Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
File:                     Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft (raw, json)
Hash identifier:          vtj8n4NFnLatLym3RnF2OzGzL6pcs6s+suGs/9+KKsg=
Subject key identifier:   87:B0:BE:E1:97:4A:3A:0E:F1:41:DE:09:43:BE:E6:08:8E:A5:6A:3F
Authority key identifier: 52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F
Certificate issuer:       /CN=52ee489f36de04219cd2192e04a7bdb13914648f
Certificate serial:       01904566E370D13E89FBBACECC25D6471972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
Manifest number:          0D04
Signing time:             Sun 23 Jun 2024 14:01:29 +0000
Manifest this update:     Sun 23 Jun 2024 14:01:29 +0000
Manifest next update:     Mon 24 Jun 2024 14:01:29 +0000
Files and hashes:         1: Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl (hash: ZYWdNEW0xItP1C40XJwxKuR6uil36w0bZ5NbwxYC+U0=)
                          2: VWnr0y-6bfCzoaaqV4PEcucfWB0.roa (hash: 5hGj6QU8vHiYjwIAepEqHcAs4PUvdZX8P7nFByUb/F4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:e3:70:d1:3e:89:fb:ba:ce:cc:25:d6:47:19:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ee489f36de04219cd2192e04a7bdb13914648f
        Validity
            Not Before: Jun 23 14:01:29 2024 GMT
            Not After : Jun 24 14:01:29 2024 GMT
        Subject: CN=87b0bee1974a3a0ef141de0943bee6088ea56a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:8b:1d:84:e8:db:a3:39:0f:7e:84:52:46:
                    e8:54:b3:c9:94:19:47:f5:d1:45:08:22:91:22:71:
                    07:44:a5:9b:13:b9:c7:69:95:42:71:1d:9c:10:fd:
                    58:fd:5e:f6:3b:63:5f:d5:39:c7:a8:dc:bb:63:39:
                    5d:5b:42:23:3d:69:1d:09:ea:43:a0:a7:f0:dc:42:
                    59:8e:1c:ad:81:be:42:c2:00:bf:ac:17:0b:21:0b:
                    87:a8:29:e2:83:65:86:73:3f:a8:17:d0:14:d9:17:
                    42:7d:0c:2c:5c:7c:a1:ae:3e:19:79:d6:cf:f8:f6:
                    0b:05:82:f2:81:aa:a9:8c:fa:d3:a7:de:5a:02:e6:
                    39:d8:3b:c9:01:e5:d0:e3:7f:36:64:3d:42:11:bd:
                    f7:6f:37:25:9e:76:5f:04:ae:54:48:8c:7d:cd:c5:
                    f9:b2:0b:7d:a0:3b:04:e0:41:3f:b7:d4:49:fa:af:
                    c4:c7:6b:21:a5:f9:d0:7a:44:6f:b4:e8:b0:57:de:
                    cd:8a:d7:d3:f9:fe:a6:a0:d3:9d:3d:2b:63:1f:5c:
                    42:07:67:93:4f:dc:a9:e6:36:f3:cb:9c:d0:fe:77:
                    96:ef:b4:4c:32:e4:c9:8f:c3:ee:da:e8:6e:55:91:
                    6b:7d:9c:3e:63:2e:fa:85:4c:78:d3:17:39:58:43:
                    90:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B0:BE:E1:97:4A:3A:0E:F1:41:DE:09:43:BE:E6:08:8E:A5:6A:3F
            X509v3 Authority Key Identifier:
                keyid:52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b6:2b:3a:27:21:b7:98:3b:9f:82:79:f2:b5:b1:a2:d7:71:
         1b:30:a8:e1:e2:46:b7:42:64:c6:c4:92:60:4d:ae:0a:07:3a:
         05:3c:97:3c:7b:ae:56:dd:31:26:05:b5:71:bc:46:3d:ae:f7:
         1f:45:62:6b:ba:ed:b5:b9:d1:42:00:40:ad:6e:e5:e9:83:d5:
         a7:fd:32:f8:16:6a:90:f6:6e:85:ba:3c:b5:a3:52:41:31:c3:
         41:00:81:a1:41:bb:92:6e:fc:8c:42:a3:92:5f:66:56:fe:56:
         2c:fd:56:c4:35:12:31:d4:1d:f7:17:8b:a3:99:aa:93:0a:33:
         83:e7:97:38:f0:0d:b0:19:a0:f6:c9:99:df:8a:5b:12:71:23:
         0f:19:27:a4:f1:48:fd:08:a0:d5:cf:76:aa:41:15:90:6c:bd:
         72:28:28:36:4d:35:0b:70:1d:f7:50:9a:b6:2c:d7:8e:68:d1:
         84:45:e0:c9:b4:4b:b5:36:73:4f:2f:b6:63:3e:1a:2f:52:3e:
         bc:9c:ac:d9:54:de:49:2a:76:d8:73:3b:4b:6a:bc:1e:18:56:
         d8:57:bf:da:ee:92:30:76:eb:fa:f1:80:67:89:8c:ab:89:88:
         82:a3:af:69:21:d1:09:80:b6:61:e8:34:df:c6:f9:ba:ae:f3:
         27:fd:cf:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:14:26 2024 by rpki-client on console-fra.rpki-client.org