Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
File:                     uMFf4eGcuByzRp_KpcYCOmxcRaM.mft (raw, json)
Hash identifier:          urZw23ibCsyPm8Lwov0LyB1gMlNQXYnwnKBTREHUyqY=
Subject key identifier:   0D:EB:2E:58:DA:7D:37:E7:62:CE:B9:C6:DC:AC:0D:42:83:02:F4:DC
Authority key identifier: B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3
Certificate issuer:       /CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
Certificate serial:       018F8748ADEC6474C0F050B7293250BAFC91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
Manifest number:          0CFF
Signing time:             Fri 17 May 2024 16:00:38 +0000
Manifest this update:     Fri 17 May 2024 16:00:38 +0000
Manifest next update:     Sat 18 May 2024 16:00:38 +0000
Files and hashes:         1: AFLdMj-2hrAkGS51QGZMsNNUZi8.roa (hash: nXTomWeqXGL6NOEqQcSlOnijbyF0Km4Rz/aB4NHbSgw=)
                          2: uMFf4eGcuByzRp_KpcYCOmxcRaM.crl (hash: N/Y1dGWmpv2pptuiNQaaTWRWruzDOABObnXj0equ7Fc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:ad:ec:64:74:c0:f0:50:b7:29:32:50:ba:fc:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
        Validity
            Not Before: May 17 16:00:38 2024 GMT
            Not After : May 18 16:00:38 2024 GMT
        Subject: CN=0deb2e58da7d37e762ceb9c6dcac0d428302f4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:a0:63:f4:7c:d6:0e:7e:f1:bf:c6:5b:3f:
                    59:85:9e:55:cf:63:99:6f:cb:8e:6b:52:b2:d5:12:
                    28:61:56:24:91:69:c2:da:c1:18:f9:50:26:37:b2:
                    5b:03:1d:21:29:3f:36:94:52:08:c3:d1:0a:02:c9:
                    80:3f:08:80:bb:d4:39:17:a2:7c:25:88:61:c6:9f:
                    03:32:2e:f9:f3:21:5e:04:de:cf:f0:58:f6:4d:06:
                    86:2c:53:fd:86:79:67:bb:da:a3:70:69:d5:22:e4:
                    98:e6:82:95:9e:26:48:1f:f3:e3:d4:b7:d7:ed:60:
                    5e:d5:19:3e:ea:21:e5:ba:1e:36:c0:c0:cf:80:3e:
                    04:1f:71:ab:87:0d:50:ef:43:98:52:a5:e0:ca:d4:
                    be:a9:cf:d5:c5:62:4b:2c:ad:a0:38:e7:0c:ed:8b:
                    8f:05:be:0e:de:40:94:32:04:7f:6f:05:08:d6:d2:
                    e5:f7:18:b1:2d:0f:9d:10:65:bd:fc:c6:62:10:9d:
                    f1:4b:e4:64:15:83:cb:37:b1:78:f2:05:a3:a7:65:
                    b9:be:d3:14:09:e0:24:66:47:2b:5e:1b:81:77:03:
                    1d:93:54:b9:80:a3:93:fe:7e:d0:00:9e:82:60:fc:
                    ab:e9:f3:f9:1c:43:50:63:12:85:bd:4c:45:33:f7:
                    dc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EB:2E:58:DA:7D:37:E7:62:CE:B9:C6:DC:AC:0D:42:83:02:F4:DC
            X509v3 Authority Key Identifier:
                keyid:B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:78:07:5b:3f:3b:87:cf:2e:41:06:ae:5b:0a:c3:44:b9:1e:
         76:ee:82:0e:ae:7d:b4:fa:34:7d:61:ce:92:ab:ee:a0:bd:6e:
         df:a6:83:fe:af:22:0e:8d:f2:61:0f:d0:ff:5f:8f:73:6d:44:
         dd:e8:dc:ee:ca:31:e4:4c:19:14:a4:c8:10:41:cb:d9:fe:c7:
         5f:3c:1b:44:21:22:26:f9:47:f0:36:b5:16:aa:50:a0:0d:02:
         36:b2:4f:64:b6:0b:6b:11:80:e5:8c:bb:24:ce:8f:c1:5d:31:
         86:4e:9f:4d:f3:c8:aa:88:50:81:be:53:d9:3b:32:b5:04:95:
         f3:bd:06:fe:32:37:20:fc:fa:e6:cd:6e:e2:fb:98:ea:b5:27:
         36:7e:2f:4a:ef:3b:7f:27:fd:16:c1:36:d1:1c:a3:6a:7a:59:
         6d:10:bc:ef:7b:16:cf:68:88:f0:2b:83:65:7f:d9:43:3b:c7:
         f5:d8:cb:17:f3:ba:80:b7:4f:5d:08:9c:08:2a:a1:c5:78:8d:
         8f:79:52:e6:62:51:26:1d:77:8b:f9:1b:65:2f:6d:ea:51:7d:
         7f:a1:6c:e8:5a:19:75:b0:1d:05:df:fa:ab:4f:02:eb:82:7c:
         a2:cd:cd:b7:4b:ea:e0:86:d0:24:ea:0f:62:d8:de:b6:96:e1:
         c3:50:34:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:37:19 2024 by rpki-client on console-fra.rpki-client.org