Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
File:                     UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft (raw, json)
Hash identifier:          BlqT/gPpPLfnlNvDs2VEQ3tTN0w1P3o6gCRn/Jo15fE=
Subject key identifier:   7C:C8:88:D1:75:10:3D:1B:F5:DC:0D:85:D0:92:30:7D:C6:88:12:99
Authority key identifier: 51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
Certificate issuer:       /CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Certificate serial:       01901BFDB4E0D202A3A67C441BEF1AA068DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
Manifest number:          1154
Signing time:             Sat 15 Jun 2024 13:02:10 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:10 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:10 +0000
Files and hashes:         1: UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl (hash: npULx3zq2pihoQXTuamJvnN8ERTfnSzpePrUYw5qnXI=)
                          2: dSCYJ-g30Q1cGd103Py-oINDfxA.roa (hash: cXfuUGYb2G/g/WcHWYeAYm9sB8kBv6sVwOhOYtZPMNk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:b4:e0:d2:02:a3:a6:7c:44:1b:ef:1a:a0:68:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
        Validity
            Not Before: Jun 15 13:02:10 2024 GMT
            Not After : Jun 16 13:02:10 2024 GMT
        Subject: CN=7cc888d175103d1bf5dc0d85d092307dc6881299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:ab:ff:05:8f:18:da:38:76:6a:ef:77:99:
                    3f:59:ce:a4:da:11:9f:ca:cb:79:03:1e:32:d4:55:
                    d8:64:a5:35:51:78:b4:95:56:c0:5e:64:91:c3:0a:
                    ec:d7:2a:02:e1:fb:b5:38:f8:a9:c1:fe:c6:f8:8d:
                    07:d3:c9:03:b6:46:2f:50:0b:f0:94:37:0d:8d:c3:
                    52:f5:3d:a8:d2:c7:1e:17:b1:28:ec:d0:55:47:6a:
                    cf:12:b3:b5:2d:17:60:c8:8a:ad:5a:7d:d7:be:68:
                    3f:0f:bc:01:c3:d0:ee:23:65:a6:17:8f:d6:41:7c:
                    62:3a:9c:60:b5:4a:4d:7b:f1:a8:79:ce:cd:8f:16:
                    0e:68:8c:71:a0:21:ca:f6:5d:93:94:80:92:ca:c9:
                    e7:cd:5a:05:da:c2:a6:51:4f:62:8f:c9:12:b0:f4:
                    e3:dd:07:d0:0f:5d:18:28:b5:c1:83:d4:1f:2d:a7:
                    61:39:88:66:4e:f5:1a:16:97:ee:1b:c7:ab:9c:a1:
                    97:2f:7c:74:7b:90:51:cf:f7:53:77:d8:5e:90:4f:
                    b4:2f:92:05:58:34:c6:8b:82:da:fe:e6:46:b1:fc:
                    57:20:7f:78:b2:96:e5:bb:88:0d:4d:ff:87:f3:ed:
                    c6:24:c6:29:40:30:58:1b:f0:08:d6:52:1c:3c:2a:
                    73:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C8:88:D1:75:10:3D:1B:F5:DC:0D:85:D0:92:30:7D:C6:88:12:99
            X509v3 Authority Key Identifier:
                keyid:51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:cd:fe:79:11:a3:72:29:a2:2c:34:28:9a:13:f1:bd:8d:31:
         81:51:fc:cc:94:5d:de:ff:66:fd:ed:97:67:8e:3e:43:12:20:
         b8:bc:0e:ac:6c:9e:16:66:20:73:23:9f:e9:8c:ff:41:da:30:
         df:f3:a5:3e:aa:78:8b:53:f7:5a:01:b3:48:c0:03:ce:d4:07:
         94:38:83:02:ce:6a:10:90:ba:7d:55:31:d7:d1:bf:20:10:77:
         ae:1a:be:5d:21:ff:4c:b6:53:23:61:04:5b:00:a3:cb:4c:bd:
         d8:8e:a6:be:a5:45:4d:83:78:86:84:1b:dc:96:d6:1a:96:09:
         d7:dc:cf:46:a9:8d:0e:e0:1d:d1:c5:f6:d1:21:cc:43:9a:1f:
         5e:3b:dc:68:a3:bf:46:78:e1:68:4a:25:6e:fa:b0:16:7f:e2:
         8c:74:83:01:5a:98:a2:75:96:a3:38:be:55:23:53:cb:03:66:
         50:22:2b:79:81:23:5a:32:9e:d4:d5:4b:62:c4:ff:84:d4:51:
         e0:27:4a:17:d0:d7:59:90:ea:aa:3a:d6:4e:53:65:34:f0:f1:
         dc:aa:3e:d3:39:2a:a2:eb:97:52:0a:6d:e4:aa:a2:d9:cb:65:
         b0:cd:d4:bc:7a:f0:df:cb:77:4e:74:17:24:58:1e:d8:26:f2:
         f8:9d:84:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:08:09 2024 by rpki-client on console-ams.rpki-client.org