Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File:                     ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier:          kGmtiilRi2P0CJbELjh1YUA0jkzi6sZWcrawjrNMIqQ=
Subject key identifier:   AC:03:0F:93:AB:74:5B:42:1D:F3:BE:FD:0A:66:EB:9C:15:F8:26:10
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer:       /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial:       018F871158FA0C9EE9DC2E8EB7F790A3A2DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number:          053D
Signing time:             Fri 17 May 2024 15:00:11 +0000
Manifest this update:     Fri 17 May 2024 15:00:11 +0000
Manifest next update:     Sat 18 May 2024 15:00:11 +0000
Files and hashes:         1: QPCcgVd0TuwiCLQdDDUYjpm9gR8.roa (hash: 88ygav6yIv+VnVu9T1Qv+Gl86jFuakl9TbSKftzDTuU=)
                          2: n5SCxfBBOSbV-E3gpuGi1J5KtaU.roa (hash: dWbv1GG/jQzKpma9gu6kceYWhj/EHTcaQc0fgb99c/Q=)
                          3: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: Sci9wmlQ8pu2vripbQa6pQMuY+Poh15qN3GN0MnUwcE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 15:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:11:58:fa:0c:9e:e9:dc:2e:8e:b7:f7:90:a3:a2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
        Validity
            Not Before: May 17 15:00:11 2024 GMT
            Not After : May 18 15:00:11 2024 GMT
        Subject: CN=ac030f93ab745b421df3befd0a66eb9c15f82610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:63:ae:50:ec:cd:b1:a3:af:e2:64:01:64:
                    63:32:bd:a0:b3:2b:1f:f8:1f:b6:fa:76:e6:bc:66:
                    3b:73:ef:48:35:fe:7d:2a:de:4f:b4:a8:95:b9:fd:
                    69:c4:6a:70:a7:3e:dd:04:07:99:fd:5a:2d:c5:14:
                    37:51:fa:fc:e0:83:ec:6e:1e:13:4b:e8:71:0c:19:
                    88:95:1a:24:dd:0f:a4:a4:82:6a:17:a5:49:de:10:
                    34:fc:62:59:e2:56:9c:6d:52:a7:ab:32:c5:e7:08:
                    b1:85:4b:e5:c1:42:0b:0a:2c:bc:df:0d:71:a4:49:
                    58:25:eb:35:96:e5:36:35:36:b6:b5:31:0b:d0:7b:
                    bb:e5:4a:69:12:5f:0b:aa:20:a7:af:85:a7:5d:93:
                    f9:f2:57:ac:b7:00:e0:71:26:a3:54:c2:da:c6:e0:
                    36:a8:96:36:76:73:88:56:59:ae:38:b3:c5:17:4e:
                    bd:b8:db:9c:c6:44:6a:7c:6e:59:e6:61:1f:b0:4e:
                    00:af:ef:2b:89:7e:11:8e:c5:c7:a5:ae:8a:72:aa:
                    ef:a4:12:a1:8d:67:c1:40:91:de:3f:bf:81:8c:06:
                    5f:25:ad:e1:95:2c:d1:42:bb:8f:ff:58:13:ae:9f:
                    ac:0d:ad:8f:39:05:27:e9:71:3e:33:54:8b:0c:8b:
                    8c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:03:0F:93:AB:74:5B:42:1D:F3:BE:FD:0A:66:EB:9C:15:F8:26:10
            X509v3 Authority Key Identifier:
                keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3c:85:6d:5a:d8:11:d2:49:80:29:21:97:7e:bb:f8:62:8d:
         94:27:f0:5f:e7:53:35:23:aa:64:8b:31:8f:ce:0b:94:1b:ad:
         07:c0:04:6b:2c:be:66:84:55:2e:76:26:ce:0e:ba:bd:0e:1a:
         df:08:ca:2c:49:1e:3f:16:92:61:45:40:61:a7:70:15:05:c4:
         35:42:62:f1:8b:09:1d:04:af:57:13:c5:47:d9:a3:15:f0:a3:
         3e:3b:0e:ee:c6:e0:d4:04:84:ee:17:cb:95:94:ab:ea:34:91:
         11:50:c8:17:9f:9d:3a:2f:af:d8:b0:1c:2e:15:af:19:f6:ac:
         96:e0:d9:1f:c9:ff:af:9e:8b:24:51:e8:a2:f8:13:20:8e:7a:
         a8:d8:9d:b2:a5:a1:c8:e1:8a:a9:c0:11:63:d0:09:5d:c5:ce:
         7d:90:ca:bb:9c:3c:a8:36:e5:e9:1c:cb:8f:c7:08:ea:5e:fa:
         0b:db:7f:f4:59:3c:70:06:3c:bd:57:ad:7b:6b:f4:54:30:dc:
         4e:b8:3e:bf:3b:94:6f:20:e0:fd:82:55:70:0e:86:da:92:b0:
         86:9f:fd:79:0e:1a:c9:a9:66:67:b9:59:96:b3:e3:30:53:8d:
         bf:33:59:1c:37:50:03:ac:84:e6:1b:48:75:de:b0:f4:56:7c:
         c9:67:2c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:14:23 2024 by rpki-client on console-fra.rpki-client.org