Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
File:                     2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft (raw, json)
Hash identifier:          somupYzc9oy4NuFaiN8kfc+wMmF4XyWGzv11YZ5nvIk=
Subject key identifier:   0D:B1:86:F4:B7:47:82:47:1E:4A:67:BC:92:A6:E4:0D:78:47:CA:07
Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
Certificate issuer:       /CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Certificate serial:       01901DEB338856750A36F4847CC6537D9CC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
Manifest number:          0E87
Signing time:             Sat 15 Jun 2024 22:01:11 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:11 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:11 +0000
Files and hashes:         1: 2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl (hash: YvgxTp3XBcwO0DH/sjatsMkyr5xhB0565frX/2Ok0W4=)
                          2: CGy_yaeSngUeL8lGolgNc8H4cio.roa (hash: +sM7aP15rbRfFfw0Qy1Xlm4ZdDi1EZioqu9QFvDdmLU=)
                          3: y1PDXaAfP9SE3-V-n3ZNmSynFZM.roa (hash: grGAEdoX1gKT6dYv0u3Na/zGCGReIV2xMu9jF2N9z/8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:33:88:56:75:0a:36:f4:84:7c:c6:53:7d:9c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63
        Validity
            Not Before: Jun 15 22:01:11 2024 GMT
            Not After : Jun 16 22:01:11 2024 GMT
        Subject: CN=0db186f4b74782471e4a67bc92a6e40d7847ca07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:a8:38:ee:d7:6d:31:ac:58:46:1d:3b:03:
                    3a:75:c7:42:8b:cc:fb:c9:e6:b3:d4:3f:ff:dd:35:
                    63:6e:cf:52:d6:27:37:88:1d:1c:a4:66:be:65:1a:
                    e9:6c:af:17:88:27:b3:38:95:b8:99:5b:bf:f7:99:
                    95:aa:37:28:fb:2b:8d:dd:59:46:aa:6d:89:bf:24:
                    e8:ba:41:a6:70:ae:22:49:af:65:f7:41:50:9d:7c:
                    fa:69:27:c4:3f:25:01:56:ab:8b:f5:9a:83:56:f9:
                    d4:4e:2c:e5:1a:1f:1c:c1:45:76:b9:ce:dd:8a:96:
                    fd:6c:b4:51:ff:d5:a1:6b:fd:9d:33:aa:09:64:0f:
                    9a:53:1f:42:5d:5c:b7:a3:73:bb:ba:39:d5:18:e2:
                    52:3b:8a:ce:ea:d7:c7:66:51:91:a1:c3:40:8a:99:
                    b5:3b:95:f6:17:d1:e4:8a:73:95:e6:1b:ec:9d:c9:
                    6a:69:92:8e:74:5d:1c:ad:c0:34:53:55:53:ff:22:
                    66:aa:52:b6:33:be:e6:30:a6:16:13:3d:a4:f5:62:
                    bf:2d:ba:f9:78:6f:be:de:b5:a2:64:55:0d:82:ea:
                    fa:b7:73:10:10:01:b3:cb:80:c3:1e:c1:a7:67:aa:
                    ee:4a:5c:94:ca:93:f9:c9:ec:c0:09:0d:2d:a8:47:
                    63:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B1:86:F4:B7:47:82:47:1E:4A:67:BC:92:A6:E4:0D:78:47:CA:07
            X509v3 Authority Key Identifier:
                keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:6c:95:ad:c8:8c:28:d6:12:29:75:c5:b1:2f:4d:8b:3e:8e:
         64:ca:a2:ab:38:cb:7a:75:85:4a:56:30:89:0a:d5:1c:ca:96:
         9a:a1:63:e0:ea:d5:60:6a:c2:98:30:d7:9f:e6:67:1b:e9:e6:
         ae:40:8c:6f:1f:d1:13:4f:7a:90:ff:34:69:29:a0:88:59:24:
         92:d6:e0:ec:05:dc:aa:55:eb:40:27:11:c6:1e:6f:55:96:20:
         f6:2c:6e:78:8c:e8:16:0c:f5:bb:33:27:88:6e:e5:f6:cb:93:
         3d:7b:58:ca:32:48:73:29:a8:5c:30:7e:83:50:18:c3:b4:85:
         96:49:17:3a:bb:11:91:4d:33:58:a3:7b:4b:9d:6c:f6:df:b6:
         44:59:15:d4:a0:06:59:cf:85:9c:af:c1:af:39:a7:6e:61:42:
         75:3f:da:36:fd:1a:19:cd:8e:ae:18:14:fd:82:a1:b7:60:83:
         38:39:64:49:12:b1:f1:e0:d6:1f:73:94:a7:cf:b7:4f:f0:20:
         ae:f6:6e:54:64:e5:3c:d3:89:89:ea:d4:a9:4f:9f:eb:b0:65:
         f3:d8:c2:34:1b:45:3e:2f:23:e1:3e:55:95:db:62:47:a2:d5:
         38:9b:df:7f:b8:49:8c:2a:b8:05:42:ed:4b:82:69:4e:f8:4b:
         6b:4e:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:51:47 2024 by rpki-client on console-fra.rpki-client.org