Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
File:                     UoPLS4EObFkudHmvpCEY91XH-H4.mft (raw, json)
Hash identifier:          kRe2nW2BqwHLv+uv+pAghLhwOCQpalQ23g3J8WfD7qI=
Subject key identifier:   55:6A:60:44:0A:93:33:DD:49:C8:E8:95:F9:93:ED:02:10:74:0F:6F
Authority key identifier: 52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
Certificate issuer:       /CN=5283cb4b810e6c592e7479afa42118f755c7f87e
Certificate serial:       01901EFD875CD940CF278F618E483E9755F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
Manifest number:          015C
Signing time:             Sun 16 Jun 2024 03:00:49 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:49 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:49 +0000
Files and hashes:         1: Mp8i2HAPbOgjY6AhLP-eZTsYH14.roa (hash: NWiQMvbW3aGIQrfEjRVZnOImLOPh0+VWqZbI4C3givU=)
                          2: UoPLS4EObFkudHmvpCEY91XH-H4.crl (hash: koOOHijhf/q0Y7RRDIvbr6+C2B6z4b4M0PS3nkBsjxc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:87:5c:d9:40:cf:27:8f:61:8e:48:3e:97:55:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5283cb4b810e6c592e7479afa42118f755c7f87e
        Validity
            Not Before: Jun 16 03:00:49 2024 GMT
            Not After : Jun 17 03:00:49 2024 GMT
        Subject: CN=556a60440a9333dd49c8e895f993ed0210740f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:b4:20:fd:aa:9f:41:28:25:0d:17:78:b3:
                    da:bd:a4:2b:da:aa:90:f4:ce:2c:91:e7:7a:5d:01:
                    18:2f:38:82:46:72:f9:1d:cb:22:c1:a1:90:01:22:
                    e0:23:76:79:28:a3:98:2d:dc:7b:c8:5f:86:b7:aa:
                    3d:f7:da:f5:19:51:14:02:e4:71:1d:de:27:16:4c:
                    1c:23:fe:16:1d:52:b9:6a:ce:48:ab:6a:cf:2d:15:
                    b1:24:27:bf:a9:93:ba:fc:c3:ad:02:26:52:8e:96:
                    a7:53:3b:29:31:0a:78:9a:88:34:36:aa:eb:bc:91:
                    8e:01:30:cc:35:27:17:26:c5:9a:75:8c:cd:ae:9a:
                    2f:f3:c8:06:3f:15:1c:bd:8f:fa:47:3e:f5:3c:ef:
                    08:84:24:c6:d2:e7:69:bb:aa:1c:b1:1b:67:13:bd:
                    87:ba:3e:8a:e3:0b:cd:1b:11:89:76:13:5e:fa:ce:
                    e0:72:87:38:81:c1:a5:4e:3b:71:bc:ce:21:69:33:
                    93:d1:f9:e4:42:80:b1:61:5f:1f:01:a7:d7:c8:20:
                    6a:0c:34:06:ce:16:74:7d:a9:b0:77:55:62:dc:63:
                    00:27:1d:76:6c:f3:2e:ed:60:94:6a:c0:b5:cb:8c:
                    c3:ed:85:63:e2:fc:f5:d9:a6:0f:53:0f:20:b5:2b:
                    85:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6A:60:44:0A:93:33:DD:49:C8:E8:95:F9:93:ED:02:10:74:0F:6F
            X509v3 Authority Key Identifier:
                keyid:52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:8f:46:4c:5b:88:65:e4:5c:66:05:ef:5d:46:43:ab:5b:8e:
         e1:dc:ab:55:e6:0e:5a:c6:c9:66:da:bb:55:ba:2e:20:41:78:
         dd:ef:34:7b:f2:6a:b0:e6:ed:d8:ea:90:9d:52:69:0e:8f:02:
         d3:52:83:76:62:03:97:72:f1:e6:a6:cf:4c:6b:9d:08:ef:6e:
         55:bc:39:08:0c:9a:22:1e:a0:77:ff:b5:53:ef:90:53:1f:f1:
         c1:48:fc:79:1a:18:ff:7b:53:9b:00:bd:17:fc:2b:a5:25:0b:
         a7:ba:20:37:10:28:be:05:f8:45:79:8f:72:0f:1c:31:1d:86:
         53:1c:14:a5:0a:e4:c3:e5:02:1a:10:77:85:57:ed:2c:0f:7e:
         e3:8c:ef:fd:d9:1a:62:a2:2b:6d:0c:43:72:9e:9f:ef:7e:29:
         11:0c:7e:1b:5b:d2:21:62:8d:78:c3:71:e5:d4:8f:f2:3b:90:
         2d:bd:9f:cb:ab:e5:a9:f8:9b:88:1a:70:c9:e9:1a:cd:10:2b:
         50:58:31:da:3a:ab:6e:5b:ee:f1:b5:ea:f4:29:51:9f:96:eb:
         5c:b1:b1:e2:0f:c6:b7:46:60:1f:26:cb:8a:3f:28:6c:06:5a:
         71:72:79:9b:75:c1:62:ec:60:35:8e:0d:dc:f6:74:8c:5f:70:
         3b:7a:db:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:14 2024 by rpki-client on console-fra.rpki-client.org