Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
File:                     UxUwA3N9ePci25oo4iBD412Nhx4.mft (raw, json)
Hash identifier:          14M58zRlVH2e3OJFMAkQtRH1gGxc8K8+hUQwdqZy9q4=
Subject key identifier:   70:D3:89:65:15:D3:E4:22:02:E3:EE:20:CE:68:AB:AF:E4:2C:CC:E5
Authority key identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
Certificate issuer:       /CN=53153003737d78f722db9a28e22043e35d8d871e
Certificate serial:       018F874ADA1A7AF60762D2A03221B1A0E07A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:03:00 +0000
Manifest this update:     Fri 17 May 2024 16:03:00 +0000
Manifest next update:     Sat 18 May 2024 16:03:00 +0000
Files and hashes:         1: UxUwA3N9ePci25oo4iBD412Nhx4.crl (hash: xqbuE/sKDsj6I29HCog2ra3MPSSyBH4hawxzcMVEl3U=)
                          2: u7FqIlCAINWxXXzpugEWtYcs7PM.roa (hash: pID3qvumI2k2tsC4pCbSQxo2PbKYj+c3yog3i1zTsDQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:da:1a:7a:f6:07:62:d2:a0:32:21:b1:a0:e0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53153003737d78f722db9a28e22043e35d8d871e
        Validity
            Not Before: May 17 16:03:00 2024 GMT
            Not After : May 18 16:03:00 2024 GMT
        Subject: CN=70d3896515d3e42202e3ee20ce68abafe42ccce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a1:a2:05:35:db:23:e8:aa:a6:50:e4:c6:b4:
                    d6:a6:74:5d:72:44:d2:f2:8d:7f:f3:5c:6e:41:0a:
                    67:67:cb:1e:ba:c7:9b:2d:00:e7:d5:f8:d4:e0:5f:
                    d2:be:f8:22:91:b6:94:60:f0:7f:79:88:68:1a:39:
                    91:d7:f2:68:31:97:17:44:61:52:77:50:1e:1f:45:
                    fc:f0:0c:e6:52:94:84:3f:28:e6:ed:1d:24:97:56:
                    0b:87:ee:cd:c7:d2:e9:28:ee:99:23:23:de:50:7e:
                    05:96:9d:08:65:e4:41:90:a1:70:4b:52:b7:9f:b6:
                    6d:80:01:e2:76:92:6f:8d:e9:95:a1:42:2f:c5:1f:
                    c2:c8:3d:3f:d6:ab:41:ac:c3:1d:2f:2b:75:d9:2f:
                    39:6b:f8:2e:19:cf:32:c0:42:d2:15:20:46:bb:da:
                    64:c8:5d:d7:6b:db:1b:e7:87:ec:de:3b:70:b0:e8:
                    88:f0:2f:49:07:9d:d0:80:68:b6:56:b8:e1:8a:42:
                    20:3b:f2:78:a6:f4:e1:f3:b3:95:e3:45:74:37:a3:
                    eb:9d:6a:ec:93:a3:e5:f9:66:3f:a1:fb:44:ae:70:
                    10:e8:8e:66:d8:10:3a:ba:b5:2b:2d:70:6c:16:0f:
                    e0:0a:12:35:fb:0b:40:c2:5a:3f:29:21:d1:61:dc:
                    40:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D3:89:65:15:D3:E4:22:02:E3:EE:20:CE:68:AB:AF:E4:2C:CC:E5
            X509v3 Authority Key Identifier:
                keyid:53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:a8:50:4d:61:6c:79:79:85:e1:60:f2:49:dd:00:35:5d:8a:
         ca:5f:f5:3d:d1:20:ac:58:7f:55:c1:04:2e:65:40:cf:04:55:
         92:9a:91:0e:74:86:1f:af:a6:14:d7:e4:79:6c:e8:03:16:ed:
         e2:66:4a:d7:07:3e:06:98:fc:9f:5b:e1:f9:c8:62:96:39:c4:
         69:6b:23:6d:b2:30:2a:bc:7a:4e:00:72:71:47:9d:ab:2f:00:
         a2:15:8a:ec:5b:e6:0a:89:9d:45:29:95:2d:e6:23:bd:db:9f:
         6e:39:21:ce:06:5c:f6:2d:81:d8:f0:53:5a:2a:bc:28:0f:db:
         ec:46:4e:5b:fd:9c:f3:69:1e:32:42:89:1a:bc:66:a4:ca:b3:
         17:38:4e:2f:27:f5:fa:90:1c:92:8b:b5:01:c1:9b:3c:57:d0:
         f3:90:3a:cb:fb:0c:77:72:bd:d9:cc:aa:fd:ba:f4:e2:ff:cc:
         c7:51:ad:78:e1:4e:03:ed:ed:a2:00:33:64:19:29:19:6b:3f:
         5c:9e:51:9c:fc:c9:75:c7:b0:a2:e3:b8:97:7f:a6:4a:d0:47:
         27:7a:ab:25:8c:ba:ad:1a:05:b5:63:d5:01:9c:2e:93:74:d6:
         be:98:6e:4f:d0:9d:63:77:c0:51:6b:e4:b8:99:92:04:31:1f:
         53:5b:6c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:58:33 2024 by rpki-client on console-ams.rpki-client.org