Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File:                     uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier:          y4vkskWho91JXVwbfHZxGHcfTO/8R0+CcBHIuA3nsXY=
Subject key identifier:   FA:E2:3F:76:68:A2:7D:4F:5A:F9:C3:B4:67:0A:E7:89:FD:52:76:3A
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer:       /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial:       01901EC70E3C47DBEDCCA3F155BB2E0C82C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number:          0482
Signing time:             Sun 16 Jun 2024 02:01:20 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:20 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:20 +0000
Files and hashes:         1: MeeFMR6h8j5NOApXUeH2pn9n07g.roa (hash: 1EqjTTuSj4xp6sClac4cmsK1t06t3VYOVB0JX9aOAKk=)
                          2: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: TCYBznSfX1Lwtda/7UwbPhExxN3eGBHOagLifUXa8AU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:0e:3c:47:db:ed:cc:a3:f1:55:bb:2e:0c:82:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
        Validity
            Not Before: Jun 16 02:01:20 2024 GMT
            Not After : Jun 17 02:01:20 2024 GMT
        Subject: CN=fae23f7668a27d4f5af9c3b4670ae789fd52763a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:11:08:4d:53:ba:69:d2:be:86:b5:63:c7:df:
                    f3:69:e7:a8:77:09:e7:ad:fc:58:8f:0c:18:1d:a8:
                    27:f6:27:e9:c2:aa:2b:cb:36:af:56:e9:e2:5c:53:
                    12:c8:f7:ba:d0:56:18:b2:39:58:8a:cb:76:30:d0:
                    fc:b7:72:c7:e4:e3:3b:37:a9:6d:7c:fb:13:4a:35:
                    09:39:75:ab:03:41:b8:0a:a5:2f:fe:a0:65:f1:f4:
                    79:c5:20:21:c9:a3:c5:6e:21:62:fa:7c:8b:22:d9:
                    d5:28:b7:fd:95:53:0b:1f:ab:ac:23:6e:df:5a:53:
                    db:2d:42:83:d9:d3:11:c2:4c:80:42:dc:cf:a9:d4:
                    09:6f:17:18:e7:7d:c9:c1:f9:75:4c:8c:0d:cf:1a:
                    46:c9:e1:ce:6f:98:3e:11:b5:55:d6:5a:6a:a5:0d:
                    af:b5:51:c1:b8:ca:76:cc:85:a3:48:bb:c0:d1:35:
                    23:67:ab:82:32:23:c1:ab:8e:26:0d:97:de:6d:81:
                    96:31:d9:ae:6c:ba:6e:76:1e:b3:6d:bc:e6:42:3d:
                    45:e0:03:09:cb:5f:e8:63:e9:7a:32:49:c7:40:5e:
                    a1:89:14:57:82:da:ca:31:87:6b:2f:3e:b4:8d:54:
                    6c:b2:dc:1b:4e:8e:19:9f:f5:00:fb:85:1d:9b:7e:
                    15:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E2:3F:76:68:A2:7D:4F:5A:F9:C3:B4:67:0A:E7:89:FD:52:76:3A
            X509v3 Authority Key Identifier:
                keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ac:78:3e:bb:f1:2c:d2:65:f6:d3:0d:d8:b5:bc:74:9b:56:
         70:97:01:0c:65:a2:ae:95:1e:47:3c:f2:6a:f8:05:0d:87:2f:
         01:2b:2f:c0:04:80:5e:6d:ff:46:91:54:9a:61:a5:10:23:10:
         7a:d0:38:50:f4:13:64:5b:56:3f:13:53:27:c4:91:a3:98:85:
         bf:27:f0:42:56:f0:e7:2c:a3:cb:96:a7:3a:3e:68:2a:f7:6b:
         8b:01:2e:1b:19:08:76:6b:76:27:3b:a4:fd:22:51:d8:33:86:
         30:fd:65:e3:9a:c2:97:2e:68:12:9e:63:51:0b:68:9d:c5:0b:
         c6:32:01:26:03:2c:a4:6d:dd:21:2a:f1:19:73:85:e3:c3:c5:
         12:4f:77:7a:2d:30:5c:99:c2:32:e5:24:fd:5d:e3:b7:84:8f:
         b4:67:51:aa:ad:9d:77:1d:f9:4e:be:16:e0:e5:2d:26:c0:bb:
         f6:4c:ee:cb:6e:49:aa:8d:00:4d:fa:7c:55:c3:ec:b4:f6:29:
         c3:f5:6f:82:1f:2a:88:da:e1:29:e9:b2:98:a6:87:4d:8e:5c:
         1c:1c:1b:c0:04:65:25:60:ff:e8:dd:64:61:64:8d:7e:7b:66:
         48:d7:60:67:60:9f:07:72:d8:3e:64:86:d1:f9:21:9d:05:b3:
         94:46:41:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:03:52 2024 by rpki-client on console-fra.rpki-client.org