Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19c943-93cc-4597-bec7-3318ee4a50a6/1/ua54bsOm2Dk-Aj1ddb5-Px35qy4.mft
File:                     ua54bsOm2Dk-Aj1ddb5-Px35qy4.mft (raw, json)
Hash identifier:          bmPSqtlrfIa9Ryhtb/m0wXh0Ghg1XbRmMoZsF1BibL0=
Subject key identifier:   26:7C:B8:BD:6C:E2:B3:D9:4B:A7:C8:10:F8:EB:FF:08:C8:79:84:80
Authority key identifier: B9:AE:78:6E:C3:A6:D8:39:3E:02:3D:5D:75:BE:7E:3F:1D:F9:AB:2E
Certificate issuer:       /CN=b9ae786ec3a6d8393e023d5d75be7e3f1df9ab2e
Certificate serial:       01901E58929B610987F8E1A0D0245AD49AA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ua54bsOm2Dk-Aj1ddb5-Px35qy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/19c943-93cc-4597-bec7-3318ee4a50a6/1/ua54bsOm2Dk-Aj1ddb5-Px35qy4.mft
Manifest number:          025C
Signing time:             Sun 16 Jun 2024 00:00:39 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:39 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:39 +0000
Files and hashes:         1: E244zs7jrR5Tyi2x5xDhLhsYspk.roa (hash: KtcM2FK7GIYcjAdsxtuOMUGeqe+ID5cukaGi2Ko2Pqc=)
                          2: ua54bsOm2Dk-Aj1ddb5-Px35qy4.crl (hash: XCvHacBpFL7LIU8duivFtz2L9OFUAW8SZTM677HM/2E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/19c943-93cc-4597-bec7-3318ee4a50a6/1/ua54bsOm2Dk-Aj1ddb5-Px35qy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/19c943-93cc-4597-bec7-3318ee4a50a6/1/ua54bsOm2Dk-Aj1ddb5-Px35qy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ua54bsOm2Dk-Aj1ddb5-Px35qy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:92:9b:61:09:87:f8:e1:a0:d0:24:5a:d4:9a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ae786ec3a6d8393e023d5d75be7e3f1df9ab2e
        Validity
            Not Before: Jun 16 00:00:39 2024 GMT
            Not After : Jun 17 00:00:39 2024 GMT
        Subject: CN=267cb8bd6ce2b3d94ba7c810f8ebff08c8798480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d1:8b:21:3f:ed:61:72:f2:4e:3c:56:82:37:
                    32:5a:01:72:55:71:ee:3e:11:21:ce:53:6c:56:02:
                    7a:4a:07:10:77:72:1e:9f:f3:d5:e2:66:2e:b7:7d:
                    ae:88:ea:17:81:ff:dd:6f:03:b7:8c:10:4f:53:66:
                    0b:94:01:ad:a0:3d:6b:9a:d6:87:19:fd:20:fc:a9:
                    54:95:04:aa:aa:0a:fd:26:f6:65:26:69:45:c2:a6:
                    60:e3:11:a5:2a:c9:80:46:a1:a5:01:cc:d8:0b:24:
                    7b:51:b8:8d:0d:25:87:16:50:65:66:04:47:43:69:
                    08:d3:53:b0:fd:e1:94:a5:ff:a8:93:c8:ac:6b:4d:
                    df:7d:cf:33:e4:be:b2:6a:53:fc:75:e6:ac:d5:b2:
                    96:36:ae:bd:77:00:95:54:d2:30:ba:f8:3e:67:41:
                    7e:09:0d:d8:d9:ca:02:39:23:20:90:fb:08:2c:39:
                    ef:21:b5:cf:7d:ef:3b:85:fe:ff:33:53:cf:69:dc:
                    a6:4f:41:06:13:ac:2d:e6:ee:bb:35:9f:a0:93:ff:
                    70:97:a2:be:83:a5:c7:7f:62:70:fd:61:07:8a:e9:
                    c2:7e:23:0d:3e:a2:3d:5f:a1:fe:e6:fc:04:7f:6f:
                    69:9e:0a:1b:3b:da:49:1d:e2:5a:d2:a5:94:a1:18:
                    f5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7C:B8:BD:6C:E2:B3:D9:4B:A7:C8:10:F8:EB:FF:08:C8:79:84:80
            X509v3 Authority Key Identifier:
                keyid:B9:AE:78:6E:C3:A6:D8:39:3E:02:3D:5D:75:BE:7E:3F:1D:F9:AB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua54bsOm2Dk-Aj1ddb5-Px35qy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19c943-93cc-4597-bec7-3318ee4a50a6/1/ua54bsOm2Dk-Aj1ddb5-Px35qy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19c943-93cc-4597-bec7-3318ee4a50a6/1/ua54bsOm2Dk-Aj1ddb5-Px35qy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b7:63:cf:b9:01:d4:af:af:7b:3b:a9:4c:24:ab:5c:35:d9:
         bd:6c:c7:f7:e7:eb:bb:83:60:3a:8b:c9:1c:f1:89:8d:9b:bc:
         ad:2f:cf:c8:b4:a3:71:14:96:50:ea:85:c7:5c:bd:73:5d:57:
         a9:f4:d1:f8:cb:2c:a3:f2:7f:4c:e6:22:45:e8:ff:a1:9a:97:
         28:8e:7c:c8:01:bb:6a:00:b9:b4:88:9b:b8:47:11:56:0f:bd:
         e1:a5:ae:a3:bc:ed:e8:7f:83:8e:e6:4c:c7:ab:78:81:c6:8e:
         eb:cc:48:14:bc:8a:c6:4d:d6:54:41:4d:93:6a:b2:cd:19:66:
         9a:03:3b:69:7f:ff:ee:b1:5c:34:4e:db:6c:0f:9d:d5:66:e8:
         11:5f:89:ad:28:9e:e0:5b:0e:54:83:21:00:3d:ce:ba:aa:e6:
         13:71:35:2a:36:22:6b:9d:14:d8:ab:53:52:51:b8:b4:75:d7:
         21:7e:7c:7c:a7:8c:1b:c4:7b:3d:5c:c4:c2:d1:46:cc:34:65:
         07:06:11:44:8c:e2:b7:9d:b2:de:25:c2:2e:d2:2c:9e:2e:01:
         c7:01:47:1b:f1:b2:d8:08:06:2c:91:60:98:dd:27:e4:41:48:
         3d:1a:89:8a:64:b1:25:7c:00:4a:6a:b3:08:81:fe:37:47:9f:
         ff:7c:3d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:02:40 2024 by rpki-client on console-fra.rpki-client.org