Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
File:                     UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft (raw, json)
Hash identifier:          Z1JLM7cciTfp/qxdse5thdtZ+0X505bawGNOezP5fqg=
Subject key identifier:   D1:CA:AC:BD:E6:D2:25:89:A7:1D:8D:A2:8D:CB:74:D6:AB:BF:A7:22
Authority key identifier: 51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
Certificate issuer:       /CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Certificate serial:       01901CA14FDF7FC34049A660B2D2A2D345E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
Manifest number:          0353
Signing time:             Sat 15 Jun 2024 16:00:52 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:52 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:52 +0000
Files and hashes:         1: UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl (hash: KrUf8mPpDITW4lGOlZDAIVue1CTJZTUE954aojeSGPQ=)
                          2: wyzpYLQGWuFPQlkxZD01kVNZJ0w.roa (hash: QvLH2WWsVuMwpoQQTTZNADzVqUMoBoXgAIFR/jpl33c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:4f:df:7f:c3:40:49:a6:60:b2:d2:a2:d3:45:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
        Validity
            Not Before: Jun 15 16:00:52 2024 GMT
            Not After : Jun 16 16:00:52 2024 GMT
        Subject: CN=d1caacbde6d22589a71d8da28dcb74d6abbfa722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:3d:e2:2d:45:35:d1:f8:c2:73:ef:d2:d4:
                    e2:e2:3a:54:6b:ef:55:7d:2e:4f:bf:7b:fa:da:a0:
                    6b:3b:c5:2e:64:95:e5:1b:4b:be:a9:68:a9:23:39:
                    b1:31:09:7d:92:ac:c3:07:dc:35:51:da:f0:07:ce:
                    32:9e:6f:cf:69:55:0c:cb:e6:ea:19:57:7f:11:fb:
                    28:78:16:a3:c8:1d:e6:76:63:0a:ef:d1:be:44:5f:
                    cf:20:a9:d7:ea:cc:3a:24:aa:9a:b0:e2:19:b6:0e:
                    a6:02:31:ab:ec:f6:b6:90:23:f2:e0:cb:aa:60:77:
                    b9:4c:14:9d:bc:d6:1f:80:77:36:c8:f2:2e:2f:3c:
                    38:ae:00:1f:bb:6f:3d:3e:16:b4:b5:08:84:5c:6c:
                    c7:2f:1d:f9:f1:9b:0e:e5:3e:b3:40:88:9f:8d:a0:
                    9e:e2:b6:d1:21:94:fd:2d:c6:c1:dd:f8:51:bc:61:
                    ff:8f:e5:b3:4f:f7:1f:62:93:63:63:7a:c2:fe:53:
                    95:53:04:94:9c:c5:70:a9:30:f3:51:4d:da:52:61:
                    08:c9:2d:b3:f7:a2:e1:93:fa:f6:cc:68:ad:b0:c0:
                    da:41:d5:41:93:59:f7:e5:f9:e5:c1:2d:15:6c:4f:
                    81:90:85:df:13:10:59:12:7d:3b:06:1a:36:d7:1e:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CA:AC:BD:E6:D2:25:89:A7:1D:8D:A2:8D:CB:74:D6:AB:BF:A7:22
            X509v3 Authority Key Identifier:
                keyid:51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:fb:e1:e2:6f:32:c8:b4:14:28:0d:63:6c:1e:c3:8a:15:02:
         b5:35:eb:c9:97:78:8e:17:b6:b8:82:2b:01:46:c6:9c:36:b2:
         4c:bf:66:0a:d7:83:9f:95:b5:a5:6a:d1:57:1a:c0:cf:7b:a5:
         8d:a1:fb:ce:0c:62:cf:ed:41:ec:63:4e:d4:27:46:a3:05:bb:
         83:10:f9:97:40:4b:23:97:2d:31:64:68:d6:c4:42:19:8e:17:
         90:c7:f5:3c:06:61:01:dd:b3:c7:fc:cb:09:e6:c6:ee:14:67:
         36:b8:1c:86:04:bf:29:ea:df:e7:4a:44:0c:02:d9:15:80:23:
         9e:d5:44:ed:49:c8:a5:5c:85:c4:15:12:87:b6:a7:bc:6e:ec:
         bd:1c:cb:43:b5:37:e3:95:12:f7:c3:8a:7d:f4:6a:80:0a:89:
         69:43:98:6c:b6:b2:5e:e4:8c:5c:20:8d:33:54:ee:2d:db:de:
         4f:5e:f3:23:41:69:f4:fd:e9:84:c1:ed:98:ce:82:9d:2d:f7:
         85:88:51:93:7e:62:7d:16:5c:5e:fa:7f:5a:f3:69:7c:8c:47:
         29:23:64:f2:d9:05:3e:41:fe:33:19:90:64:10:58:98:7e:73:
         92:61:38:b1:4b:09:8d:2e:10:bf:1f:ab:32:36:2f:dc:e8:03:
         85:f5:3d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:50:51 2024 by rpki-client on console-fra.rpki-client.org