Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
File:                     uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft (raw, json)
Hash identifier:          xEhwjaF+HtMF59ptsKeMGXPNi49buKeukF2MJHtiluo=
Subject key identifier:   A6:17:64:06:BD:A7:04:FB:22:8C:B3:17:AD:04:57:A2:AD:12:E6:5A
Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
Certificate issuer:       /CN=b84785791e07646f5cc58b15e86434cb9c24149d
Certificate serial:       0190351983949BB5990308E288017CF62FC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
Manifest number:          11D1
Signing time:             Thu 20 Jun 2024 10:03:02 +0000
Manifest this update:     Thu 20 Jun 2024 10:03:02 +0000
Manifest next update:     Fri 21 Jun 2024 10:03:02 +0000
Files and hashes:         1: 2W2-1G7kA0SeTe5m9enBg9hwdMU.roa (hash: MnT+/5dUfRe7NgpJMpC9+rQUU//ojsY2U1zHVAsivck=)
                          2: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl (hash: DBf4AgvGSKNpwra4fa1TZKaY0nnbvZoyFB0O7Uq0V54=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 10:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:35:19:83:94:9b:b5:99:03:08:e2:88:01:7c:f6:2f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d
        Validity
            Not Before: Jun 20 10:03:02 2024 GMT
            Not After : Jun 21 10:03:02 2024 GMT
        Subject: CN=a6176406bda704fb228cb317ad0457a2ad12e65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:21:4b:ca:f7:c0:fd:ec:ce:3a:fe:60:94:44:
                    07:09:d9:4f:48:4d:72:7e:24:92:fe:a0:ae:84:cf:
                    e1:5d:0b:49:d6:66:d6:6e:b6:91:d9:f5:e6:65:bc:
                    2b:d0:0b:c0:60:ba:9d:eb:1b:9e:1e:56:62:20:bc:
                    00:3f:c0:b2:21:84:cf:25:63:88:2b:8c:7d:2c:af:
                    29:6c:64:63:9b:b1:bd:3a:2e:fc:01:d0:b4:d2:cf:
                    9b:96:8f:36:94:b9:c6:46:de:6e:6a:79:41:31:49:
                    cf:e8:b2:48:3f:4e:5d:04:ce:b4:a4:1f:bc:0a:8b:
                    23:6d:78:ba:f4:4e:0e:d8:bd:0a:30:55:ed:b8:3c:
                    ab:c1:f9:67:fa:e7:a9:02:cb:17:41:f9:3e:9b:41:
                    fd:03:ba:4d:38:12:2f:46:3b:d5:b0:af:7b:a0:cb:
                    df:61:e4:08:8e:3e:ff:f5:c0:3d:ea:66:70:c7:a1:
                    63:cb:3e:68:47:8f:d3:d1:25:33:ea:dc:f8:d8:ca:
                    44:9e:6d:9d:4d:5f:1a:19:00:82:ad:b0:b1:4b:81:
                    83:92:b8:65:4e:d4:15:26:c4:d3:98:9e:f1:cd:eb:
                    ed:67:cd:1d:34:d1:b3:bc:6d:d0:05:76:d8:48:b8:
                    f4:ad:f5:65:eb:15:04:0d:c5:a0:1d:2e:04:68:a5:
                    00:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:17:64:06:BD:A7:04:FB:22:8C:B3:17:AD:04:57:A2:AD:12:E6:5A
            X509v3 Authority Key Identifier:
                keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:7f:f7:cb:8d:6a:41:a1:57:6e:ae:3b:f2:d5:82:20:2c:70:
         de:5b:71:3a:73:29:1a:fe:45:e6:f3:09:86:26:28:97:20:a4:
         89:93:30:69:1c:55:67:21:4b:7b:ac:37:f8:cd:03:3a:3c:e9:
         c5:92:05:21:e1:e0:2b:4f:65:d3:8b:01:fb:de:47:7a:2b:09:
         f1:4c:77:32:98:03:e5:9f:3c:bd:d6:df:9a:af:82:ea:06:fa:
         eb:8e:47:29:28:72:ad:03:81:32:40:44:07:d2:63:7b:61:4c:
         18:ca:37:ab:a6:c7:2a:41:c8:44:32:de:ae:96:25:56:30:ce:
         b2:58:23:f0:d2:9d:28:61:45:aa:f8:3f:9e:12:21:0f:64:d3:
         50:87:9a:e8:50:d3:1e:fe:0c:10:ba:ba:63:a8:87:0f:61:5e:
         9f:a4:77:96:04:00:53:7c:63:23:d2:c0:b3:2f:13:4e:2f:61:
         28:5b:a5:61:6b:28:39:88:aa:62:e5:bf:48:57:66:c8:a5:ba:
         a7:99:6a:89:1d:90:e2:46:b4:d7:52:56:91:a1:b9:c4:42:d9:
         ea:ff:76:5c:7e:5f:d3:1a:01:48:a5:b0:e0:4a:d5:43:4e:15:
         1e:c1:88:a8:4c:d3:cb:bd:64:04:b9:c0:40:fa:58:2b:91:0c:
         39:1b:2f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 13:26:07 2024 by rpki-client on console-fra.rpki-client.org