Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File:                     8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier:          onNxNk0JtXdsG+1vvBFcz3Edd5rYQu7bCeL6QSivA2E=
Subject key identifier:   46:48:DB:19:2F:21:88:10:3B:4E:FB:5D:FC:8C:7A:9D:A6:E1:07:11
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer:       /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial:       01901F346978A8CB7CCE53ED38BDF8438A03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number:          0C51
Signing time:             Sun 16 Jun 2024 04:00:46 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:46 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:46 +0000
Files and hashes:         1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: 7IRVJhP+LTNdVlX+1adImEN/3mf7EyjrG03WBRO1gDQ=)
                          2: kUwpmhOpEgt9WB4nu40z46v5yuE.roa (hash: tgy4qcO1AMqUlxSqckg69a65f/XUnBpU4SSYJ1MqFFs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:69:78:a8:cb:7c:ce:53:ed:38:bd:f8:43:8a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
        Validity
            Not Before: Jun 16 04:00:46 2024 GMT
            Not After : Jun 17 04:00:46 2024 GMT
        Subject: CN=4648db192f2188103b4efb5dfc8c7a9da6e10711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:84:70:ce:d5:c4:d1:a5:16:41:57:86:4f:81:
                    c3:8e:34:a0:7c:db:3c:3d:a4:37:c0:47:55:29:4e:
                    87:14:41:71:df:0b:71:0d:a0:39:c1:38:b7:c5:46:
                    30:5c:8f:4e:65:07:28:be:76:29:54:c4:40:5d:b2:
                    ef:51:76:33:e2:8a:04:4e:99:3d:06:5a:86:59:eb:
                    ae:4d:be:f4:06:fc:00:31:a2:27:ad:01:74:84:f8:
                    7c:f7:87:9d:74:ca:72:a7:c7:a7:38:ee:ee:17:ef:
                    f9:da:c8:66:e7:52:72:aa:57:ab:db:59:72:13:25:
                    8b:68:c9:be:65:dd:e0:29:dc:52:90:97:16:2d:8f:
                    ef:c8:c1:5d:ac:e0:9d:99:bb:0f:bf:88:b2:24:1b:
                    1b:e7:1d:8d:db:73:d2:43:d5:6f:63:6b:3b:f9:c4:
                    75:d3:70:c3:c5:0f:44:f7:7d:e8:91:a1:d6:e1:88:
                    4a:f1:1b:1f:f4:41:f9:55:c4:e6:19:85:7a:cb:c9:
                    37:b1:de:87:20:d9:bc:08:a8:09:25:c0:69:78:1f:
                    dd:08:f6:2d:08:44:41:4e:08:71:22:48:c6:0e:40:
                    38:e1:99:6a:fb:63:00:94:b8:3d:b7:94:1a:13:2f:
                    47:c6:9a:40:48:4b:73:92:83:3d:dd:13:02:6a:74:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:48:DB:19:2F:21:88:10:3B:4E:FB:5D:FC:8C:7A:9D:A6:E1:07:11
            X509v3 Authority Key Identifier:
                keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:2e:27:76:92:df:e2:99:8e:0b:54:d8:6f:7a:85:fe:18:4d:
         01:29:4e:e3:72:eb:a0:46:ec:2c:eb:cc:dd:e9:dd:5f:82:b6:
         1d:47:85:c8:b7:c4:72:6f:16:32:37:3d:7b:b1:66:7c:be:12:
         da:3e:57:0f:cb:31:eb:fe:24:5d:89:34:e2:41:80:ce:90:33:
         c5:a9:fe:45:00:03:e1:f5:ba:09:47:56:31:7c:4b:5e:99:68:
         09:e2:80:f3:2b:c7:94:02:60:43:c9:33:a6:af:68:6c:71:59:
         7b:e8:8e:15:2f:6e:0d:7c:19:a2:6a:06:fa:b2:4c:8c:a6:f9:
         29:5e:81:b7:85:53:62:66:bc:e3:dd:c1:8e:37:ca:e9:e5:bc:
         a7:10:7d:73:3b:14:a0:6f:74:ef:4d:c4:48:83:6a:20:a9:40:
         d6:24:b2:a1:fa:5c:94:65:41:c2:1a:b8:75:ff:9e:a1:e9:11:
         ee:e6:6a:26:72:3b:72:67:23:01:af:f8:ae:93:51:8c:57:3f:
         39:a3:6c:5c:5f:14:1d:1d:a7:c7:d8:3c:13:30:5c:a7:ea:48:
         dd:b0:88:72:74:4a:a3:64:7e:8c:db:8c:e5:ef:61:bd:d6:79:
         9c:2b:74:f2:3f:23:ac:ad:3f:76:f9:4d:61:9c:aa:9f:38:4e:
         50:d9:10:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:44:55 2024 by rpki-client on console-fra.rpki-client.org