Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
File:                     UZpqm-tS7_KWRGWblDKgpZI3MUw.mft (raw, json)
Hash identifier:          x2XWmxD0mxE2secKEBosImmsQ79ivSOTJuEkklhpOcE=
Subject key identifier:   CE:A0:26:98:DC:BA:13:52:05:64:8F:C3:18:48:CC:4E:08:58:00:7B
Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
Certificate issuer:       /CN=519a6a9beb52eff29644659b9432a0a59237314c
Certificate serial:       01901CD8A81B3A4F6BEC74898839DB8951A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
Manifest number:          0F10
Signing time:             Sat 15 Jun 2024 17:01:18 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:18 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:18 +0000
Files and hashes:         1: UZpqm-tS7_KWRGWblDKgpZI3MUw.crl (hash: 3cYEf3trS8vfMsoCGSCxSEHkq+0efcFuDYaKgOlDAnQ=)
                          2: eHKwir3tRScU2l5YJygovbUtM60.roa (hash: f54bXhuoZx5fJ4vdHPkJriyvzNbBvm0ze/yUg9S4ZX8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:a8:1b:3a:4f:6b:ec:74:89:88:39:db:89:51:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c
        Validity
            Not Before: Jun 15 17:01:18 2024 GMT
            Not After : Jun 16 17:01:18 2024 GMT
        Subject: CN=cea02698dcba135205648fc31848cc4e0858007b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8a:38:0e:d4:72:ea:aa:9b:0b:04:6f:e3:6e:
                    6b:49:36:84:a0:b2:62:99:e0:e4:e8:92:3e:98:fa:
                    d2:be:2f:7d:f6:8d:e3:31:a3:88:cd:c1:25:44:fd:
                    d4:f5:dc:4c:5f:43:27:51:5d:85:5d:cb:b2:28:10:
                    86:18:c9:85:0c:d6:81:ca:a9:0f:3c:ca:87:db:44:
                    9b:bb:10:f1:40:22:55:75:d7:f2:5c:ef:a4:6f:7a:
                    ae:52:ed:15:40:11:69:07:04:cb:88:e9:e0:cd:ff:
                    bb:ea:10:7f:7d:91:76:47:28:7e:a1:e3:45:56:76:
                    3d:38:cb:71:63:ca:86:8c:4a:41:bf:32:a6:a2:87:
                    8c:8e:bb:50:94:a8:3e:d9:6c:ed:f4:51:cd:7e:5d:
                    db:28:f2:e0:ab:93:0d:79:d1:47:b5:1d:71:0d:fb:
                    94:67:b1:40:91:10:e5:e7:6e:47:58:9f:ec:ba:00:
                    51:ce:0d:fa:fc:6b:84:58:b0:47:27:fd:b5:6a:4c:
                    31:e3:d1:7b:65:97:f0:49:1f:1e:27:ea:c3:5f:c1:
                    e1:17:08:00:5a:ac:f9:86:23:d5:4f:ef:95:c3:fb:
                    43:58:c0:57:6a:55:3d:99:d5:41:e2:11:b7:6c:5e:
                    7e:6b:d9:bd:40:d0:40:c1:57:be:4f:ac:a0:55:bd:
                    1e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A0:26:98:DC:BA:13:52:05:64:8F:C3:18:48:CC:4E:08:58:00:7B
            X509v3 Authority Key Identifier:
                keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:cb:ca:a4:6d:6b:21:a0:cd:f1:73:25:95:32:7b:4a:1c:b3:
         24:bb:a6:c9:1c:1d:db:fc:f6:79:24:e1:76:d5:f5:43:51:be:
         3a:34:f8:a7:51:56:d5:4d:ae:92:cc:6d:41:e9:0f:52:10:a0:
         fc:f9:22:56:5a:77:cc:5a:5a:21:bf:92:64:18:c2:ba:94:29:
         22:93:e5:33:29:77:d0:58:63:f9:2b:43:91:47:d5:fc:7f:e5:
         5d:38:f4:cb:aa:b4:1c:8d:00:15:dc:8e:17:64:6c:a1:97:da:
         b8:10:ea:ab:64:12:c4:0c:f8:de:f4:be:95:3a:ee:90:e1:ce:
         21:06:b8:cc:18:a9:55:10:44:8b:64:23:24:db:ed:67:4c:c1:
         3d:2e:32:34:31:cb:b4:ec:bc:fa:83:a0:23:8d:1a:32:d6:85:
         ba:c3:06:e9:ed:30:14:16:b4:5d:7a:46:a8:2e:eb:96:86:c3:
         b2:bd:7f:69:d9:79:75:b0:a9:46:21:dc:57:33:13:07:ed:95:
         66:9a:4f:fe:f6:a6:f2:41:20:d1:c6:d6:91:02:40:ea:8f:98:
         01:60:ce:76:db:35:d2:b5:2c:d1:6b:d2:17:9b:37:6c:a4:44:
         e3:31:fb:bd:29:ad:9d:30:83:3a:fd:3c:a5:bf:c1:55:40:9b:
         63:da:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:58:38 2024 by rpki-client on console-fra.rpki-client.org