Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
File:                     hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json)
Hash identifier:          UUw9FrhTj9f/QlgPUgbyeWAtFNTNetMTDwFH1jE7GcI=
Subject key identifier:   1A:45:60:E1:2E:B6:AD:4B:CA:AF:4F:3D:6E:68:15:FD:71:3F:EA:11
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Certificate issuer:       /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial:       01901DEB7C4FC882CABDD4154E918D90E3FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
Manifest number:          0169
Signing time:             Sat 15 Jun 2024 22:01:30 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:30 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:30 +0000
Files and hashes:         1: VuOq2BZETwGpaqxtzV6wTd_bw6E.roa (hash: SsXqSajz6yR3XmxW+I0yrgDW6FEbpTRuCKc8fKp2xok=)
                          2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: rd+4/fIwAAnVPWoGO5XKqpfb8/7k7zVxYQkd5yNPd8k=)
                          3: kt_AXjE56jabMm8UWcyBpxYP1g8.roa (hash: S+qDpuHYeTKnIAsCxtbZbtmjuh5HRlLV1n6OVtc0cic=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:7c:4f:c8:82:ca:bd:d4:15:4e:91:8d:90:e3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
        Validity
            Not Before: Jun 15 22:01:30 2024 GMT
            Not After : Jun 16 22:01:30 2024 GMT
        Subject: CN=1a4560e12eb6ad4bcaaf4f3d6e6815fd713fea11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:17:c8:38:c4:61:c9:e7:17:43:bc:08:1d:
                    ff:a1:2a:08:fb:1b:43:dc:cf:f8:9e:4c:b8:ba:a6:
                    73:f7:6c:1f:3f:03:47:21:8d:a4:55:e6:61:db:99:
                    63:6d:96:d7:3c:9f:91:02:79:14:54:10:2b:56:cf:
                    a2:2d:a9:75:a7:29:74:4c:42:f9:38:02:d7:36:10:
                    dc:ac:e3:8b:e3:98:09:3d:ad:19:f4:ef:22:10:ce:
                    97:b2:92:a6:e0:3c:c9:92:ef:fe:f8:eb:19:d4:58:
                    79:5e:d5:42:9c:54:6e:57:88:95:54:6d:54:26:92:
                    b1:5a:8f:3c:d3:c8:ac:c4:90:5f:64:e7:10:c3:ca:
                    d8:60:59:68:23:ae:63:e0:c2:a2:46:11:a0:1c:8f:
                    4a:ba:d9:cb:00:ee:7e:a4:04:99:1c:3d:ab:3b:ff:
                    cb:f7:80:8a:8d:15:66:da:c3:d0:26:c5:09:86:c9:
                    ef:bd:a6:86:10:fa:2a:de:13:e4:eb:0e:d6:78:3f:
                    26:c4:63:ba:99:73:bf:01:8d:2c:8d:b3:2b:22:9a:
                    f2:e2:88:ec:87:ce:d7:11:bc:68:36:d9:77:4c:92:
                    c7:83:bf:f1:15:d6:88:86:ba:73:1e:b7:57:90:04:
                    f4:26:69:c7:d6:5b:62:d1:d3:0a:ff:ed:5c:37:9c:
                    6a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:45:60:E1:2E:B6:AD:4B:CA:AF:4F:3D:6E:68:15:FD:71:3F:EA:11
            X509v3 Authority Key Identifier:
                keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:91:cd:b0:db:a5:35:03:77:0b:96:ff:36:cc:25:7a:24:b5:
         21:b3:02:4c:09:0b:9a:dc:8e:94:ef:26:34:e5:ba:c8:1f:c9:
         e9:f2:38:32:7e:72:00:c3:ff:64:d8:b0:64:56:56:98:c8:87:
         5c:6f:42:2e:24:2e:cd:f2:94:cf:1a:41:a1:72:c1:49:72:aa:
         cc:e5:f5:1d:f7:d7:54:29:f7:ee:bb:60:d5:4f:b8:03:f2:1f:
         69:fc:1e:2b:b8:4a:12:46:c3:50:17:59:c4:6a:33:2e:e5:89:
         5e:03:a8:d6:3e:d0:cf:ed:16:09:92:7b:a0:f1:b4:d4:83:cc:
         b5:77:0a:98:ef:88:31:d3:62:60:ad:bc:8f:ec:8c:99:0b:47:
         03:fd:89:05:5b:73:49:68:e4:3d:00:4e:04:ee:ed:28:72:08:
         e2:16:ae:1c:ec:cb:30:eb:81:26:fb:af:75:fc:df:6b:f7:b2:
         3c:10:ea:cb:bd:70:20:1d:de:f5:8d:76:4e:25:09:4b:ad:e2:
         51:4b:69:c1:74:e3:79:a8:ae:f0:48:e7:db:ae:a5:67:fd:22:
         9c:bb:dd:69:d6:e0:56:11:89:55:67:a6:93:4d:d5:91:3c:00:
         ed:ce:c6:e6:bc:af:e3:f0:f3:72:1b:ea:36:a0:0b:cf:d9:27:
         a8:5e:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:02:10 2024 by rpki-client on console-fra.rpki-client.org