Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File:                     UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier:          RwcTZVtW/4LdgpQ9bu9ir/elG9LCr9GRnyldahkCRGM=
Subject key identifier:   10:D1:93:58:D3:BE:5C:23:28:64:2E:B6:C0:AB:58:20:66:12:CA:1C
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer:       /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial:       019049B113CE98C6EB0280F4F01204DD5E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number:          11DF
Signing time:             Mon 24 Jun 2024 10:01:00 +0000
Manifest this update:     Mon 24 Jun 2024 10:01:00 +0000
Manifest next update:     Tue 25 Jun 2024 10:01:00 +0000
Files and hashes:         1: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: XwkxvEVy+InutyDoIAJxsdouA/Fvr6n17/NV2ycy1/s=)
                          2: d3tSTilexIW7SVMjXQynX84z4RE.roa (hash: VUOc6Xp9N6t43PWd1fkDDgcZkgFTTM+CTNIQDIowLqU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:b1:13:ce:98:c6:eb:02:80:f4:f0:12:04:dd:5e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
        Validity
            Not Before: Jun 24 10:01:00 2024 GMT
            Not After : Jun 25 10:01:00 2024 GMT
        Subject: CN=10d19358d3be5c2328642eb6c0ab58206612ca1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:be:52:96:0e:a0:84:6f:2a:de:21:a5:c9:
                    e8:ee:26:b0:83:a4:3b:a6:aa:6b:f2:23:01:c6:4b:
                    ff:94:9f:43:cb:d7:18:ff:d0:74:28:6f:02:37:9d:
                    bc:a4:9d:f0:29:7e:61:14:7f:a2:a8:7b:f9:c1:6d:
                    7b:a8:65:73:5a:14:14:08:ca:67:30:5d:7e:b4:49:
                    14:79:5e:2a:5c:b6:86:3f:8f:56:82:a6:17:dd:c2:
                    b1:cd:f5:e8:7b:7a:12:89:7c:d3:55:03:93:59:2a:
                    8b:b2:d8:00:02:b0:f6:b4:b0:e4:64:74:c0:44:ac:
                    3e:e4:40:fc:e1:20:8c:5c:d6:68:73:ac:c0:9d:4b:
                    01:7f:10:57:b4:51:15:48:dd:bb:7a:b1:ea:46:4b:
                    3e:89:e0:da:1e:56:a2:8d:49:ed:e5:d7:23:95:22:
                    97:9d:3d:2b:b3:3a:0f:ea:78:cd:38:7d:de:e9:b0:
                    b9:d4:85:32:4e:0f:ac:bd:62:0e:1a:e7:b9:d3:83:
                    03:11:ea:e7:4e:3a:d0:28:3c:c6:27:f8:b6:63:5e:
                    fd:19:ad:72:6c:5f:cc:f8:ea:7b:1d:cb:85:b8:fe:
                    e8:6f:e8:25:20:63:9b:fa:0d:4a:3b:12:6a:80:d0:
                    26:78:83:21:d7:36:74:7c:7c:7f:0b:bb:95:dd:f4:
                    81:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D1:93:58:D3:BE:5C:23:28:64:2E:B6:C0:AB:58:20:66:12:CA:1C
            X509v3 Authority Key Identifier:
                keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:d4:03:b5:06:dc:48:ea:9c:23:cb:5a:ce:d7:d8:db:2a:c2:
         fa:f1:a3:8e:57:5c:c3:4a:b7:27:fe:cb:cc:d8:ab:4d:74:2b:
         d0:df:2b:05:50:89:1a:41:20:ee:ad:a7:29:a3:85:42:ab:f3:
         11:c8:61:ad:ca:68:2a:1e:ae:2f:26:8a:1b:7c:98:dc:52:8b:
         73:73:33:bb:84:fc:16:2d:1e:58:3e:58:c2:29:e5:87:0f:81:
         8c:b0:e2:c5:5d:2a:83:35:69:0a:d8:36:5f:8b:b4:3a:c2:96:
         0f:4d:61:57:f9:16:25:65:67:5f:1a:86:80:be:d1:d3:42:30:
         fa:3e:9f:f0:f2:85:0e:f7:fd:6d:07:1c:c6:e0:ff:95:6d:b1:
         be:63:b1:21:ef:2e:12:bc:c2:ab:89:ef:4e:d5:69:ae:e9:6b:
         8a:46:71:c9:49:6b:39:64:93:15:ff:35:df:f1:73:70:d7:91:
         c5:95:78:ec:20:9e:53:21:af:76:37:b6:03:c6:f3:ae:87:f8:
         cf:a4:0b:f2:f4:7c:dd:07:8d:c6:c3:43:2e:67:e4:97:93:74:
         e6:f7:52:44:ef:91:38:4b:ad:b7:e9:4c:70:d2:5b:45:64:8a:
         26:3f:f2:a1:f2:a1:cd:04:0d:38:6b:ad:07:3c:72:36:bd:c2:
         27:07:ea:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:24:23 2024 by rpki-client on console-ams.rpki-client.org