Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
File:                     mUqt73Cb43uczULMK4xzLDlxUPo.mft (raw, json)
Hash identifier:          IgXtxUZ/+vISyafq4pc5LHk7/lCUzdONzyS/0eMJdbk=
Subject key identifier:   10:29:D1:C8:0C:55:DB:89:46:F9:35:6C:74:A2:6B:99:72:A4:FC:BD
Authority key identifier: 99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
Certificate issuer:       /CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Certificate serial:       01904566204518956E702D91144799DDB258
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
Manifest number:          11BD
Signing time:             Sun 23 Jun 2024 14:00:39 +0000
Manifest this update:     Sun 23 Jun 2024 14:00:39 +0000
Manifest next update:     Mon 24 Jun 2024 14:00:39 +0000
Files and hashes:         1: mUqt73Cb43uczULMK4xzLDlxUPo.crl (hash: k9wElhINnTiPgfPKUzntsaZHmxmwAz96UygjwLA56TQ=)
                          2: okHFH0PtGkm6w5SBJNrvnsrQYGE.roa (hash: bVmExqKUkuUOueAZgUAzFQVo+Uj5yS+pb/uDHRnfhB4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:20:45:18:95:6e:70:2d:91:14:47:99:dd:b2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994aadef709be37b9ccd42cc2b8c732c397150fa
        Validity
            Not Before: Jun 23 14:00:39 2024 GMT
            Not After : Jun 24 14:00:39 2024 GMT
        Subject: CN=1029d1c80c55db8946f9356c74a26b9972a4fcbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:47:30:1d:58:db:56:59:e7:54:5f:55:b6:bc:
                    2c:5a:55:73:22:53:39:b0:9a:39:44:a8:52:ce:a4:
                    63:ce:f6:c8:be:93:a9:53:ac:03:6e:a9:2c:d3:a5:
                    24:0b:1d:71:af:a9:47:3e:bd:7f:93:ad:f0:b5:0c:
                    88:98:da:b6:44:6b:6b:bf:fa:40:d0:4d:aa:2e:4c:
                    7e:cb:32:24:60:be:77:84:52:26:f7:c2:73:12:57:
                    27:26:1c:fc:ff:16:4c:a8:cc:53:4f:62:65:72:2f:
                    30:70:95:16:22:ba:60:b0:06:37:df:50:e4:1c:00:
                    36:9b:7f:bd:09:fe:ac:eb:d9:91:ac:a3:e3:d9:7a:
                    51:83:2d:31:6c:de:fe:71:58:5c:63:ad:eb:8e:65:
                    0c:67:82:81:d7:2a:9d:36:c3:41:96:cd:26:9e:2b:
                    37:c2:aa:11:be:63:a0:1f:aa:57:0e:d3:9c:a2:77:
                    db:e7:62:7f:fa:2f:a3:01:92:fd:0c:35:92:29:2a:
                    9c:a3:28:66:80:6c:1f:f1:f5:4b:24:c4:24:81:9c:
                    a1:79:03:d4:d9:f3:2d:4e:63:83:d2:66:20:1d:a0:
                    e3:fd:a2:6d:1e:8d:fb:31:f9:01:1d:bf:45:8b:0e:
                    83:cf:76:0b:ad:43:63:81:5e:fd:15:e6:bf:0b:e4:
                    dc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:29:D1:C8:0C:55:DB:89:46:F9:35:6C:74:A2:6B:99:72:A4:FC:BD
            X509v3 Authority Key Identifier:
                keyid:99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:19:93:aa:e5:5b:34:5d:83:5f:c2:e3:48:ad:77:90:0c:b1:
         88:78:64:3e:67:e8:e0:04:90:53:6c:89:e5:66:0b:71:3a:8e:
         f9:a9:3e:d7:1b:a1:16:d6:08:10:6f:ac:17:fe:93:e5:41:04:
         76:eb:f8:b5:e1:d7:a9:2d:bb:35:d8:77:a7:24:5f:2c:8c:0b:
         09:6b:9e:01:10:44:0a:10:b2:51:bc:51:2b:30:0b:77:66:d3:
         d0:46:1a:7a:a7:ce:45:aa:d5:ee:74:dd:e3:e6:da:12:b1:59:
         11:37:0d:49:24:15:0f:a1:39:54:28:73:bb:ca:f6:d7:d2:98:
         79:70:da:70:be:07:dc:c4:1e:20:9e:d6:e0:be:67:ea:6a:a8:
         00:a2:d6:7d:ab:76:4d:5e:f5:f8:db:d5:5e:1e:ed:b5:08:69:
         a9:84:7d:25:49:62:f2:3e:87:1d:7b:d7:9e:12:8e:8e:15:e4:
         e7:90:a6:ce:7d:5f:60:cd:ce:b0:60:86:2e:85:9b:d7:7e:40:
         a9:c7:b1:07:27:16:0f:aa:9c:f5:e0:14:42:69:3c:46:02:9a:
         20:d3:56:ec:8c:32:87:67:c3:6c:1c:f2:0d:04:54:4e:2e:14:
         a1:78:e9:8d:49:98:0b:93:70:7f:cc:42:75:e5:81:b6:d5:f8:
         0d:b2:f0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:53:24 2024 by rpki-client on console-ams.rpki-client.org