Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/UGF1T3aJFp9qFQZQlUcmcrorRYk.mft
File:                     UGF1T3aJFp9qFQZQlUcmcrorRYk.mft (raw, json)
Hash identifier:          JVCCiJM8jOwQPP2XllAvQAJH/oO1r9Kl1kqD6VgEv/c=
Subject key identifier:   CC:5D:3C:45:21:B7:49:E8:6C:47:36:92:E7:DE:DE:63:DF:64:84:A2
Authority key identifier: 50:61:75:4F:76:89:16:9F:6A:15:06:50:95:47:26:72:BA:2B:45:89
Certificate issuer:       /CN=5061754f7689169f6a15065095472672ba2b4589
Certificate serial:       018F87498B1AE8B13EE71D9DF34CBF900750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UGF1T3aJFp9qFQZQlUcmcrorRYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/UGF1T3aJFp9qFQZQlUcmcrorRYk.mft
Manifest number:          08EB
Signing time:             Fri 17 May 2024 16:01:34 +0000
Manifest this update:     Fri 17 May 2024 16:01:34 +0000
Manifest next update:     Sat 18 May 2024 16:01:34 +0000
Files and hashes:         1: Dm4V2AUXx_cChrIeXcWSewu0WiU.roa (hash: XNGeDtwmg/EVerEEd2+0Dxpjg/2V/SgJ6je+zgVlVcE=)
                          2: UGF1T3aJFp9qFQZQlUcmcrorRYk.crl (hash: 9vhEV+a7nuyBBuQOQCSNgO2rXjVotlNz2Kkba6Er/FY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/UGF1T3aJFp9qFQZQlUcmcrorRYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/UGF1T3aJFp9qFQZQlUcmcrorRYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UGF1T3aJFp9qFQZQlUcmcrorRYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:8b:1a:e8:b1:3e:e7:1d:9d:f3:4c:bf:90:07:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5061754f7689169f6a15065095472672ba2b4589
        Validity
            Not Before: May 17 16:01:34 2024 GMT
            Not After : May 18 16:01:34 2024 GMT
        Subject: CN=cc5d3c4521b749e86c473692e7dede63df6484a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:23:75:d0:e4:ee:50:20:49:01:fc:69:7d:
                    35:3e:3d:11:82:aa:07:47:93:bd:27:d4:10:de:7c:
                    4b:bc:07:09:12:b8:5c:a3:b0:31:79:37:d7:28:57:
                    99:bd:7f:5c:e9:e1:a6:a7:10:e5:3a:cd:9f:f0:97:
                    1c:be:0b:08:4b:51:58:e5:d1:5b:04:67:db:8a:92:
                    b3:ae:f0:f4:0a:b9:4e:7e:3c:90:a2:ba:e9:59:08:
                    52:91:56:a9:b7:91:f3:5e:8e:8b:2f:0f:ea:b7:9b:
                    0a:4f:74:43:ca:b0:b8:c7:9a:46:d8:b2:8e:0b:9c:
                    9b:e3:90:1a:d3:91:2b:7d:bb:d5:be:80:1a:7e:00:
                    38:62:fd:57:ea:f4:26:2a:42:37:d5:7c:54:06:c4:
                    a3:33:4a:bf:08:92:93:c4:30:f5:56:f6:12:0a:7e:
                    19:8c:6c:79:8c:05:67:ff:e1:1d:cc:38:c8:e5:bf:
                    fb:c3:03:63:2d:8f:7f:5f:69:65:4e:6b:76:64:2d:
                    18:fd:88:19:5a:27:51:cd:ea:c8:a6:ff:81:f2:a9:
                    fb:b0:ed:96:c1:d1:87:1b:a6:a7:39:f9:0f:ac:fd:
                    6b:54:0a:65:d8:69:ab:36:5b:b6:4f:7b:65:f2:78:
                    68:37:b2:5d:a8:52:18:62:02:f0:2d:d8:f1:9c:34:
                    b8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5D:3C:45:21:B7:49:E8:6C:47:36:92:E7:DE:DE:63:DF:64:84:A2
            X509v3 Authority Key Identifier:
                keyid:50:61:75:4F:76:89:16:9F:6A:15:06:50:95:47:26:72:BA:2B:45:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGF1T3aJFp9qFQZQlUcmcrorRYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/UGF1T3aJFp9qFQZQlUcmcrorRYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/UGF1T3aJFp9qFQZQlUcmcrorRYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:73:a0:20:56:f9:9e:d8:1b:a2:d3:b2:9c:1b:39:5c:bc:87:
         64:24:6b:c9:2d:33:2e:70:18:55:51:c5:5e:e6:25:66:90:b6:
         7a:c1:92:1e:89:b2:33:dd:0b:6e:94:6d:31:e0:4d:32:5b:20:
         55:d0:9d:fa:bf:5d:77:bf:36:78:25:59:39:ec:cb:35:6b:89:
         39:bc:6c:7c:0d:99:28:d3:8a:07:95:6e:96:84:62:bc:e4:8d:
         e6:6d:e8:7d:b8:cd:6f:c4:fa:83:48:ab:bd:2c:76:b9:3e:b7:
         af:07:ec:18:11:82:0b:fa:40:12:ca:bf:c7:80:10:22:ce:1b:
         54:b5:22:53:9d:cb:40:7d:94:65:d0:76:56:6f:62:73:77:77:
         b2:66:bd:08:40:70:ca:78:a5:ed:ab:57:56:0f:ad:3a:03:e6:
         24:dd:71:eb:1c:eb:f4:a1:dc:56:c1:6d:4e:b5:78:b2:0a:c7:
         f7:f3:92:1e:08:0e:a2:d1:04:e3:1b:75:86:76:40:0e:a8:2d:
         c1:9e:70:ba:cd:38:c6:a9:86:a4:63:4b:5a:01:0e:50:95:b9:
         b2:91:40:0a:0c:98:eb:9b:7f:fc:b1:6a:5e:af:5e:59:5a:33:
         5a:7e:cc:30:93:b6:e3:07:bf:49:19:ae:d9:d7:c6:86:0c:82:
         54:74:6d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:51:46 2024 by rpki-client on console-ams.rpki-client.org