Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
File:                     uPrah6dvKfguJaMXnno4zwxrAwA.mft (raw, json)
Hash identifier:          WIeU1ZrdzmIVhxdNJWDWYxxUKGHLev0T5opAm2lhx7E=
Subject key identifier:   98:29:55:24:FA:75:4F:D9:62:4E:A1:62:58:64:7F:EF:A7:00:37:55
Authority key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
Certificate issuer:       /CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Certificate serial:       018F87B672C22992A73711770820FFAEEB40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
Manifest number:          1146
Signing time:             Fri 17 May 2024 18:00:32 +0000
Manifest this update:     Fri 17 May 2024 18:00:32 +0000
Manifest next update:     Sat 18 May 2024 18:00:32 +0000
Files and hashes:         1: uPrah6dvKfguJaMXnno4zwxrAwA.crl (hash: WKWwXmZwoUV+CNoyrFsCWnk8/D2Wu8nDD0zTWQZhyiU=)
                          2: ysz3YgjIEZM8fKVdry7QzMwNpzI.roa (hash: se2lJ2SKiakOXOJEGAvWw9rRP13DyweFM9UGug5+jGM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:72:c2:29:92:a7:37:11:77:08:20:ff:ae:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
        Validity
            Not Before: May 17 18:00:32 2024 GMT
            Not After : May 18 18:00:32 2024 GMT
        Subject: CN=98295524fa754fd9624ea16258647fefa7003755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a8:83:13:06:1e:1a:33:14:83:f5:a8:f9:2c:
                    08:10:2e:2b:bd:50:a2:59:fa:3b:7e:38:23:71:3d:
                    ae:ec:6f:a0:6c:15:2b:f0:45:d6:9d:6e:d6:30:53:
                    22:5f:33:2a:26:91:4a:a5:77:c9:39:fd:e8:3e:31:
                    bb:c0:a0:41:8f:0e:1e:ec:cf:9f:43:67:8a:66:11:
                    37:c4:c6:a6:0c:28:fd:51:b4:ad:92:07:12:b6:cc:
                    a2:0b:fd:df:ae:de:67:7c:bc:03:fe:20:f6:5a:89:
                    89:18:67:14:bb:59:02:93:41:1f:09:f3:37:d4:c7:
                    be:d2:ca:10:16:16:b3:f1:bd:95:80:af:f1:3d:cf:
                    ac:75:b1:80:34:75:32:1b:98:0d:15:a1:18:8b:cd:
                    86:d5:00:1e:f5:c0:6b:ce:a3:a2:bf:1d:b5:60:ce:
                    13:aa:8e:d9:43:8b:b7:2c:d9:bc:9d:5f:6b:f6:02:
                    80:73:53:50:85:8e:fe:b7:f2:46:7a:c8:6b:4c:36:
                    af:17:f9:41:29:04:78:84:4e:d0:32:74:89:80:3f:
                    86:4b:16:ff:52:63:3d:f9:3c:e5:53:2b:95:ad:a5:
                    e0:0f:47:04:33:fd:f8:14:a0:e6:df:0b:77:78:0c:
                    3e:fd:5e:c7:38:ae:ba:63:f0:8f:f7:e8:7c:2a:6d:
                    de:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:29:55:24:FA:75:4F:D9:62:4E:A1:62:58:64:7F:EF:A7:00:37:55
            X509v3 Authority Key Identifier:
                keyid:B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:15:62:66:24:64:3b:fe:84:93:3e:69:b3:c6:73:a2:95:f8:
         1e:ec:80:d1:12:ff:71:2f:3d:55:ed:b4:b6:53:d2:ae:6b:fd:
         64:16:0e:b0:e0:b9:88:f1:d4:fd:91:07:bb:11:8b:63:6b:85:
         00:88:80:4e:a9:44:e0:07:07:d8:4c:e2:09:7c:05:49:80:0d:
         80:b7:73:39:83:6d:1f:55:88:a0:66:81:82:39:0b:09:80:5e:
         9b:24:bb:40:65:2a:b8:bd:4c:52:f4:de:c0:79:86:2a:d8:01:
         a2:09:3f:23:8d:b1:b3:b0:58:36:0b:03:86:43:de:6f:60:ed:
         4f:5c:fd:94:07:9a:f5:38:99:1f:3b:f7:05:56:d4:05:da:c1:
         81:78:a7:21:b8:5e:c8:76:a9:4d:de:55:df:e2:e3:bd:b7:7b:
         51:db:07:ab:e5:f5:5f:4b:b4:3f:3b:a0:c4:0e:4b:b4:63:35:
         f7:dc:e1:7a:77:4d:f4:c8:1c:38:6f:aa:ce:28:54:a8:c9:28:
         79:d5:f8:ca:0b:d3:17:c0:81:18:79:22:63:18:b4:af:01:95:
         3d:2e:38:68:e0:c9:14:01:41:8c:53:4a:4e:c6:49:20:e3:48:
         19:86:7c:a8:db:62:55:94:9e:4c:2f:9e:ca:38:84:70:8d:6e:
         7d:e0:e0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:21:04 2024 by rpki-client on console-fra.rpki-client.org