Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
File:                     uNWz03nSEWLitSLEOAH7lgOYgkU.mft (raw, json)
Hash identifier:          edvCvQu1vissBxmd/IrmKBb1dC1XV/oZPVh1T7OTRIU=
Subject key identifier:   AF:80:AB:2C:A4:88:3E:D6:BE:F9:7E:76:97:70:5F:84:A2:5B:30:4D
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Certificate issuer:       /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial:       018F855B06BBFD0BF5AF384C8AE8B687A09A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
Manifest number:          08AC
Signing time:             Fri 17 May 2024 07:01:26 +0000
Manifest this update:     Fri 17 May 2024 07:01:26 +0000
Manifest next update:     Sat 18 May 2024 07:01:26 +0000
Files and hashes:         1: HAW0RAIP2Pn0we7vxTE0vnZYitc.roa (hash: ow/IQkjvTCoVlthzuAoHFSUJLQmjKMEzjfqH4Ru28tI=)
                          2: KoYY3ODyM1Q4r_Cj-jn3gpx73g8.roa (hash: XoIHk9saCv77K3bZ8FbGiUDxedRqQWKImsWhb7pSdqc=)
                          3: uNWz03nSEWLitSLEOAH7lgOYgkU.crl (hash: 4NBLujeG4N/J65gy0ypDalVUYn3rbSamsqlndMzXhNo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5b:06:bb:fd:0b:f5:af:38:4c:8a:e8:b6:87:a0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
        Validity
            Not Before: May 17 07:01:26 2024 GMT
            Not After : May 18 07:01:26 2024 GMT
        Subject: CN=af80ab2ca4883ed6bef97e7697705f84a25b304d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:d6:0b:18:a1:e4:0e:bf:fe:2e:d1:a1:bd:
                    94:2f:20:5f:a4:52:5e:d9:2c:96:b3:8f:b5:18:f1:
                    b2:0d:cf:5e:e0:dc:1c:13:6d:ad:09:1f:03:0f:29:
                    28:58:30:56:1d:75:a9:2d:ce:9c:43:2e:20:bf:a6:
                    50:e3:ae:51:24:78:3b:d1:a2:55:b6:27:c1:5b:a5:
                    fe:37:61:87:a5:47:9b:23:3d:3f:0a:6c:e5:15:4f:
                    69:f5:25:49:13:b9:78:23:18:3c:49:43:27:ce:d5:
                    f9:93:25:35:b5:b0:01:e8:71:7b:c4:71:3b:fa:25:
                    b1:77:49:22:c3:26:af:03:c7:8a:23:86:a4:50:aa:
                    41:8c:32:7e:6c:d3:9b:03:37:98:e3:0e:9a:b4:5b:
                    9c:c1:33:ed:5f:52:c6:83:bf:17:19:7e:8e:3d:9f:
                    d5:d1:47:7e:47:df:9e:e6:27:6d:9c:fb:20:39:3c:
                    16:95:58:a5:f1:b4:39:77:35:be:9e:0e:e7:73:2d:
                    6c:2b:f0:fc:1d:28:4c:2a:bf:77:69:cf:e9:87:95:
                    1a:94:ed:33:68:21:f9:f1:11:14:04:34:2e:6c:d0:
                    22:a2:17:0d:cd:ed:60:c9:f4:ee:bc:95:64:52:fd:
                    62:37:77:05:e0:c6:5d:6a:d7:e3:33:2b:63:be:8e:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:80:AB:2C:A4:88:3E:D6:BE:F9:7E:76:97:70:5F:84:A2:5B:30:4D
            X509v3 Authority Key Identifier:
                keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e9:f6:34:94:82:31:88:5f:07:06:c2:76:74:11:c6:06:f0:
         a7:7b:39:5d:f2:93:51:79:cb:39:9b:83:1c:68:b1:3e:c0:fa:
         01:1c:af:7c:43:1c:c6:2e:3f:77:22:31:6d:9b:fc:cd:c2:26:
         2b:35:fb:9b:4d:8d:79:bf:2f:c0:f7:f7:0f:5b:09:58:27:e3:
         a1:09:ca:d2:81:2c:55:9f:98:f4:da:b4:35:ea:b4:51:08:25:
         b9:af:42:02:3b:15:15:96:4d:3a:31:cb:3b:46:6c:30:39:2c:
         7a:e4:1c:73:df:a9:28:fb:84:de:d9:66:08:1e:c2:42:5b:d3:
         60:7d:93:d9:93:5d:fe:11:b3:ca:fd:ce:29:a2:d1:10:0a:74:
         1e:85:27:2c:22:9f:6b:2a:a4:55:bd:61:47:ba:1e:16:6a:aa:
         81:25:8d:ce:21:b7:6f:02:58:59:11:9c:55:71:b3:ca:9d:44:
         76:cb:60:ff:ac:0d:cd:bd:c3:20:c5:fa:cb:46:50:ab:05:9f:
         50:8a:14:a5:7c:f1:da:88:47:43:23:ba:25:49:38:66:4c:f3:
         53:e2:b3:76:26:96:ce:4e:35:bd:fd:6c:b0:18:5e:ec:15:1c:
         ff:8d:4d:68:eb:ce:c7:e8:e9:39:38:e5:f6:6b:2f:e2:c9:09:
         1a:9c:3d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:50:58 2024 by rpki-client on console-ams.rpki-client.org