Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File:                     u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier:          W5SfHpKqdZbtjJcHwKnDC3BB6/5rbfylWjkzlzsrkoM=
Subject key identifier:   72:ED:0D:1B:AF:12:40:F5:F5:3E:E1:05:67:FB:FD:B5:64:63:C0:46
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer:       /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial:       01901DEAC791E620B46F0DF48580333D8DBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:44 +0000
Files and hashes:         1: ZwSeBQ2tXYDmOqW8V32VwrT1Ao8.roa (hash: LCa2TdcPowYt2GZ2WKMCDJ7M+FWCyUnqKDWuhSEDIxU=)
                          2: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: qfBgfw9SSKnIgwlyPJ+UrMOf56vnhP9+M+mGbTLlAPE=)
                          3: vW7DUjE-0Cv-h8KS7tNAlAyJ8NE.roa (hash: 4hd6m2NzgQu+Vt+RrIORBy2f2YddyIOedL/nC7wQSd8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:c7:91:e6:20:b4:6f:0d:f4:85:80:33:3d:8d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
        Validity
            Not Before: Jun 15 22:00:44 2024 GMT
            Not After : Jun 16 22:00:44 2024 GMT
        Subject: CN=72ed0d1baf1240f5f53ee10567fbfdb56463c046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:86:5f:6a:76:a4:3b:b6:35:c6:77:c0:7a:
                    ff:94:15:9d:62:32:57:90:cc:ed:9f:f4:c1:6e:bd:
                    1c:08:f2:3d:eb:b6:75:47:31:63:c6:95:a9:3b:76:
                    df:62:69:d9:0d:0d:00:a9:cf:a4:06:44:ec:37:6c:
                    eb:01:0e:7f:db:a0:0d:38:0c:69:ef:81:61:f1:27:
                    51:6a:97:1f:2a:ff:cf:37:6b:a5:f5:4f:54:7f:26:
                    4b:46:25:7d:20:1f:e2:90:8c:e1:53:2e:7b:05:ad:
                    3b:b6:9d:f6:c7:d5:ce:84:52:53:5f:14:37:ea:4a:
                    f1:0c:0a:de:2a:4a:6e:fe:fd:05:bb:28:6f:f0:07:
                    6e:e1:a2:2c:d5:4f:1b:75:ee:16:1b:50:66:9a:0e:
                    b4:64:a0:44:9d:70:fa:e2:df:37:18:87:b3:56:15:
                    cf:02:4d:88:eb:9a:c4:4b:c2:28:e7:e8:55:71:b7:
                    dc:40:f9:86:a7:82:51:82:d8:6e:17:5f:06:40:8e:
                    e9:9e:fb:32:80:f8:cc:bf:2b:b5:43:7c:e0:f9:98:
                    5f:b2:1c:e9:f4:4d:1f:ba:9d:67:1f:04:bb:5d:2c:
                    65:fc:cc:d9:a9:3c:a8:2f:3d:76:b3:e2:d4:d1:d4:
                    e7:97:3e:b5:e4:b7:b0:03:b5:3e:f6:65:5f:31:32:
                    1f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:ED:0D:1B:AF:12:40:F5:F5:3E:E1:05:67:FB:FD:B5:64:63:C0:46
            X509v3 Authority Key Identifier:
                keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:3b:08:98:f0:97:b9:ff:e9:6d:89:42:df:b6:8c:19:7f:e3:
         c9:69:af:fb:0c:74:e3:c2:a5:04:ca:61:73:cd:35:8e:da:69:
         3b:0e:97:36:58:91:53:87:3e:49:d4:ba:1f:7e:88:62:c9:f7:
         54:c2:e8:ee:8e:0c:e8:a4:64:47:d5:70:9f:12:a1:24:36:1c:
         9f:dd:c0:3e:7c:ec:85:c3:5b:a2:5d:87:5a:5d:88:0a:c6:90:
         79:64:eb:ea:b7:63:50:5c:3f:20:f9:32:1e:a0:66:03:40:28:
         c3:67:70:f4:f2:74:41:95:cb:8e:08:d1:ac:50:61:45:83:89:
         65:7d:ee:64:ca:ea:34:5f:19:7d:96:66:8f:8b:0b:39:8d:68:
         df:eb:61:0a:a4:73:a1:aa:8e:ec:9a:c7:33:8e:f1:6f:b3:14:
         40:45:db:4b:8e:31:8a:f7:97:86:f6:13:7c:11:5b:db:67:01:
         f9:28:af:21:2a:3d:7c:bd:ba:7f:4e:db:7c:91:2d:8d:49:b8:
         b7:49:19:3d:8c:b7:c7:6f:1b:60:8e:55:92:aa:97:c3:68:f3:
         11:4c:8a:98:f1:b4:3d:fd:bb:de:1e:ca:da:f4:3e:9b:a8:41:
         ad:f5:17:ad:7b:e4:b4:16:ee:6d:2a:a3:74:12:31:5d:a6:e6:
         b8:98:a7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:50:06 2024 by rpki-client on console-fra.rpki-client.org