Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
File:                     UztG46ndW36oqL_aL247rRVQkRM.mft (raw, json)
Hash identifier:          Mi8puEMem7UmIxdb3t6o+o6wheeaigEGs0wT+yjoWMs=
Subject key identifier:   C8:FB:74:BB:6A:23:17:82:B9:FF:63:6F:06:DE:37:B8:6A:52:92:69
Authority key identifier: 53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
Certificate issuer:       /CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Certificate serial:       018F88240E9EA341C2712E17C829BA884A35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 20:00:15 +0000
Manifest this update:     Fri 17 May 2024 20:00:15 +0000
Manifest next update:     Sat 18 May 2024 20:00:15 +0000
Files and hashes:         1: HDmdCgrKvYXHFV54sdJKfdP3x68.roa (hash: 8lCjmEIpGd4dgZkcbO5lbbYiNsS+qvyfzD9v8P+2s8M=)
                          2: UztG46ndW36oqL_aL247rRVQkRM.crl (hash: HukeI/RDBEKFSjTTvCKCnwExRESsAaCxTdzbj2jv/uY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:0e:9e:a3:41:c2:71:2e:17:c8:29:ba:88:4a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
        Validity
            Not Before: May 17 20:00:15 2024 GMT
            Not After : May 18 20:00:15 2024 GMT
        Subject: CN=c8fb74bb6a231782b9ff636f06de37b86a529269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:ab:c4:9c:a6:47:54:37:0d:50:ed:13:ec:
                    f7:aa:58:87:2f:31:00:bc:aa:cb:b0:21:13:32:93:
                    48:c4:72:54:a7:d8:95:79:7e:ce:15:3e:8b:ba:d6:
                    41:f8:01:be:81:f0:75:93:9a:74:31:e3:d1:00:70:
                    5b:a4:f1:19:08:eb:bc:7b:16:db:6e:96:f2:9c:f0:
                    01:fd:ff:2f:51:d9:3d:92:f6:8a:48:78:2b:5e:94:
                    0d:ab:84:72:9b:8d:99:c5:3d:c5:c1:bc:5c:f3:5f:
                    8b:12:e0:b5:3a:37:a9:7f:1d:78:c5:15:d6:5b:62:
                    14:09:53:41:85:6d:36:27:19:de:0c:7e:66:07:57:
                    ab:09:16:ba:53:5a:93:46:55:14:a8:d4:80:37:a4:
                    54:28:51:88:c2:0c:01:e7:9f:2c:23:1e:2d:4f:9b:
                    57:af:ff:0c:c3:0b:5a:73:25:22:f3:b5:21:38:d6:
                    cc:60:18:4b:37:d8:8f:59:c0:a5:f0:8e:ec:72:ad:
                    23:63:66:fa:67:f9:71:f3:44:a7:53:f1:3f:b0:61:
                    67:c2:68:af:3f:ae:13:e6:41:8b:cc:52:a3:10:17:
                    49:06:46:9f:ee:3a:65:92:f0:74:bf:2d:64:50:5c:
                    ec:56:01:d1:3d:54:fc:6a:15:1f:c9:ab:1b:51:e4:
                    78:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FB:74:BB:6A:23:17:82:B9:FF:63:6F:06:DE:37:B8:6A:52:92:69
            X509v3 Authority Key Identifier:
                keyid:53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ef:d0:97:6f:0b:38:f8:97:e5:cf:12:f1:01:0f:56:31:5d:
         61:72:fa:3a:5b:80:8d:6c:8c:cb:6a:ce:68:56:39:c3:c3:e3:
         ff:36:b5:b7:ca:9b:0d:fd:82:76:2a:cc:9e:df:c8:98:65:72:
         b1:76:1e:dc:9e:3f:8e:ad:6e:62:14:8a:b8:ab:a7:79:33:d0:
         28:11:16:0a:03:27:0d:38:b5:70:f6:12:55:a5:11:aa:fb:8d:
         c2:02:02:e6:7b:fa:34:c6:51:be:0f:ed:7e:0e:46:d7:df:4b:
         ff:a9:f6:95:53:ff:b0:b3:f9:08:77:4e:a9:ea:8e:0c:99:f3:
         d1:44:c9:25:1c:ac:0a:9c:01:ff:47:c4:41:31:3d:a1:0c:e4:
         58:3a:07:af:b6:50:81:e1:89:8a:1b:61:65:29:8b:66:52:d8:
         01:1e:e9:7a:df:dd:ca:fa:00:2f:48:a7:3a:51:40:c5:bd:c1:
         8c:b1:ac:bb:20:a8:bc:42:90:ac:df:51:38:e6:99:3b:64:a5:
         e9:77:3e:3c:d9:75:4b:44:74:a8:1c:9e:5f:49:38:3b:ef:cc:
         7c:64:d0:e2:6b:83:65:46:a4:07:3f:4c:3a:21:a7:cd:77:6d:
         fb:66:91:ba:ff:15:c3:15:34:6f:a8:b9:d2:46:12:0d:ec:79:
         b4:4e:cb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:02:58 2024 by rpki-client on console-fra.rpki-client.org