Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
File:                     UqqgphiMl6p0LMeG47cLyQnKxEw.mft (raw, json)
Hash identifier:          SuaIHmBhSEFWC6d4qhxFFskKvgOG1BbOgmDMpXRiJFI=
Subject key identifier:   17:DA:F0:17:6E:F2:DD:C5:58:FD:1C:71:59:DF:99:4A:7F:6E:9E:BA
Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
Certificate issuer:       /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Certificate serial:       01901E9025A297F23275630190909A002CA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 01:01:21 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:21 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:21 +0000
Files and hashes:         1: UqqgphiMl6p0LMeG47cLyQnKxEw.crl (hash: Zi8EX5Vstt5N+0icHuaQJQgimyP7GEaPjke3E2l1VYs=)
                          2: UxHdWL-biheDjgMdrf2tOKJ4kZE.roa (hash: T0gdK1t6RC+0KtuY9W0wjNa4DzYoLmRA6EZGcEjDE9w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:25:a2:97:f2:32:75:63:01:90:90:9a:00:2c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
        Validity
            Not Before: Jun 16 01:01:21 2024 GMT
            Not After : Jun 17 01:01:21 2024 GMT
        Subject: CN=17daf0176ef2ddc558fd1c7159df994a7f6e9eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:63:95:d0:96:a1:b2:a6:14:52:39:93:2c:19:
                    4d:c0:c5:13:81:09:19:13:20:05:a4:ea:73:e7:41:
                    64:f8:94:a6:65:1d:9e:4a:93:d7:c9:2a:32:ad:10:
                    0b:1f:78:8d:fe:0b:35:0f:0c:af:0f:de:4a:a0:e1:
                    87:2a:35:3d:f6:42:71:5c:c6:aa:f7:3a:2d:23:03:
                    1f:38:15:30:87:51:a4:31:f3:ba:dd:bd:4e:57:29:
                    9c:29:91:31:ab:d9:57:c5:57:91:e0:1e:ed:5d:e0:
                    2a:86:15:c9:c6:d2:dd:17:86:9c:16:5f:90:21:9a:
                    c9:03:b4:4c:a5:3f:ed:eb:cf:ab:84:f3:cc:6b:aa:
                    45:a7:d2:1f:5d:c2:13:71:62:1e:62:66:5e:6a:8c:
                    8e:65:43:a7:5c:5e:13:ac:4b:20:14:12:83:a5:9e:
                    c3:29:84:ea:7d:31:d3:c3:1d:86:18:a3:16:2a:77:
                    40:7f:2d:cd:59:b3:92:58:f2:a3:cb:d0:4a:bb:c4:
                    07:a4:de:80:90:04:60:33:66:89:8b:a8:4e:2d:05:
                    0d:2e:05:b8:e8:46:e5:c3:87:ab:5b:31:86:f2:5d:
                    35:01:b9:ab:39:e7:0f:89:db:a2:fb:ac:04:78:84:
                    d9:ac:39:7d:6f:c1:19:a0:6c:e0:1f:01:fc:31:51:
                    67:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DA:F0:17:6E:F2:DD:C5:58:FD:1C:71:59:DF:99:4A:7F:6E:9E:BA
            X509v3 Authority Key Identifier:
                keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f6:5c:21:32:98:29:cc:ef:7d:21:cc:66:63:37:45:7e:40:
         b9:45:41:85:4f:9c:c8:91:24:74:3f:28:1d:c0:a5:4d:44:32:
         93:d8:84:da:a8:fc:74:41:05:7c:72:71:1c:ac:f9:40:6d:01:
         4b:0e:7c:0a:eb:90:93:97:03:47:22:e6:bc:65:8e:cc:8f:2e:
         89:79:55:55:61:fe:1f:97:c6:40:6c:f0:33:df:58:b6:77:d2:
         c8:73:50:15:c2:95:57:3e:c3:83:07:28:c7:41:7f:99:e3:96:
         45:a8:a4:00:8e:17:8f:ab:5b:a9:8d:00:ca:cd:6c:00:91:ea:
         af:fe:67:0f:e5:57:f5:ae:e1:22:9c:fb:a1:a7:2c:97:1d:24:
         26:6f:6a:00:13:2b:93:cc:e8:bf:15:a4:8b:27:b9:5e:d2:2f:
         82:5f:aa:a2:68:17:c2:39:5a:86:06:f8:25:68:66:35:a2:01:
         d5:33:24:58:aa:e3:12:a0:d3:44:e2:58:59:40:e9:25:30:0f:
         68:2d:df:a9:e3:ab:bf:66:5e:3c:ea:9d:0c:ec:1f:d6:fe:6a:
         31:dd:9e:06:e4:2d:99:fd:f9:80:aa:8a:0a:3d:31:9b:ee:20:
         34:f2:e8:d6:72:8c:3f:bb:cf:5a:13:7d:f5:e7:2a:7a:ed:85:
         62:22:e5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:34:58 2024 by rpki-client on console-ams.rpki-client.org