Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
File:                     UfIEU4aWnRHHQcO1ReAqAMElL3E.mft (raw, json)
Hash identifier:          6Wind0iEDc+kC2G57LHmOXMZm1UwzwV7vk/7L40ikd0=
Subject key identifier:   F2:8D:91:D7:B3:2B:F7:F4:94:1F:A8:C8:0B:D1:7E:56:3E:7D:5B:D3
Authority key identifier: 51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71
Certificate issuer:       /CN=51f2045386969d11c741c3b545e02a00c1252f71
Certificate serial:       018F866CD226C4438FFE6B2DC3627CD70D0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
Manifest number:          085A
Signing time:             Fri 17 May 2024 12:00:29 +0000
Manifest this update:     Fri 17 May 2024 12:00:29 +0000
Manifest next update:     Sat 18 May 2024 12:00:29 +0000
Files and hashes:         1: 1d9xdX-6LwP8SUo_Tb1sycd8X1g.roa (hash: VVRc5jiDNY31p9kfN3OfNGOpIo4fAqLyQ1tYMqI66cA=)
                          2: UfIEU4aWnRHHQcO1ReAqAMElL3E.crl (hash: 2rZNFJ2JO0NDinLXCk9pLup4RBNv0umluejVUuYu+HU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:d2:26:c4:43:8f:fe:6b:2d:c3:62:7c:d7:0d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f2045386969d11c741c3b545e02a00c1252f71
        Validity
            Not Before: May 17 12:00:29 2024 GMT
            Not After : May 18 12:00:29 2024 GMT
        Subject: CN=f28d91d7b32bf7f4941fa8c80bd17e563e7d5bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:f6:f5:a4:a6:ee:96:ec:20:be:4a:1e:d3:
                    87:73:0d:04:18:be:cb:0e:15:4a:7a:2e:be:a8:df:
                    08:f3:46:f5:11:3e:03:87:6f:2e:6b:e2:8b:4e:54:
                    a1:ed:f9:ba:96:e4:2d:2e:4b:48:3b:11:f2:f1:7f:
                    8f:53:cb:75:50:c2:1d:41:61:6f:fc:7a:cf:f7:9b:
                    12:af:51:a6:ff:ad:77:3f:2e:02:e3:b8:d2:e2:79:
                    ae:28:9f:c4:18:d9:80:6c:ca:f2:93:f9:cd:60:29:
                    ed:3d:ac:d4:27:f6:a4:cc:a4:b5:28:ae:62:3b:ad:
                    68:ef:e5:53:a9:b9:6c:f7:bf:ee:05:16:9e:19:79:
                    ac:a9:8e:a3:7f:aa:a7:bb:a2:a6:6c:29:ae:c3:94:
                    1c:66:8b:88:df:e3:63:10:57:c3:27:05:99:be:b4:
                    aa:c1:b1:96:ad:b7:f0:2a:e0:76:c5:12:a3:83:2d:
                    a3:17:08:62:28:a3:cb:0e:cd:39:ad:49:93:3a:71:
                    ba:53:cd:f0:0d:88:50:50:a6:47:59:12:97:38:90:
                    9b:05:16:56:79:d2:cf:26:a8:91:59:8f:69:ef:09:
                    00:48:bf:7f:85:af:57:2c:44:3a:b2:54:d6:a4:56:
                    c9:63:d0:9c:34:79:5d:e5:2c:f3:53:54:d7:37:44:
                    c3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8D:91:D7:B3:2B:F7:F4:94:1F:A8:C8:0B:D1:7E:56:3E:7D:5B:D3
            X509v3 Authority Key Identifier:
                keyid:51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c7:99:b5:08:64:2f:33:e8:5c:77:34:2b:dd:fb:f3:26:e5:
         72:f4:b1:5a:90:bd:3a:f7:09:63:37:bc:1b:e3:99:92:6a:41:
         21:44:b3:7a:46:a1:7d:ed:ce:3d:fc:92:8f:2c:5f:d1:1a:52:
         5a:f9:e3:38:fa:c0:e0:6b:d9:45:b6:2e:8a:d3:1f:7e:92:27:
         93:35:8c:65:5c:0c:42:78:be:0a:5f:1c:8b:55:e7:78:6e:6d:
         f7:35:d7:e3:0c:63:b5:9f:e7:fc:5b:05:9e:9d:89:37:8e:51:
         ff:1e:51:2a:f3:f6:96:9e:b2:69:1e:81:f7:c0:bf:65:33:cc:
         6d:0d:ff:4e:3d:3f:ad:0a:30:a5:79:c8:7f:c2:ce:d7:8a:f6:
         99:96:7f:99:d9:84:74:be:3f:bd:55:d3:d3:8a:0c:1a:dd:ae:
         5e:74:e2:2f:ed:57:ef:eb:cc:4e:59:4b:2d:30:7b:b4:eb:e6:
         34:46:a9:0e:ad:c6:a3:ef:1c:20:1e:0f:b2:42:ef:a2:b9:6c:
         39:6d:5f:21:a9:e8:9c:2d:d1:fb:f1:17:a7:3a:45:5f:6b:1e:
         f9:e6:fd:72:17:6f:48:b3:02:42:1a:4a:47:98:1c:4d:99:d6:
         4a:03:a4:64:7c:b7:6c:64:8a:53:2b:4d:d1:83:72:8b:03:38:
         a5:54:1e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:53:32 2024 by rpki-client on console-ams.rpki-client.org