Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
File:                     uwoTocnh3YTt5DKDSQvng4d1SpQ.mft (raw, json)
Hash identifier:          dKATaDBfHxjR8HAOCfkeYmMVawMWJPJFUa+wWxINRQs=
Subject key identifier:   E4:02:29:E6:3D:38:7D:3D:E4:58:4C:75:FE:92:DC:7D:E2:48:F9:D9
Authority key identifier: BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
Certificate issuer:       /CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Certificate serial:       01901D0EF38BB68CBFD816A85F9BDEC505AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 18:00:36 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:36 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:36 +0000
Files and hashes:         1: 2D65TNyuAkiQtPzAQ4KDh1dLGOg.roa (hash: SsFMsxcxdsk1Z0cRoRZ+lvKnvWDPPhV0H9cDPHTwphg=)
                          2: uwoTocnh3YTt5DKDSQvng4d1SpQ.crl (hash: rcGnuF4Xm+zo6ROYzv+4NKvYs1WK/ZOEJG6hGfchNJw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0e:f3:8b:b6:8c:bf:d8:16:a8:5f:9b:de:c5:05:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0a13a1c9e1dd84ede43283490be78387754a94
        Validity
            Not Before: Jun 15 18:00:36 2024 GMT
            Not After : Jun 16 18:00:36 2024 GMT
        Subject: CN=e40229e63d387d3de4584c75fe92dc7de248f9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fc:ed:5c:7d:8e:81:17:a5:10:92:b6:f6:21:
                    e7:e3:d3:0d:59:2f:24:ca:17:f0:8c:a5:02:9b:6f:
                    c1:76:8e:22:c5:85:6b:34:e5:5f:af:d7:0a:43:3b:
                    9c:d2:68:72:67:a6:5a:88:e4:ce:38:02:ed:7b:81:
                    1d:9c:5b:6b:cd:5e:1d:ce:cb:70:ff:32:ae:d6:46:
                    ee:b6:c0:cb:4f:94:07:df:90:ca:7c:d5:b3:fc:c0:
                    f3:17:d0:2e:73:8d:a3:e1:fb:e8:38:4f:45:67:d4:
                    b9:b4:cd:1d:b3:a1:8f:e7:34:6e:14:83:49:88:4b:
                    26:e8:a1:e7:42:e2:0a:75:09:75:ed:a9:e2:8b:20:
                    3b:98:ab:cc:f7:86:21:ec:6c:e5:2e:50:31:e7:26:
                    44:5f:7b:d2:18:f4:4c:d2:d1:a4:94:91:46:be:0d:
                    d9:31:95:15:e2:d9:d1:72:90:d5:6c:3d:14:09:03:
                    a7:b2:2d:46:ef:6e:2b:52:f1:1b:cd:6d:be:5a:e9:
                    7f:de:29:a5:5c:1e:be:77:00:fd:6b:42:b0:97:44:
                    1c:f6:50:bf:33:89:94:6a:91:b1:6e:81:29:90:2a:
                    7c:fc:7a:a0:ea:7d:44:78:f3:ed:2e:bc:78:1d:cb:
                    3b:10:c5:89:a4:58:50:57:ae:2c:04:0c:b6:64:76:
                    a3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:02:29:E6:3D:38:7D:3D:E4:58:4C:75:FE:92:DC:7D:E2:48:F9:D9
            X509v3 Authority Key Identifier:
                keyid:BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:11:e9:bd:bc:6e:25:18:51:8b:2f:5c:16:49:d8:46:9c:82:
         12:83:9e:5b:ad:8f:11:e2:57:18:dd:36:58:b2:b8:88:fb:37:
         1c:c8:58:41:42:b2:e5:cf:7c:13:b9:6d:79:94:74:00:da:23:
         46:35:07:8b:b9:90:ab:81:54:72:ae:84:01:dc:83:aa:ac:53:
         85:15:50:2e:00:5a:2d:e9:c8:c8:d3:03:5c:4d:75:7a:8c:13:
         43:0f:3b:fa:8e:bb:e4:5d:b4:87:e7:40:d3:b7:b1:6b:9b:3b:
         1a:cf:64:e1:68:b1:ea:79:d9:0b:00:10:05:a0:f3:a4:72:3a:
         b3:11:66:00:cb:e6:63:65:db:85:c0:91:6e:98:48:b5:2b:68:
         04:1e:ff:35:ce:87:3b:ac:66:94:04:6e:60:41:30:3d:72:66:
         60:95:85:cc:d7:f5:91:a8:cc:e2:34:46:6b:a9:d7:1a:7d:df:
         20:68:9f:fb:df:72:67:6c:b2:a0:82:4d:3c:97:ed:de:04:24:
         b5:ae:66:66:77:1f:6a:62:7d:8e:1c:52:1f:90:90:1c:97:06:
         97:68:d1:89:f8:cb:bc:28:af:73:87:f3:5a:16:6c:dc:07:57:
         21:1f:94:ae:5b:f0:85:a4:37:15:48:76:af:c7:79:30:b7:23:
         b6:e9:2a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:00:25 2024 by rpki-client on console-ams.rpki-client.org