Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File:                     uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier:          SLghOmQ/ZAKPZGiSPwaLG6y3CBBdA7cRyKuBZzv1QSs=
Subject key identifier:   BE:5B:4A:3A:44:DE:FA:AA:3E:09:19:6E:E8:C3:E7:61:64:09:54:04
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer:       /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial:       018FB1C6DBC94D3C514B209E1AD9EBE71746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number:          1153
Signing time:             Sat 25 May 2024 22:02:30 +0000
Manifest this update:     Sat 25 May 2024 22:02:30 +0000
Manifest next update:     Sun 26 May 2024 22:02:30 +0000
Files and hashes:         1: 1-d_gyvHmnPUyUBO_YSUvaAfEitM.roa (hash: aWu8/HzBzy3a11vXQIflYSe8F+su3kZZHAJgkwJNEsg=)
                          2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: eUNwslVjYwGsFNOGEar03PXj8qwQ1n/gkZ9tJ4F9GHI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 18:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b1:c6:db:c9:4d:3c:51:4b:20:9e:1a:d9:eb:e7:17:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
        Validity
            Not Before: May 25 22:02:30 2024 GMT
            Not After : May 26 22:02:30 2024 GMT
        Subject: CN=be5b4a3a44defaaa3e09196ee8c3e76164095404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:4a:a0:ef:59:e5:64:56:a7:fb:73:d2:a6:
                    cb:56:d4:57:da:89:90:69:69:ad:8a:45:d6:8c:9d:
                    ec:79:55:b5:4f:2d:88:11:ce:c9:d3:95:81:98:87:
                    cd:27:2f:8e:5f:04:eb:07:35:50:e1:6b:b2:ef:3c:
                    4d:b0:7a:07:fd:cd:38:88:28:e7:19:da:e1:a8:c7:
                    9b:bf:14:53:41:a7:13:9f:39:59:27:10:96:75:67:
                    68:d1:fd:d7:24:11:34:3f:8f:e3:d8:e3:67:47:d0:
                    e4:bd:34:ae:88:0e:49:d8:3f:34:9b:0b:60:96:d9:
                    dd:65:45:0a:bd:29:99:fe:9a:43:bc:5f:33:d4:29:
                    e8:92:f3:b6:91:2b:1b:88:49:4e:7d:cc:e8:eb:00:
                    83:a5:46:df:d5:0b:fa:c7:01:ac:9f:f6:35:62:d2:
                    82:78:e4:b0:4d:31:db:fc:3e:af:66:d4:44:c9:75:
                    f4:f6:e9:c8:3d:49:e2:8e:7e:4c:fd:21:91:ee:38:
                    37:bf:0e:00:25:e8:e3:c6:4b:7a:7d:4c:b3:37:5e:
                    fa:62:17:e7:bc:f3:db:01:4d:aa:ef:2c:1e:83:0c:
                    84:91:90:9c:26:00:67:36:33:f4:1f:d6:84:ec:78:
                    13:bf:e9:bd:42:0e:46:f5:3c:cd:8a:2f:f3:d1:11:
                    a8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5B:4A:3A:44:DE:FA:AA:3E:09:19:6E:E8:C3:E7:61:64:09:54:04
            X509v3 Authority Key Identifier:
                keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:6d:79:19:06:92:1c:51:90:68:32:c7:94:1d:fb:dd:f1:a0:
         5b:63:0e:3a:64:76:42:e1:19:cb:a3:1a:cf:77:02:ea:0e:74:
         62:3c:d3:8f:91:f7:85:ab:e3:c8:48:5c:85:b0:59:44:47:82:
         df:06:7c:1c:82:13:a5:19:78:db:3e:85:34:6c:9a:7c:72:25:
         2e:e2:de:bb:01:85:18:87:08:16:e8:c7:15:89:aa:b7:7e:f4:
         72:de:fa:77:ad:98:05:e6:c3:7d:9b:45:6e:45:c3:07:8b:57:
         e9:58:d5:26:90:b6:87:5f:6c:95:46:aa:f7:ee:40:63:e2:f5:
         36:7a:59:5e:5b:9d:9e:a8:23:f0:59:88:a4:fb:cc:0b:1a:3c:
         b0:e2:95:45:18:e0:97:1e:06:ce:c9:39:dc:bb:bc:14:19:80:
         41:d6:45:1b:17:17:23:fa:70:12:3e:35:c7:1e:06:06:f4:2e:
         7f:eb:6c:32:0c:ed:d5:3a:be:f4:35:f1:39:14:2c:d1:80:d9:
         44:5c:a0:6f:42:f1:9f:aa:27:a3:df:4a:8f:fe:ad:5b:2e:41:
         5c:d8:81:49:f6:da:a5:37:1a:6e:4e:3d:28:ba:b3:b1:df:0e:
         ab:11:2c:b0:ae:83:ed:0d:f2:0c:30:aa:72:c9:64:86:10:06:
         75:3b:a0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 00:26:54 2024 by rpki-client on console-ams.rpki-client.org