Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
File:                     uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft (raw, json)
Hash identifier:          40k6uf8xfq4q6KN00/B20jA96dU87LNckLQXnPkx1l4=
Subject key identifier:   AC:73:36:90:0C:F2:F6:5A:06:D9:CB:66:F3:ED:EE:A5:03:EE:20:57
Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
Certificate issuer:       /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Certificate serial:       01901DEC2C5C8FF6D6F0A0C7B91A698F5956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:02:15 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:15 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:15 +0000
Files and hashes:         1: L1NYxU14dX-fLnuwPUoN2gXb8Dc.roa (hash: 1mUlgUGl+u1QEmT6ouz9lLzhyMCZOc1PqnIgF9EnDDs=)
                          2: uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl (hash: 550uWAzyzwGfMihpFpDrCYbQK5o19oZVJ8NxdCSLMbk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:2c:5c:8f:f6:d6:f0:a0:c7:b9:1a:69:8f:59:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
        Validity
            Not Before: Jun 15 22:02:15 2024 GMT
            Not After : Jun 16 22:02:15 2024 GMT
        Subject: CN=ac7336900cf2f65a06d9cb66f3edeea503ee2057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:d4:db:0a:19:b5:79:b3:e8:39:59:64:ea:
                    e9:0c:ca:9b:ed:23:09:cf:d1:bb:1d:aa:a4:49:1a:
                    6a:c4:d2:bf:e7:b7:f1:a6:d2:2c:76:7e:83:91:2e:
                    49:c0:6f:5d:e9:ca:07:a4:11:5f:2d:6d:5b:0e:d0:
                    a7:34:78:3d:1e:3f:b0:be:74:3a:96:00:ed:b0:69:
                    3f:5d:ee:e3:d4:aa:12:d5:cb:d0:af:4e:62:18:66:
                    9d:50:12:12:5e:da:3f:9f:d5:9c:8b:79:9b:d5:4c:
                    db:fc:b9:43:31:fd:0f:28:1f:69:f8:ab:a6:25:23:
                    27:1d:3e:c0:b6:33:d7:8c:2a:2b:2a:30:ee:04:07:
                    f8:25:d5:67:84:60:a2:7e:eb:15:02:15:f7:f0:66:
                    45:28:4e:a8:cd:3f:6b:c7:c6:43:2e:c3:fa:c0:a5:
                    3d:5b:05:f5:f6:0f:7a:8f:4d:8d:4b:0f:37:a6:a5:
                    75:05:a3:f0:9f:87:7a:f9:c4:ab:8c:dc:9b:07:ed:
                    3f:c3:88:7d:5d:2e:de:91:f6:c6:5f:80:8b:84:ad:
                    c0:f8:35:a4:8b:70:f6:71:d3:fd:ed:2a:a5:a3:aa:
                    3a:67:1f:68:38:b6:fa:d6:99:e6:a7:33:39:13:d6:
                    cc:bd:39:b0:0f:2b:3a:b4:69:47:65:dd:81:85:f2:
                    68:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:73:36:90:0C:F2:F6:5A:06:D9:CB:66:F3:ED:EE:A5:03:EE:20:57
            X509v3 Authority Key Identifier:
                keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:16:f1:e8:00:d3:34:7a:4a:3c:d8:54:2e:ff:f2:9f:c3:c6:
         8c:e6:4d:31:95:bd:8e:80:b5:1c:48:94:18:0e:dc:d0:50:79:
         b3:40:68:a8:6d:4d:23:78:b2:f7:e8:e3:13:45:3c:ae:dd:0f:
         e0:04:95:4c:de:70:d2:8e:c6:77:6b:e3:73:bc:c4:f2:f9:23:
         ed:41:66:77:0b:5e:49:6f:9c:7b:2a:f9:4a:33:0f:4b:a5:14:
         54:9f:97:92:bf:7a:1a:83:27:e3:24:3f:4b:b3:5b:1b:22:aa:
         46:b4:d7:e1:be:e0:45:80:d5:23:6f:d3:de:e6:73:b4:3b:c0:
         5a:c7:c7:8f:e2:2b:5e:7d:03:bc:ea:4a:96:2f:4c:f8:84:90:
         c2:b3:dc:77:3d:7f:ab:8b:82:87:4e:fd:f6:43:ff:db:f8:2b:
         81:bf:a8:b9:f1:4e:fc:7e:8d:8e:ca:5c:50:dc:cd:4e:4b:f5:
         09:76:f3:e7:2c:cc:89:88:d5:21:4f:94:c4:ef:14:4a:05:57:
         c9:0e:f0:ee:6c:51:a2:79:23:b0:5a:f3:24:5b:31:ea:4d:19:
         41:96:2d:11:d7:4b:39:13:30:e2:9f:84:57:88:0e:2e:3c:97:
         43:39:d2:03:10:26:14:9c:9e:4c:c9:67:dd:cb:fa:5d:f9:cd:
         6f:c3:f0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:37:04 2024 by rpki-client on console-ams.rpki-client.org