Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
File:                     UhqgJHWNjRBOEXnFUDmBZjav4pg.mft (raw, json)
Hash identifier:          wR+s7S//6ga6WqPNjBLzeBjzQHv9Fe8SDtlJyHvABPY=
Subject key identifier:   D7:C9:CE:D9:0F:64:DA:D7:78:DE:44:7C:FB:B1:E5:DF:4D:3B:4B:70
Authority key identifier: 52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98
Certificate issuer:       /CN=521aa024758d8d104e1179c55039816636afe298
Certificate serial:       01901DED44B89C8408E4B43EEA9591AB9502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:03:27 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:27 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:27 +0000
Files and hashes:         1: OObYj1MtfaUxU3Kx1PSrToHfdOs.roa (hash: xc1o0NnB8rfuCRz3Pu2CSMvYQuuHgNHu+pfsV0k5a5g=)
                          2: UhqgJHWNjRBOEXnFUDmBZjav4pg.crl (hash: OmXetdgmp8KUyltDbna64riwMtijrvK8T2sU01uPttk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:44:b8:9c:84:08:e4:b4:3e:ea:95:91:ab:95:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521aa024758d8d104e1179c55039816636afe298
        Validity
            Not Before: Jun 15 22:03:27 2024 GMT
            Not After : Jun 16 22:03:27 2024 GMT
        Subject: CN=d7c9ced90f64dad778de447cfbb1e5df4d3b4b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dc:7a:e6:b2:74:76:d5:97:07:33:a4:a8:86:
                    8d:28:8c:f5:7b:cd:04:5f:80:53:f4:ad:f9:43:15:
                    17:ed:eb:bc:cd:01:90:40:a9:5a:a4:d8:03:5f:1a:
                    0a:41:b0:2c:3d:e1:38:ef:ef:e4:18:da:af:35:13:
                    f9:0e:5c:ea:6d:bb:47:61:25:f0:32:d4:d1:0b:ac:
                    ae:ef:5e:99:1b:ad:92:0d:8c:88:98:3c:8c:15:ac:
                    36:2e:71:af:09:33:15:b2:ea:33:fa:9b:55:b9:de:
                    7e:6c:3f:ac:f0:3d:fb:05:d2:3c:13:e0:62:b3:5e:
                    bf:f4:fa:07:27:7d:5e:58:1e:54:40:df:97:59:8b:
                    21:46:86:de:b5:9a:3b:98:8a:51:cc:a0:b7:d8:6b:
                    63:f5:4e:42:04:2d:18:5b:a7:d5:66:30:5a:76:d2:
                    9e:bb:0f:a1:fa:af:b7:e7:56:81:7a:9a:b3:77:99:
                    63:60:38:bc:a4:25:6d:cb:d9:5b:2c:c1:eb:41:34:
                    31:ea:82:bb:fb:f4:0b:79:96:6c:9f:ee:5b:a1:06:
                    85:9c:34:2c:a4:82:6b:2e:b8:d1:6d:d8:fb:07:cf:
                    66:22:97:ee:c0:d7:e4:32:f4:b6:43:a4:13:7e:be:
                    7d:b6:a3:87:fc:70:6f:f4:91:09:ea:b0:df:6f:7d:
                    de:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C9:CE:D9:0F:64:DA:D7:78:DE:44:7C:FB:B1:E5:DF:4D:3B:4B:70
            X509v3 Authority Key Identifier:
                keyid:52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:85:cc:ca:ea:95:7d:d2:92:5e:fe:76:2d:d8:45:98:d9:0b:
         49:b6:9c:e7:c3:92:01:21:6b:50:3a:cb:24:da:7f:71:f5:37:
         c7:26:81:bc:ab:2b:0a:68:f0:53:e5:3a:e6:08:c7:75:2c:30:
         a3:44:cd:86:4a:c3:a5:50:49:b3:1a:39:24:6b:fa:1b:38:81:
         78:5b:c8:2d:e2:4b:64:74:ad:84:42:13:aa:76:f9:61:54:93:
         4b:4b:0d:35:3f:2d:80:a8:77:d1:94:7e:38:43:1a:42:f6:0c:
         2b:19:52:39:e2:f9:ca:f3:52:20:73:18:bc:85:86:0b:8e:df:
         5f:67:ef:99:76:92:bc:e6:4d:1a:99:ad:4d:75:89:73:0c:32:
         fd:d3:cd:0e:0e:64:69:d3:05:44:83:7f:cc:31:6f:65:46:30:
         52:cf:9b:db:f0:34:2f:9b:86:51:8d:e3:74:96:cd:72:79:2c:
         01:3c:93:c5:e8:51:21:1e:e9:8d:74:7b:2e:56:d4:65:35:aa:
         ef:6c:b9:37:3f:af:19:46:47:c1:17:25:d0:11:78:4e:48:b1:
         47:74:5f:cd:11:d2:e2:e3:f8:7c:eb:6f:05:ca:04:e4:e6:ce:
         4e:f1:b9:7a:96:70:1a:1e:9f:4e:b8:69:49:4c:96:eb:08:57:
         3c:6b:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:57:01 2024 by rpki-client on console-fra.rpki-client.org