Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
File:                     Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft (raw, json)
Hash identifier:          nXplDHp7oe0DoKsL2wscFqpPn7QCwCUiKQnRUzFIqKA=
Subject key identifier:   BB:6A:73:D5:E7:01:25:A8:84:96:BC:8C:90:4C:0A:10:84:7F:10:46
Authority key identifier: 52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04
Certificate issuer:       /CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104
Certificate serial:       0196DB8ABFA20237D8159344F2819317AA3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
Manifest number:          1540
Signing time:             Sat 17 May 2025 00:00:25 +0000
Manifest this update:     Sat 17 May 2025 00:00:25 +0000
Manifest next update:     Sun 18 May 2025 00:00:25 +0000
Files and hashes:         1: 9JadLiuorP5WBtAK4ahko9XzHjQ.roa (hash: qnkmqt5DjArPix3ByqvfUIsWSJTvM73SLxqKVoYiGls=)
                          2: Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl (hash: UTP4fLDtM9be+FOfrHDk212kJk/UzmnCHleipmCOzQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:db:8a:bf:a2:02:37:d8:15:93:44:f2:81:93:17:aa:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104
        Validity
            Not Before: May 17 00:00:25 2025 GMT
            Not After : May 18 00:00:25 2025 GMT
        Subject: CN=bb6a73d5e70125a88496bc8c904c0a10847f1046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:b6:3d:67:d5:c2:96:07:af:22:b8:cd:39:
                    b0:95:cd:53:4f:5b:0f:91:2a:4e:f3:3a:40:af:e8:
                    85:34:bb:01:fd:0c:fe:80:c6:14:5b:49:fd:3a:a0:
                    03:dd:cb:11:ed:bf:d2:af:0b:37:83:fc:ee:26:5e:
                    bd:7e:02:d6:8c:1e:c6:b9:67:6d:f9:b3:db:c6:29:
                    f8:d7:78:60:84:1b:d4:94:94:96:85:9a:ef:3b:81:
                    c2:b7:8c:ec:c0:88:c7:79:ab:c2:8b:9b:06:67:39:
                    c3:af:d4:83:8c:97:64:df:8c:21:65:f1:0f:85:06:
                    cd:90:4d:d3:73:16:d8:fb:c4:9a:74:c5:af:74:0a:
                    58:f3:73:40:20:76:48:25:a7:4d:aa:26:c6:49:1f:
                    c1:a3:ae:4f:52:ec:a7:21:a0:61:9e:72:5f:8d:fb:
                    cf:25:dc:c7:6c:26:84:45:39:16:d7:52:12:60:15:
                    2e:bb:1a:31:4f:16:43:2e:e6:98:5a:5d:8c:69:7c:
                    d5:a5:2d:3f:46:a5:eb:22:21:c6:cd:20:85:e9:28:
                    6e:c1:be:02:42:a9:22:d6:66:b5:5b:65:2a:48:d5:
                    86:ff:82:3f:f3:6d:97:c3:05:5f:92:c0:38:d4:51:
                    e6:21:f4:f9:44:fd:5f:04:92:b0:8b:73:bd:5c:bc:
                    f8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6A:73:D5:E7:01:25:A8:84:96:BC:8C:90:4C:0A:10:84:7F:10:46
            X509v3 Authority Key Identifier:
                keyid:52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d2:40:8f:cf:78:17:36:b6:91:fb:f2:b7:4c:02:ba:ec:1d:
         ee:53:cb:ff:2e:fa:b3:0e:46:66:71:e9:b6:de:e0:b7:8a:b5:
         71:00:1d:2c:51:25:d2:eb:97:64:c0:ba:e9:53:8e:90:ea:3f:
         3d:a1:5c:10:15:5c:71:26:46:17:76:a8:ee:e6:d6:b7:62:59:
         a4:7b:73:3a:d5:2a:71:28:30:14:81:80:79:54:1c:0c:07:2a:
         f1:8e:8b:ee:a7:65:30:e5:83:c6:e0:d4:1a:f0:fe:ec:e9:2c:
         aa:a2:fc:a4:ad:3e:04:20:c3:6a:77:3e:73:7b:27:38:ff:8b:
         82:27:11:51:72:b4:36:9a:fc:30:09:18:bb:c5:86:67:c0:a1:
         01:64:36:c5:c4:94:d6:1f:0e:5b:8f:8a:38:af:c1:f8:dd:fe:
         73:9a:6d:5e:12:9f:44:13:2d:da:14:78:2e:ce:dc:09:bc:59:
         08:44:49:d5:03:81:06:cc:cd:a2:2b:34:21:06:74:c1:a2:48:
         a0:59:d7:af:5e:36:87:70:6f:68:21:cf:e1:9c:3b:b0:af:8a:
         d4:30:ce:42:6b:c5:89:2b:ae:00:d1:e3:40:36:9f:b7:0c:51:
         34:f5:76:ec:b3:29:bb:d6:64:32:68:67:cf:e3:76:e7:9a:73:
         24:0e:ce:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:14:47 2025 by rpki-client