Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File:                     u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier:          2sZ0FN4Cb9v+9wZ8l24O/HvGWDnUUVIdVoSSQ//qgPE=
Subject key identifier:   C6:4B:B5:F9:31:66:24:AF:B6:32:D3:31:FE:5C:DA:4E:A3:36:2D:B4
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer:       /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial:       018F836BCF08665DD0175F4BACE7DAB9B952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number:          033C
Signing time:             Thu 16 May 2024 22:00:31 +0000
Manifest this update:     Thu 16 May 2024 22:00:31 +0000
Manifest next update:     Fri 17 May 2024 22:00:31 +0000
Files and hashes:         1: nrcGyBhyC8BxDbQEM0wlhv4Aswg.roa (hash: CP+K5yhvWwPwGK3G9rwzsnkq7YTP4yYD67qmsSLS6h0=)
                          2: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: wKR8TWoa18vVzEfA0D4eiN+eFiKXdtGrqADGX51VkZQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 22:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6b:cf:08:66:5d:d0:17:5f:4b:ac:e7:da:b9:b9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
        Validity
            Not Before: May 16 22:00:31 2024 GMT
            Not After : May 17 22:00:31 2024 GMT
        Subject: CN=c64bb5f9316624afb632d331fe5cda4ea3362db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:e9:e4:8f:fe:0a:97:a8:88:09:32:e6:de:
                    af:ef:59:99:89:86:5d:55:51:cc:c0:2d:6a:b1:6a:
                    e9:58:7e:b1:fa:ac:dc:25:a1:76:55:d2:d8:f1:cb:
                    48:78:3f:4b:5a:0c:f8:93:9b:22:4b:11:c3:74:30:
                    f6:0f:b1:0f:f4:5e:b7:70:c5:fd:5a:8d:ec:33:37:
                    50:db:fe:87:09:b1:b8:a7:c5:73:9e:6d:71:28:93:
                    32:c2:64:b1:71:1e:7b:8f:7a:66:62:5c:b0:c2:35:
                    71:a6:aa:99:60:1d:66:c8:25:df:ea:47:aa:92:f8:
                    58:83:fd:2e:01:e9:d2:63:4d:59:67:ea:bd:2b:ce:
                    e7:1b:a3:2f:d5:1b:e9:43:61:a4:2f:47:ea:d7:6e:
                    70:9f:f8:c0:96:43:c6:61:70:72:23:31:f4:1e:eb:
                    21:06:00:75:74:51:48:cf:82:2c:c7:fe:4a:ac:64:
                    99:82:da:47:ec:44:a4:65:b4:2e:8a:62:5c:8b:16:
                    99:95:7d:bd:f2:b4:84:5a:8c:1a:2d:fd:03:c1:3f:
                    6d:9d:32:d2:3b:4a:1a:e4:8f:9e:2e:40:fc:aa:30:
                    99:7e:31:3e:a8:8c:dc:e3:7e:f3:af:1a:92:1f:4a:
                    4d:de:38:ee:e9:8c:c9:4f:da:23:08:07:1f:0c:7f:
                    bc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4B:B5:F9:31:66:24:AF:B6:32:D3:31:FE:5C:DA:4E:A3:36:2D:B4
            X509v3 Authority Key Identifier:
                keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:4b:38:6e:49:d8:34:f4:52:89:ed:ea:df:b6:42:c9:96:44:
         ee:65:3e:f2:0d:4e:2f:ac:49:b1:d5:0f:d3:af:5e:b1:70:92:
         e7:5d:37:be:8c:ab:23:99:6e:9c:9a:8f:04:5e:6b:a0:a5:5b:
         55:b9:dd:5c:8c:6e:1b:9a:2e:a2:d4:63:e6:8a:2c:30:98:47:
         f4:e3:d3:e0:1a:de:ae:0c:37:79:1f:1e:7b:e0:ed:ae:9c:b0:
         27:be:9d:8e:5c:1a:c3:ee:01:00:49:30:3b:c3:e5:46:ce:01:
         4c:ca:d0:0e:a2:8a:92:95:4f:de:12:cc:04:0c:5f:ce:7c:79:
         9b:2c:35:95:08:76:40:05:ed:11:10:03:27:19:4a:74:b3:65:
         29:3d:22:fa:06:d1:8d:c9:03:77:17:7e:ca:bc:2a:4e:58:fd:
         ee:3d:28:93:7d:23:20:e5:e7:89:36:47:5e:08:9c:4f:76:35:
         2b:8c:62:aa:3b:66:9e:23:10:84:27:ee:84:37:63:71:b5:30:
         0c:92:2f:87:21:59:e7:a5:1f:a3:56:77:83:7c:9d:61:89:d2:
         6b:f5:65:2a:be:78:db:a0:b4:59:b0:a8:49:a0:c9:29:ef:4c:
         c3:18:ce:6d:7c:45:9b:20:e4:39:e6:a4:c9:f4:6f:0a:13:81:
         ec:85:4c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:48:32 2024 by rpki-client on console-ams.rpki-client.org