Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
File:                     UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json)
Hash identifier:          XTLSmGFSEbpkRJdj+9jEFl4zOPwl3v6csjcqiisb3b8=
Subject key identifier:   23:A2:0D:C7:9F:27:FA:8F:51:E6:6C:2D:E3:65:9E:87:69:2D:29:D2
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Certificate issuer:       /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial:       01901D463F1B0369CE6084F9365B44B705EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
Manifest number:          0EA9
Signing time:             Sat 15 Jun 2024 19:01:01 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:01 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:01 +0000
Files and hashes:         1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: edb/FQGeKhlVVTrTG+FMCU13gDQ6P1NyH1al380dxUU=)
                          2: fwjNSP6UjalqKtflc8cDGIRq3V8.roa (hash: F5R6DAx/X32aNX0GZT5lcF4Ge+9KFvQgTBfPI9+SOGg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:3f:1b:03:69:ce:60:84:f9:36:5b:44:b7:05:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
        Validity
            Not Before: Jun 15 19:01:01 2024 GMT
            Not After : Jun 16 19:01:01 2024 GMT
        Subject: CN=23a20dc79f27fa8f51e66c2de3659e87692d29d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fe:99:72:8f:e5:f4:59:87:e8:07:1c:e4:d8:
                    64:71:f6:67:83:10:cb:24:f8:b1:e3:1a:e7:63:ba:
                    da:2a:b6:53:0a:b7:4b:b9:07:6a:9e:40:36:d2:30:
                    a6:5f:df:f5:ac:8d:9e:0b:fa:13:ff:27:bf:96:5d:
                    a3:0b:3e:4d:0c:c0:a2:04:92:ab:19:5c:9d:79:9c:
                    6b:c9:71:fa:41:78:f1:de:79:10:6f:00:48:39:69:
                    ad:bf:ab:0c:04:41:00:d4:c7:70:f8:29:5a:ac:55:
                    09:26:b6:e4:fd:d8:e9:3b:ba:54:16:7b:86:3e:d1:
                    b0:ca:93:00:f8:5b:ed:23:64:f3:88:f6:ac:ce:2a:
                    79:1b:4c:33:d1:a5:6c:e5:08:b9:15:be:34:b3:7a:
                    2c:5d:25:7d:cb:ea:7a:60:4b:94:ce:f4:fc:a8:51:
                    9e:c9:65:84:01:f5:8d:06:13:68:98:e8:b4:6e:26:
                    30:34:3d:17:45:c8:93:e3:76:6b:87:f4:b4:63:7d:
                    f1:cc:32:f2:21:1e:2f:03:1d:eb:e5:70:59:d1:42:
                    c1:d9:d2:c0:f3:6f:7a:15:6a:32:3d:1b:60:2e:e1:
                    7d:30:39:b0:b1:53:b2:68:4f:81:1b:1d:7c:16:f2:
                    24:af:c1:13:89:07:53:c7:75:dc:10:69:26:e1:ea:
                    ee:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A2:0D:C7:9F:27:FA:8F:51:E6:6C:2D:E3:65:9E:87:69:2D:29:D2
            X509v3 Authority Key Identifier:
                keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f0:16:8c:04:81:ed:94:e9:63:28:c1:16:ad:89:0d:3b:2a:
         4c:16:24:28:33:63:53:c8:5c:d0:9d:b0:31:9a:e0:ca:77:db:
         e8:79:ba:9e:42:95:fa:77:df:cf:70:14:1e:16:06:5b:8f:4b:
         b6:a8:99:95:d9:c0:e3:62:89:2a:d5:f0:28:2b:e1:00:03:3e:
         39:29:92:5e:06:20:86:c1:59:46:b3:ef:ff:2f:e6:27:46:c9:
         6f:60:ed:6a:51:73:27:cb:6b:81:8b:8c:50:85:72:07:f6:3f:
         5b:3b:ac:32:74:e2:b9:b6:c3:84:ca:41:86:ac:74:f9:c5:c7:
         f3:b7:9c:c0:4b:fd:9c:6b:f4:5a:34:35:02:e6:95:5a:6c:28:
         08:6d:d2:ab:ab:70:2e:ad:e3:a2:13:d4:ab:9c:5e:84:bb:87:
         4d:8e:0a:e8:85:d7:12:0f:64:11:58:dd:ff:eb:bb:4c:4a:86:
         c7:ca:f3:4c:eb:6d:8a:d4:b4:c3:4a:d4:fc:df:66:22:69:63:
         cf:08:fc:c9:ab:66:f8:f1:25:2e:cd:24:b8:0b:c2:61:4f:70:
         92:0e:ae:4e:11:aa:4e:30:ca:91:a6:5a:13:c7:24:71:0d:18:
         ee:c8:1c:9d:d1:fd:89:d8:3a:fc:6d:22:ff:95:f0:3b:6c:7f:
         7c:a8:71:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:56 2024 by rpki-client on console-ams.rpki-client.org