Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
File:                     ug-GS6D6IE3pOsWqhPcotiIMb3w.mft (raw, json)
Hash identifier:          tQkflwuVCKEd93959ql64rM6F01zCnb+DBvE+2YjKZo=
Subject key identifier:   C6:FA:82:73:10:3A:AB:C2:2B:F0:1D:4B:95:A5:F8:74:9E:8A:D7:45
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Certificate issuer:       /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial:       01901BFC8E171DB7F2D93442B1DF4516D3BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
Manifest number:          085C
Signing time:             Sat 15 Jun 2024 13:00:54 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:54 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:54 +0000
Files and hashes:         1: cIlDDAuEbPAnRn4Qtr2LOISF6wc.roa (hash: hmoIVvqkMOYFP3SeUd5ogS67VZNE35qduPA2zqKLkGE=)
                          2: ug-GS6D6IE3pOsWqhPcotiIMb3w.crl (hash: eF8V1s3bMem6UF4IqFj/RJ0vofWARIaQwYW57EqEnnw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:8e:17:1d:b7:f2:d9:34:42:b1:df:45:16:d3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
        Validity
            Not Before: Jun 15 13:00:54 2024 GMT
            Not After : Jun 16 13:00:54 2024 GMT
        Subject: CN=c6fa8273103aabc22bf01d4b95a5f8749e8ad745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6e:fd:23:15:12:07:75:82:42:e4:e0:11:89:
                    d8:c9:d2:0b:e6:14:43:bd:1e:20:c6:d8:c7:55:f0:
                    83:74:e4:d9:20:13:40:01:13:b2:3b:b3:ad:10:aa:
                    39:0f:8c:a8:1e:9c:9c:4b:56:3b:30:dd:61:c0:1b:
                    4d:33:f6:c6:aa:63:86:2e:1d:82:c2:57:74:29:28:
                    cb:c5:ae:27:05:8e:18:a9:f7:97:e0:60:68:46:6f:
                    aa:6d:90:3c:25:27:c3:e9:c5:40:7c:89:31:86:7d:
                    e5:37:e2:05:af:6c:78:f9:0d:ce:97:2f:b5:bc:b3:
                    2a:bd:06:78:d0:61:a2:b4:4c:9e:2d:4b:3d:8f:8c:
                    86:67:68:0f:b9:fa:9d:ea:cf:4b:ae:22:11:fa:28:
                    1f:9f:90:ad:be:b7:45:43:37:12:97:66:6f:8e:9b:
                    01:da:65:89:94:84:38:59:9d:80:46:16:bd:a5:1f:
                    19:d7:f9:7a:7e:41:7a:0f:71:8f:c4:8e:b9:24:a7:
                    97:17:0c:6b:c8:a0:93:55:c0:5d:6a:52:f4:5e:df:
                    97:24:ce:73:ca:1c:43:f3:2e:2e:e5:7b:d6:52:19:
                    22:c6:7b:2f:50:c4:ea:4d:fc:d1:62:93:91:d3:50:
                    d4:9e:58:d9:89:5e:cb:ce:55:21:df:9e:7b:82:87:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FA:82:73:10:3A:AB:C2:2B:F0:1D:4B:95:A5:F8:74:9E:8A:D7:45
            X509v3 Authority Key Identifier:
                keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:f5:92:f0:5b:c7:60:13:5d:82:bd:81:81:40:7a:bb:29:4c:
         c9:4c:c9:fd:8f:50:b1:66:66:ae:bc:d5:ae:7d:64:d7:ee:c4:
         98:c8:9f:f5:9a:f3:4c:33:f8:bd:7e:6a:82:18:3d:3b:31:af:
         72:9b:db:5a:3e:9b:04:46:58:95:8a:94:57:cd:f4:c2:a7:46:
         72:19:73:63:ab:8c:30:db:1f:a3:e2:b7:29:3d:95:c1:24:07:
         14:dd:23:48:9d:9c:f7:44:90:6d:54:46:da:15:03:d5:f9:09:
         eb:96:8d:9a:35:9d:f0:2e:65:4c:aa:25:97:e6:d6:de:d4:1f:
         25:55:f8:b7:00:bd:b6:4a:e6:0b:5e:d2:9f:76:7a:ff:53:ce:
         11:c0:91:42:5b:a3:75:06:f4:df:27:14:7a:aa:cb:8e:97:d2:
         bf:94:8a:49:b0:f7:e6:47:00:66:e9:e0:92:7e:bb:52:20:ae:
         83:a8:e8:42:44:fd:4f:65:5c:e2:34:23:ce:0d:b8:fc:42:4a:
         9e:32:e7:11:5d:00:9b:72:1d:67:5b:f7:a6:d5:24:c5:06:46:
         3a:d6:9f:36:b9:91:a5:9e:dc:40:f8:c7:4d:6e:71:32:b6:c8:
         bb:25:f8:51:57:58:96:b3:08:e4:7c:4d:74:ab:13:88:40:a4:
         97:98:36:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----