5:90:04:ee:bc:f6:5a:4a:be:56:ae:e8:44:
         f3:fe:4a:33:16:90:43:d2:c9:ab:ef:29:f9:60:ac:c3:6b:2f:
         45:4d:72:64:50:55:e3:e4:86:c7:44:ef:f6:54:ff:4e:67:bb:
         14:7a:75:be:65:eb:cc:f5:c3:d5:15:ea:1e:4c:fc:a1:00:3e:
         c0:75:6d:42:05:6f:a9:d0:72:52:44:50:0c:71:96:2a:57:92:
         f3:27:a1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 06:44:37 2024 by rpki-client on console-ams.rpki-client.org