Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
File:                     UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json)
Hash identifier:          crJpBND7uX2OY7D6Jkmu1pmVTk8PuydoPjX9uhcZN+4=
Subject key identifier:   30:75:E7:DA:B4:71:55:A6:86:CC:FD:BE:D7:02:52:CF:B4:EB:87:51
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Certificate issuer:       /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial:       01901F34FDC8FD6BF6BAADAC666E06A08044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
Manifest number:          0FA3
Signing time:             Sun 16 Jun 2024 04:01:24 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:24 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:24 +0000
Files and hashes:         1: P42ukMtdRn5p4GlfRaMCfONqcVQ.roa (hash: bS2LtOaRorsRGqhXWmgLa7TYY3QpdO2Gj4CtgO9uxao=)
                          2: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: nKS25r4QE5RLhEhVBv5Vsxv5dqzfaPwNOlUPdWOb5l4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:fd:c8:fd:6b:f6:ba:ad:ac:66:6e:06:a0:80:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
        Validity
            Not Before: Jun 16 04:01:24 2024 GMT
            Not After : Jun 17 04:01:24 2024 GMT
        Subject: CN=3075e7dab47155a686ccfdbed70252cfb4eb8751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:54:f5:cf:47:e2:67:e2:12:6f:69:1b:11:43:
                    35:f4:3f:4c:96:89:be:5d:a0:4d:78:ed:dc:e3:97:
                    f5:92:67:d1:73:17:5a:d8:d0:d7:21:42:5b:2e:e9:
                    ac:29:68:a7:50:5e:19:8b:a7:a0:43:b6:99:e8:27:
                    35:71:1e:29:a3:85:5e:72:72:7d:05:43:93:57:97:
                    5b:53:1d:b7:61:2f:90:9e:2a:32:a5:b5:ff:06:d2:
                    3e:ef:9e:ca:14:0a:90:81:44:3a:04:c5:40:0a:4f:
                    2e:71:2d:ba:a2:f4:3f:4f:37:66:b0:f6:bd:46:81:
                    be:83:f8:25:6f:00:cf:40:6f:89:4b:42:3e:7f:06:
                    20:81:bb:ff:53:41:66:a8:76:f1:6d:5a:42:fb:a3:
                    ee:27:f0:45:8f:1f:dd:b8:22:1c:c8:87:55:fa:b9:
                    ac:ec:68:8a:60:44:80:73:fa:b9:a8:ba:81:05:ac:
                    dd:40:d4:17:25:ab:2f:18:be:eb:e6:23:e2:fe:21:
                    2d:6a:a2:82:40:20:06:13:56:ba:9e:85:25:4b:63:
                    53:d7:90:6f:b2:6e:20:cb:99:e1:3f:ba:05:92:ae:
                    2c:61:27:f4:34:3d:17:7e:e3:d5:22:72:32:0e:85:
                    4c:a0:d1:65:05:b1:d8:0f:0f:fe:cb:f3:79:48:b4:
                    bd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:75:E7:DA:B4:71:55:A6:86:CC:FD:BE:D7:02:52:CF:B4:EB:87:51
            X509v3 Authority Key Identifier:
                keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4d:ff:6a:20:d0:4a:b7:ab:09:62:e0:01:d7:ac:13:72:d1:
         55:ab:63:c1:9d:be:0e:9a:b2:ef:ab:20:1f:e2:66:d7:2b:34:
         32:b6:73:08:04:b9:eb:6a:97:09:8d:8b:e5:6e:87:64:24:f6:
         df:13:8b:98:8b:43:ea:20:25:13:42:a3:d4:6a:b7:bc:be:88:
         44:e0:cd:07:e4:b3:b1:95:fb:a8:0f:e0:33:69:c1:23:bf:7b:
         e5:5e:3a:c0:85:c4:b9:f9:55:26:16:59:5e:d7:7c:3b:bc:5b:
         01:6d:6c:44:a3:aa:92:02:d9:a4:07:2e:13:b1:0a:2b:4b:ba:
         02:21:34:7c:26:fc:24:47:90:fd:32:bd:a2:d0:08:ab:ce:c2:
         85:ab:02:7e:91:9e:c7:88:09:e7:03:ff:d6:76:1c:ae:df:9f:
         76:6b:e2:cd:6d:2e:f9:f8:da:51:dd:83:21:67:f2:2b:00:4b:
         86:fb:32:4f:10:6c:98:d6:9f:22:8e:1d:7a:96:d0:f6:53:45:
         2d:90:18:6c:af:16:9f:da:f1:c2:c1:af:49:25:71:82:d9:cd:
         12:d0:70:3a:89:81:5e:17:08:ec:68:24:73:3b:a2:54:76:00:
         33:ff:22:71:3b:5b:a8:c9:f9:33:b1:f4:54:74:6c:fa:43:3e:
         dc:9f:4b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:29 2024 by rpki-client on console-fra.rpki-client.org