Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
File:                     UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft (raw, json)
Hash identifier:          atLysgjfzt/7mIajjQb2BVxvY05Vsatvd18o3WofKTk=
Subject key identifier:   31:4C:FB:AA:FA:29:AB:B6:DE:06:7A:5E:DD:F5:1B:F6:6D:E3:74:F1
Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
Certificate issuer:       /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Certificate serial:       01901B20FA2B535003A3B4BFE0D7474EE95F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 09:01:04 +0000
Manifest this update:     Sat 15 Jun 2024 09:01:04 +0000
Manifest next update:     Sun 16 Jun 2024 09:01:04 +0000
Files and hashes:         1: 7be3KlVWtY9E6GU_jdoff4miTvA.roa (hash: aMLMj+8Ya41+zKbG2YsMmVyVQc7xiiZxfUrEegbEr4Q=)
                          2: UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl (hash: 6wIizSNzH4mwPhUFjPtPgYWdJZ71SUBnM/hWc876S4M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:20:fa:2b:53:50:03:a3:b4:bf:e0:d7:47:4e:e9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
        Validity
            Not Before: Jun 15 09:01:04 2024 GMT
            Not After : Jun 16 09:01:04 2024 GMT
        Subject: CN=314cfbaafa29abb6de067a5eddf51bf66de374f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:38:23:50:f3:28:51:f8:af:48:20:c8:ba:
                    c5:3f:36:1b:85:7b:a1:aa:62:92:48:1e:39:7e:4c:
                    fc:f8:46:f4:46:2d:36:d9:57:22:70:7b:79:dc:c4:
                    de:bc:eb:2e:1c:7d:cd:67:2a:d7:95:3a:fd:37:76:
                    64:19:dd:a6:30:34:24:9c:9b:60:eb:8f:c7:87:91:
                    19:31:28:d5:90:69:da:95:89:ce:42:41:4e:94:f4:
                    b8:58:19:3c:d6:70:28:46:e5:92:d2:56:f0:57:88:
                    27:2c:10:5d:3c:fe:6b:72:d1:f1:45:0a:09:02:f2:
                    0b:52:82:2e:20:79:c0:ce:75:d5:05:bc:a9:c0:40:
                    fa:55:2f:8a:b6:a8:71:25:fd:da:21:b9:f1:4b:3d:
                    09:a3:98:34:ad:74:4e:19:9e:c4:06:85:87:f4:90:
                    ef:95:16:fb:d5:29:b6:0b:c6:85:eb:28:38:38:53:
                    ef:d3:ca:10:f3:2a:01:75:0e:81:b3:8b:ca:cc:57:
                    bf:2e:4d:18:06:44:25:c6:d9:18:68:e3:17:98:06:
                    cc:39:6f:f6:21:9e:bb:27:40:ff:31:48:c0:08:6c:
                    9b:7b:18:f5:96:e9:34:72:b1:b9:dc:8a:9d:98:8c:
                    82:94:37:22:16:97:c2:a7:d4:45:cb:fb:d3:d2:7a:
                    69:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4C:FB:AA:FA:29:AB:B6:DE:06:7A:5E:DD:F5:1B:F6:6D:E3:74:F1
            X509v3 Authority Key Identifier:
                keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c9:eb:09:d7:28:62:3c:35:10:20:b0:34:2d:54:c6:48:12:
         10:35:d1:2a:c6:c0:87:ec:02:56:c0:06:4d:4f:88:29:9b:f8:
         6f:60:66:4b:8f:b9:7b:9c:de:c5:25:b7:b8:48:3b:5e:f5:75:
         42:fa:f0:3a:6a:65:13:9f:2d:eb:5b:96:62:6c:2e:c6:7b:22:
         30:e0:09:7d:5c:d1:e7:c2:bf:9b:2e:75:03:13:ef:18:82:c9:
         a4:c1:f2:35:a1:f2:8f:c4:0a:b8:df:c1:d8:fe:88:44:26:f5:
         8c:38:2e:8d:c2:96:d4:3e:c0:5f:6e:ae:3b:93:89:d0:53:91:
         f3:6e:a7:ba:a5:0d:45:dc:b4:d2:be:e5:28:47:9e:a6:ac:7a:
         8b:ff:9d:10:9c:2a:bf:2f:20:c8:58:1e:5f:08:fd:fd:98:9d:
         ae:9c:39:19:a3:82:26:ad:c1:ad:37:86:42:ea:12:5e:15:f1:
         ac:47:71:fc:0c:7b:1a:ec:db:a4:91:15:80:ee:e8:38:7f:04:
         44:19:ff:7f:8d:83:8c:c1:be:da:db:6c:05:fb:f4:45:d6:5f:
         e1:23:30:87:da:20:05:ef:76:60:b6:f8:85:a4:cc:97:a7:13:
         86:af:43:20:98:7b:f9:1c:1e:4b:4d:db:4e:2e:5e:4c:1a:14:
         1f:f1:c9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:30:37 2024 by rpki-client on console-ams.rpki-client.org