Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File:                     2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier:          uwHqvS9xBImpHZVrO+Pw1ei0MeZzh52OD2LYibItscA=
Subject key identifier:   21:22:80:97:0E:4A:86:9F:51:DF:E1:BE:9B:C1:A7:6D:A5:9A:4F:01
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer:       /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial:       01901D0F811BEE688E5175EF044F0D2A7338
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number:          0276
Signing time:             Sat 15 Jun 2024 18:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:13 +0000
Files and hashes:         1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: FNl3d9NRMRWmB+nRHxyJuwEAYzb68/2Zm20OBdfWBHM=)
                          2: HJ2ikhXusiTTpm1Sgcd34hRkjEo.roa (hash: tbeCXgWksNvqXxqZ1sAC0NZTwE9Mi2WHIJ/XKxmjOds=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:81:1b:ee:68:8e:51:75:ef:04:4f:0d:2a:73:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
        Validity
            Not Before: Jun 15 18:01:13 2024 GMT
            Not After : Jun 16 18:01:13 2024 GMT
        Subject: CN=212280970e4a869f51dfe1be9bc1a76da59a4f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:03:fd:39:29:29:95:bb:1e:ae:74:4b:92:
                    d4:e8:a9:b6:f8:7f:9a:0e:25:d5:42:5a:3d:c4:3a:
                    e6:af:74:19:58:b0:cc:57:04:3b:93:34:67:cd:dd:
                    0a:8a:5a:28:67:19:8a:ae:56:16:79:f6:8b:c3:11:
                    fa:9d:1b:3f:95:23:cf:ed:15:8e:a3:b8:43:b1:c3:
                    15:eb:4d:e1:78:db:37:87:b4:67:f1:db:41:c0:a6:
                    46:cd:ba:e4:14:e2:0b:14:e1:f8:f6:3c:15:08:04:
                    50:74:88:58:7d:b2:04:13:a1:48:e4:32:a8:09:7f:
                    1d:27:dd:f3:80:cb:e5:46:57:0d:eb:19:57:dc:09:
                    57:f4:59:12:93:88:4c:53:cc:bf:7d:f1:aa:b2:f6:
                    31:f3:65:07:2b:12:e8:de:9e:06:3e:39:88:5e:6c:
                    06:67:42:96:c5:54:3f:72:da:00:5d:1e:68:c0:02:
                    73:31:36:4f:6b:98:c9:81:90:4f:1f:3e:95:5a:3e:
                    ef:69:85:26:a7:cf:71:98:b6:a5:ad:4c:c9:a3:84:
                    41:76:45:79:fe:31:b0:bf:8d:9a:e9:13:ff:ee:e2:
                    e4:97:49:2b:69:b1:0c:8c:a3:a3:d6:fb:da:b8:f3:
                    4f:e0:9a:66:65:34:ee:df:1d:0e:8c:69:dd:06:cd:
                    c8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:22:80:97:0E:4A:86:9F:51:DF:E1:BE:9B:C1:A7:6D:A5:9A:4F:01
            X509v3 Authority Key Identifier:
                keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c2:11:e5:17:0b:ab:82:47:4f:43:b5:c9:8f:d5:ac:e0:95:
         be:2b:db:35:9f:26:b8:55:a7:d8:09:9c:85:53:94:51:3a:72:
         d9:09:ed:ed:6b:90:e2:b2:58:f7:27:ac:20:db:c0:f0:f8:8f:
         2e:df:61:91:84:89:69:0c:93:4d:b3:f0:3a:c1:89:8a:0e:9b:
         3c:b5:43:e2:87:45:2e:95:d0:e7:03:91:5a:6e:cf:46:4a:d2:
         ab:d6:8b:31:a8:12:84:a9:39:fe:a3:53:05:1e:6a:49:59:6e:
         28:c8:c7:38:7c:26:ed:27:06:dd:ba:21:e7:91:be:29:2d:5c:
         ec:07:cf:8a:fa:2d:d8:21:e3:3d:78:44:59:21:23:56:ef:94:
         4d:8d:ed:8c:bd:9d:94:c8:d1:6a:b0:84:f7:93:cd:4e:83:21:
         06:66:b4:19:91:89:83:46:50:41:0e:5b:43:f7:5e:46:5c:40:
         ac:69:af:d2:d5:89:1e:87:f3:df:0a:87:15:ce:e8:98:cb:6a:
         9b:35:1c:47:d5:c7:0b:0d:b7:0a:8c:62:98:4b:8f:44:7f:ef:
         1a:a8:5f:26:c7:0b:71:b6:e6:22:c0:2f:82:e7:97:43:d7:d3:
         5b:a1:b0:30:8c:3e:90:90:88:aa:17:b1:1b:0d:ee:4d:0b:51:
         a6:82:52:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:43:02 2024 by rpki-client on console-fra.rpki-client.org