Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
File:                     UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json)
Hash identifier:          L/GcuXQNRytm6wwzgJgyi9PuTWvjnDtoXkkDVzkQyiU=
Subject key identifier:   8A:73:07:C4:76:6A:15:06:5D:AA:F8:0D:96:C4:99:82:B1:9C:25:15
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Certificate issuer:       /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial:       019045D4A75A3FA47928A271D77F11D85FFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
Manifest number:          0EBE
Signing time:             Sun 23 Jun 2024 16:01:22 +0000
Manifest this update:     Sun 23 Jun 2024 16:01:22 +0000
Manifest next update:     Mon 24 Jun 2024 16:01:22 +0000
Files and hashes:         1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: u8n1sBDS2ak1+VSYoK5wZWvamD2RmWrPPiM30H1lLHw=)
                          2: fwjNSP6UjalqKtflc8cDGIRq3V8.roa (hash: F5R6DAx/X32aNX0GZT5lcF4Ge+9KFvQgTBfPI9+SOGg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:a7:5a:3f:a4:79:28:a2:71:d7:7f:11:d8:5f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
        Validity
            Not Before: Jun 23 16:01:22 2024 GMT
            Not After : Jun 24 16:01:22 2024 GMT
        Subject: CN=8a7307c4766a15065daaf80d96c49982b19c2515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:0e:a7:ed:b9:7a:dd:e1:7d:b0:b9:4f:0a:
                    68:f8:aa:c3:ac:4a:28:09:24:2d:13:26:a9:5f:83:
                    10:d1:bc:f3:c9:74:22:f2:f6:3b:9f:ac:2c:cf:cb:
                    8e:bb:e3:c4:2d:70:8d:4d:1f:2e:ad:ec:16:76:8b:
                    7c:fc:d4:8c:35:b3:cb:1c:48:8f:35:f3:dc:cb:b3:
                    17:4d:98:3e:8a:1d:12:e7:1b:0a:f5:73:79:60:6c:
                    be:40:d2:b1:90:a8:3c:f6:ba:ff:c6:e6:57:dc:35:
                    71:e2:a4:ed:7d:e8:32:db:69:29:45:87:06:62:93:
                    99:ae:98:c2:ba:60:76:97:f9:49:c8:2f:23:e0:59:
                    df:9f:a0:81:0f:57:9a:24:37:b8:81:69:fb:ec:52:
                    84:19:bf:bb:96:09:53:85:ea:41:ed:0c:e1:8d:60:
                    aa:ed:91:91:a5:01:99:5b:80:46:5d:48:5d:a5:d5:
                    2f:7c:23:92:d6:b7:f8:5e:41:6c:bd:ef:40:11:12:
                    a1:44:8e:d7:a5:70:4b:9d:3f:f5:a5:6a:cd:85:ee:
                    37:14:f5:2c:01:09:c6:62:f8:08:a4:b3:63:76:27:
                    2e:f7:8a:0f:9f:00:40:20:b5:8b:ff:ac:13:50:b5:
                    b9:70:a6:fb:ae:e5:26:53:86:c7:4c:5e:aa:72:fb:
                    3b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:73:07:C4:76:6A:15:06:5D:AA:F8:0D:96:C4:99:82:B1:9C:25:15
            X509v3 Authority Key Identifier:
                keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:71:d0:37:67:49:d8:e7:ab:c6:59:ac:9c:e8:87:43:a3:8c:
         14:70:4a:19:58:2e:b3:06:6d:02:50:42:d8:3c:29:08:91:45:
         51:28:bb:9d:04:b8:e4:7a:fb:45:77:e9:70:59:0b:82:3c:24:
         27:88:6e:94:20:76:7a:74:a2:3a:48:3c:fe:81:cf:ce:ab:a1:
         f0:6c:c5:27:d5:8f:68:d2:00:1f:a8:6c:8f:07:69:53:f6:d8:
         fa:ed:7b:42:13:ea:75:03:0f:64:05:6a:db:1c:77:7d:5c:92:
         5c:b8:41:cf:61:53:ae:14:63:09:89:e9:67:5c:c1:2f:3b:89:
         a1:89:ae:b1:8c:1f:41:2d:f3:ff:0b:b5:31:ea:b0:e3:51:c9:
         1d:5c:4b:fd:9a:1d:df:d1:10:28:ed:16:b3:85:5e:67:81:8b:
         84:ca:12:99:05:2a:5d:f4:e6:65:49:70:20:30:ae:1b:d5:7b:
         8b:47:88:19:3d:04:fa:f0:a3:4e:d3:8b:7e:f9:d9:5c:97:e0:
         f7:53:95:23:34:9a:7e:fc:51:65:23:26:66:0b:55:2a:08:f9:
         9b:e0:79:69:13:9c:de:f8:31:60:73:72:1a:b5:4e:c8:dd:1f:
         2f:5d:f7:36:6d:c2:2e:56:26:f9:72:60:25:bb:c3:52:ac:b0:
         e0:9a:86:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:07:14 2024 by rpki-client on console-fra.rpki-client.org