Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
File:                     v1M926H4p23i70lx_NUvlEHOCYk.mft (raw, json)
Hash identifier:          Z81ktaAfnw84BnofuFotLDUkn9rK1TnNvLykVTcubRQ=
Subject key identifier:   35:8D:D0:22:9C:A2:B9:58:C5:10:CE:F4:BB:0F:2F:78:6D:BC:6C:8C
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Certificate issuer:       /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial:       018F874AE6936B478C5BEBE1B75364853FE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
Manifest number:          0BB3
Signing time:             Fri 17 May 2024 16:03:03 +0000
Manifest this update:     Fri 17 May 2024 16:03:03 +0000
Manifest next update:     Sat 18 May 2024 16:03:03 +0000
Files and hashes:         1: dxhVGpZvKySCoLe3RRwVMqn7qfE.roa (hash: 3eX5qRXvzQhrv/TA1bW9/S7j84/2YrzYJDn/4YTCtcw=)
                          2: v1M926H4p23i70lx_NUvlEHOCYk.crl (hash: e5ZVYqDC/9bf63EnB/9pOjVKPhj/SkVfQUclTStjgDo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:e6:93:6b:47:8c:5b:eb:e1:b7:53:64:85:3f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
        Validity
            Not Before: May 17 16:03:03 2024 GMT
            Not After : May 18 16:03:03 2024 GMT
        Subject: CN=358dd0229ca2b958c510cef4bb0f2f786dbc6c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:86:39:bb:47:01:7d:a4:83:f3:df:56:98:4d:
                    c1:5a:1f:d6:82:09:92:88:79:a2:4a:ff:73:85:89:
                    10:e2:3c:d6:fe:1e:10:42:53:87:80:c9:c9:d1:43:
                    0c:52:4b:1c:4b:21:33:d2:2f:7c:dc:2e:72:8b:33:
                    16:20:42:f5:f4:13:7a:0f:10:bd:47:c5:a9:81:7a:
                    e0:e2:5a:dd:66:55:8b:92:f4:2b:0e:2c:59:4f:13:
                    1b:79:18:40:ba:4a:cf:68:9b:0b:01:e3:d6:bf:4b:
                    93:d0:00:8a:3f:9d:ff:09:a2:5a:36:cd:19:0a:40:
                    77:f9:a5:d8:49:22:ac:c8:f1:5e:4d:65:dd:7d:f7:
                    cd:2b:41:d2:7f:93:6f:cc:38:1c:a7:89:93:44:ad:
                    04:da:8f:bf:7b:8b:bb:64:ef:64:3c:55:cc:79:eb:
                    e1:51:11:e4:7d:89:91:d2:a3:89:23:08:64:e3:38:
                    d0:ca:96:0f:75:19:ff:dd:5d:44:27:57:84:ab:3e:
                    fc:3e:87:50:66:21:5c:2c:9f:9b:1f:ff:ec:b7:fd:
                    97:94:1a:03:0b:2d:e7:cc:9c:d9:ba:fa:8d:8f:68:
                    c1:5c:9f:a4:28:08:9a:e4:ef:d2:e5:89:12:05:6d:
                    48:06:a7:ea:2f:8e:72:82:91:71:bc:43:7d:af:0f:
                    4f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8D:D0:22:9C:A2:B9:58:C5:10:CE:F4:BB:0F:2F:78:6D:BC:6C:8C
            X509v3 Authority Key Identifier:
                keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0b:2e:b3:5d:73:31:ba:e2:c2:de:c4:61:8d:90:ad:d0:f8:
         2b:11:aa:20:50:29:c7:87:12:11:6e:17:9a:bc:01:8a:bf:0e:
         10:b2:2d:4a:ed:1a:41:90:86:75:eb:2c:9f:fe:58:e8:94:dd:
         26:45:c2:be:87:31:b9:43:a6:3e:c8:5d:5e:0c:d1:db:ec:67:
         fc:70:0e:b3:f2:2e:26:06:84:bc:fc:24:03:dd:09:29:bd:aa:
         ca:b0:00:51:2b:38:85:7b:7a:d6:67:c9:61:45:b8:2d:ab:1e:
         52:83:3a:2d:b6:e6:a4:89:2c:70:fd:f7:ac:0b:07:b2:ee:2c:
         fd:c4:fb:73:4d:cb:ea:aa:d3:95:df:a0:32:17:11:cb:79:2f:
         2e:4c:c8:be:9a:14:1e:d3:3a:de:e2:bd:2a:37:69:7a:9a:ec:
         a6:70:65:6f:95:d2:b5:40:6c:ee:6b:46:f2:cb:3d:0f:77:3e:
         c1:3f:de:48:fb:5e:78:ee:4a:21:d5:b6:05:d6:8b:14:ab:99:
         1e:4d:68:12:2e:ae:33:aa:8c:43:d2:f7:77:36:14:af:59:cf:
         04:14:67:04:d6:22:ce:ee:82:8d:38:f5:0b:20:67:87:a4:86:
         63:02:b4:a9:8e:c1:ae:50:2a:4c:1b:c7:75:3a:c2:e5:80:c0:
         6e:53:a7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:54 2024 by rpki-client on console-ams.rpki-client.org