Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
File:                     uRvis2eZBLYKL8OZt4CByGsDjZk.mft (raw, json)
Hash identifier:          L4MyIli8fn+qX0hQaIOcjEAoZJklRcR7kvfqOKLywIM=
Subject key identifier:   4C:21:EF:71:40:5C:30:30:3D:62:6B:D9:08:B5:A6:9B:C7:A6:59:6B
Authority key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
Certificate issuer:       /CN=b91be2b3679904b60a2fc399b78081c86b038d99
Certificate serial:       01901E8F70A9A01833C558C5F26374FC5378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
Manifest number:          0403
Signing time:             Sun 16 Jun 2024 01:00:35 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:35 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:35 +0000
Files and hashes:         1: DyEVA85Ygw50CWJCZjoG5j0hQiI.roa (hash: yeFD+xOmh0Js7i3CdvSFbodn7u9dSny2tmOjegN6Gww=)
                          2: uRvis2eZBLYKL8OZt4CByGsDjZk.crl (hash: j8pY7wl0006c/1ZmIhisrSvrMTpxQBjUNgfVxUHIkzM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:70:a9:a0:18:33:c5:58:c5:f2:63:74:fc:53:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91be2b3679904b60a2fc399b78081c86b038d99
        Validity
            Not Before: Jun 16 01:00:35 2024 GMT
            Not After : Jun 17 01:00:35 2024 GMT
        Subject: CN=4c21ef71405c30303d626bd908b5a69bc7a6596b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:38:87:68:7d:7a:8d:7c:c6:c2:7c:ae:ff:
                    cf:34:03:0d:3a:40:97:87:02:14:3b:74:93:5d:71:
                    97:9c:c9:f8:14:b1:01:61:bb:81:7f:70:0d:98:fd:
                    b7:5d:3e:30:5e:47:8b:e0:b1:bb:1f:77:25:1a:01:
                    5a:4e:41:46:52:e1:13:e9:95:4f:95:bd:1a:24:5b:
                    33:b4:99:d1:34:08:bf:29:53:69:04:3e:09:b4:3d:
                    5e:9d:b5:5f:3d:bd:d1:d0:9e:15:95:57:6e:7e:26:
                    f6:95:a0:33:4d:c3:91:73:14:f2:7b:16:e2:2f:91:
                    64:33:ce:cc:bb:4d:2d:04:4b:3f:5f:84:ef:ec:ce:
                    f3:e2:4a:35:7a:8a:98:39:24:b3:d7:98:2f:7b:e4:
                    42:c7:9b:e7:aa:76:bd:c2:54:26:bc:2c:b9:26:c8:
                    e6:f7:cc:17:34:b1:b9:71:14:14:42:76:9a:cb:74:
                    c3:1b:70:e4:1f:1f:4b:58:c4:39:2d:85:46:11:8f:
                    41:20:51:ab:ed:16:72:29:d9:21:d2:51:3f:d1:59:
                    09:52:54:58:2a:2d:48:d2:b3:1e:61:a4:c5:cf:71:
                    f9:ed:01:10:1b:b6:19:3c:2b:10:44:aa:6f:e3:0e:
                    67:c1:a4:15:e6:7e:4d:91:82:4a:d3:96:9f:1f:17:
                    32:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:21:EF:71:40:5C:30:30:3D:62:6B:D9:08:B5:A6:9B:C7:A6:59:6B
            X509v3 Authority Key Identifier:
                keyid:B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5e:e1:ea:32:81:fe:c4:9d:f6:37:6b:3c:e9:f0:d2:68:6e:
         86:74:5d:13:f0:ba:25:60:1e:c3:4e:d3:4c:77:95:b6:b0:be:
         86:0e:b5:51:0e:60:f1:e9:e5:c2:e2:69:b6:bd:ca:cf:f5:60:
         b5:ca:31:a5:cb:25:1c:b8:d9:e3:80:a6:fd:f4:1d:95:4e:30:
         2b:33:be:0d:5c:a9:13:e0:6e:e2:c0:fc:60:c2:0b:c0:6f:22:
         13:1b:b8:8b:7e:5f:80:8b:94:91:c0:23:fe:36:31:cc:ac:9f:
         cf:8e:63:35:6b:bb:a2:49:48:25:a9:a5:92:28:39:5f:69:ac:
         f9:4c:6b:c7:63:6a:e9:30:38:30:f1:f7:37:b7:cf:e5:88:17:
         6d:da:3f:8f:a2:db:e3:b3:cb:dd:03:a4:5a:1c:23:65:f0:ea:
         38:57:fe:2d:a1:0d:f1:46:ca:e3:96:b4:62:98:f2:d6:20:87:
         5f:d1:a0:e2:fe:0f:fa:3d:78:42:99:bf:e4:a1:cc:e3:b8:a1:
         17:dc:06:1f:3f:57:da:2f:21:af:83:ba:6f:7d:62:d3:e7:c8:
         24:75:e9:0b:39:1a:57:d5:e2:03:64:fa:10:aa:2c:59:56:76:
         5e:1c:ac:53:e0:3f:ab:d5:d1:65:58:71:09:4d:f2:aa:c7:10:
         e2:f6:82:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:01:25 2024 by rpki-client on console-fra.rpki-client.org