Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
File:                     udkwX8vVnNpLaPiI32AgSFt06YI.mft (raw, json)
Hash identifier:          vR3SSMEyMeTnBZqPx1PL9GpZt3+tejXV77BkT4B9TFk=
Subject key identifier:   E7:B8:41:20:63:FE:70:CA:4A:58:BC:97:5A:F5:C9:A7:A3:B5:9A:6A
Authority key identifier: B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
Certificate issuer:       /CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Certificate serial:       019041529D81A927AAF9E272CDEE528151A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
Manifest number:          034A
Signing time:             Sat 22 Jun 2024 19:00:51 +0000
Manifest this update:     Sat 22 Jun 2024 19:00:51 +0000
Manifest next update:     Sun 23 Jun 2024 19:00:51 +0000
Files and hashes:         1: jHutqeBCZ6lYzkzKlkA6itKuPqU.roa (hash: vUgbxkzzJuNmhXQdGnzqSmrQSas3btoWfD7OTa23Jco=)
                          2: udkwX8vVnNpLaPiI32AgSFt06YI.crl (hash: lyRAj/69UKWe7XaU/MMtG7+SqJ/aOKEeWBQfzJHA8+s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:52:9d:81:a9:27:aa:f9:e2:72:cd:ee:52:81:51:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9d9305fcbd59cda4b68f888df6020485b74e982
        Validity
            Not Before: Jun 22 19:00:51 2024 GMT
            Not After : Jun 23 19:00:51 2024 GMT
        Subject: CN=e7b8412063fe70ca4a58bc975af5c9a7a3b59a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c0:bf:9b:0e:f3:e9:70:6f:a6:5a:0e:0d:44:
                    fc:6c:87:d2:c7:e3:6a:9a:39:76:3d:b6:18:f5:08:
                    5f:3d:62:75:19:84:8d:41:8b:bf:d1:ff:81:ff:74:
                    95:6b:97:0e:44:30:da:6c:2d:2f:39:77:83:97:ca:
                    3d:c3:7a:07:55:79:96:d2:a7:a7:0c:33:14:1d:31:
                    ae:0b:8d:7e:c6:a2:79:12:29:71:ff:00:ea:da:52:
                    48:e9:0f:5d:0d:9f:86:90:ad:8d:12:03:69:6e:86:
                    8a:60:b6:87:f7:35:3c:3b:99:17:c8:93:f2:29:6f:
                    cb:89:73:f1:f5:6a:f1:b7:8a:35:21:03:1d:a7:bb:
                    ba:28:9c:52:5d:f2:cb:5f:33:bb:9a:0e:e1:d5:1b:
                    01:1e:22:78:35:20:25:0d:84:4d:53:72:4d:43:a6:
                    7d:a0:2d:24:ca:4f:0a:37:33:be:da:09:1b:ee:75:
                    64:3a:d2:08:71:78:d4:33:23:24:1e:aa:e9:23:5d:
                    41:50:78:f6:be:06:78:07:f1:68:51:19:e5:b1:4d:
                    ba:f5:4e:c1:59:10:49:20:55:67:63:5a:fe:f0:69:
                    d9:bb:ba:7c:39:f2:0e:44:f1:ef:bd:b0:ab:15:e7:
                    84:7d:71:4f:36:b7:1e:94:30:eb:51:37:0f:28:7d:
                    a1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B8:41:20:63:FE:70:CA:4A:58:BC:97:5A:F5:C9:A7:A3:B5:9A:6A
            X509v3 Authority Key Identifier:
                keyid:B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b4:c5:7c:08:7d:74:cf:d4:e1:dc:07:c0:41:35:0c:b5:17:
         94:42:ed:2f:89:78:d4:c1:18:f8:de:3d:39:70:f2:44:01:46:
         00:97:06:55:07:20:51:a3:a4:c4:b4:71:e9:f9:c0:ed:42:0f:
         ee:a9:37:eb:49:f2:5f:9a:44:a7:4d:92:ac:60:78:1e:a2:fe:
         4e:d8:48:e1:9f:d0:6f:02:22:6a:d6:c4:77:1e:c0:d4:94:0a:
         35:e0:34:5e:85:d8:4f:1b:5c:3e:69:89:25:d7:e6:a9:aa:01:
         f4:d2:7f:5e:09:13:14:3d:dc:b9:7f:39:5b:02:42:ba:45:88:
         4c:f9:e0:12:85:bb:25:26:b4:2a:5e:13:f3:10:35:1c:9a:ac:
         df:10:89:57:d4:45:0a:3f:c6:99:06:bf:17:f4:87:6c:9a:2f:
         36:a7:8b:f6:11:06:ce:18:5b:24:0d:30:d5:48:75:f2:5e:de:
         7a:92:7c:00:bb:6a:94:1a:4d:ba:a5:d9:75:6b:17:aa:8f:3d:
         45:11:62:b1:d3:9b:77:f3:b5:d1:bf:48:ae:05:c6:f3:01:c0:
         c0:9f:54:59:61:53:48:5e:c0:4e:ef:8e:43:e3:0a:ad:55:d2:
         8c:f4:9a:44:a4:d7:63:e0:57:40:38:d8:54:80:2a:66:d2:10:
         ff:e9:86:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:13:25 2024 by rpki-client on console-fra.rpki-client.org