Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
File:                     UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft (raw, json)
Hash identifier:          ABAztyoOBpZMvpQz4vDp5dJySVN7EKUc9vDIU/5JDmQ=
Subject key identifier:   4B:7E:CB:02:F3:1B:38:63:ED:18:DC:A7:F4:BC:5E:EB:AE:62:05:06
Authority key identifier: 52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61
Certificate issuer:       /CN=52f941173564a09b7cf8efdd9875614262a7dd61
Certificate serial:       01901B209CDDFD713BE55C8ED0B9824587CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
Manifest number:          08AA
Signing time:             Sat 15 Jun 2024 09:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 09:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 09:00:40 +0000
Files and hashes:         1: UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl (hash: x8qq3ZZGoQAcU2gtKx8aZ5d+GWlwuAyo0UFz3pkyQ6U=)
                          2: ZA5-rroQl_4ApuEK0haugCjFgiI.roa (hash: tVP5vUDdFUU/qazKEx75AJuFHlybV7SFim9pQRw0QBY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:20:9c:dd:fd:71:3b:e5:5c:8e:d0:b9:82:45:87:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f941173564a09b7cf8efdd9875614262a7dd61
        Validity
            Not Before: Jun 15 09:00:40 2024 GMT
            Not After : Jun 16 09:00:40 2024 GMT
        Subject: CN=4b7ecb02f31b3863ed18dca7f4bc5eebae620506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ea:ca:90:34:62:42:36:53:35:39:82:82:d6:
                    93:c9:b6:e5:33:a8:3f:85:61:ba:93:37:70:db:3f:
                    be:ce:2e:34:1f:ef:f7:68:a7:f2:02:9a:87:a6:8d:
                    6a:c0:d5:0a:39:4e:93:9c:e2:ec:f2:ed:a9:6b:0a:
                    5c:d8:90:d7:53:92:55:ca:eb:5e:ab:5d:52:91:47:
                    58:30:3d:11:fe:f4:7a:3d:df:22:06:d0:a5:80:f1:
                    54:09:99:bf:c1:10:af:a2:c4:24:c0:21:6a:6b:9b:
                    81:21:ac:ed:e2:28:b8:07:1a:86:92:33:3d:21:80:
                    f7:e4:36:21:63:e4:de:f3:dc:db:75:d7:aa:1d:57:
                    c0:75:d6:fd:3b:8b:5c:e4:c0:45:ff:8f:8b:c9:19:
                    a8:48:12:c3:aa:55:85:20:4f:82:59:09:ce:1c:84:
                    76:eb:13:5e:0b:11:e8:38:de:78:73:e1:79:7a:e1:
                    a5:ca:0c:70:a3:2b:80:b0:4f:f2:4a:b7:28:f9:ad:
                    21:38:c6:e2:32:ae:50:fe:3a:a9:22:c6:ba:2d:eb:
                    78:32:0f:36:48:c1:6c:0b:b3:1f:9b:ba:d7:b0:6a:
                    47:c0:95:9a:10:81:5d:f8:e5:77:c7:b4:6a:a1:de:
                    84:e9:a3:76:7c:66:67:d8:12:64:6a:31:6a:73:8b:
                    27:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7E:CB:02:F3:1B:38:63:ED:18:DC:A7:F4:BC:5E:EB:AE:62:05:06
            X509v3 Authority Key Identifier:
                keyid:52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:46:ba:93:12:e9:69:ea:cd:59:4d:61:80:53:2a:03:6a:1b:
         a2:c4:cd:a6:d2:3a:74:d0:0e:00:be:1b:19:4a:49:b9:9a:21:
         67:8c:20:a6:45:21:fd:e7:11:3c:45:e4:aa:e4:ac:ab:0e:45:
         35:23:51:ec:a1:37:f6:6c:f1:5e:7b:67:2c:e9:31:c8:4c:74:
         22:66:06:5e:55:2c:2e:7b:f3:09:79:13:af:8d:4f:3b:35:bd:
         d3:0f:f7:ca:1e:33:e8:cc:9b:44:1e:52:6c:c6:49:e0:8c:a0:
         2f:be:8e:9d:63:b7:93:fe:98:c7:cb:cc:c5:52:69:95:f6:79:
         f5:80:65:f9:f7:f9:fa:fd:27:7a:55:f4:3a:46:35:e2:0c:1e:
         0d:18:f8:23:97:93:61:b5:2c:2e:83:27:49:96:f9:1e:f7:2d:
         48:a5:f9:31:7a:ea:7b:a2:2b:d0:50:66:b5:0c:12:99:ab:bf:
         6c:3d:94:8d:ac:81:93:5b:d1:9a:3b:d6:51:87:fa:29:e8:b0:
         bc:0a:94:01:c3:d6:cb:f9:7c:b4:cc:93:7a:10:7a:39:3e:7f:
         92:47:3d:83:e6:e4:08:f1:64:e1:46:d2:48:1d:76:d1:9a:5c:
         d0:8a:c4:93:d0:63:57:6e:9d:1b:a8:aa:29:73:d5:8f:52:cc:
         27:9e:4a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:10:43 2024 by rpki-client on console-ams.rpki-client.org