Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
File:                     ug4SZOB7Nwi8udtaFOfMknCGOVg.mft (raw, json)
Hash identifier:          AqzwGrFYUf+AZFJqDNnFPqnKA67wtQwqHirUJisKLQg=
Subject key identifier:   71:E6:4C:A3:37:C3:75:AE:50:67:84:21:19:A5:00:5E:75:3D:C6:B6
Authority key identifier: BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
Certificate issuer:       /CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Certificate serial:       01903E1AC41725A1ECF30C34FC01E064B73C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
Manifest number:          11DD
Signing time:             Sat 22 Jun 2024 04:00:59 +0000
Manifest this update:     Sat 22 Jun 2024 04:00:59 +0000
Manifest next update:     Sun 23 Jun 2024 04:00:59 +0000
Files and hashes:         1: I1a4CIgv97vBfZS98hPFWPuYdEE.roa (hash: x12T4ygdGHJu2Zoiw3UEaqcIDiG+qScQRv9iZ/ueck8=)
                          2: ug4SZOB7Nwi8udtaFOfMknCGOVg.crl (hash: atEBBGju5/yi1qpfjJZvzv2a/rKfPYZhdMxS4DOQQnM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:1a:c4:17:25:a1:ec:f3:0c:34:fc:01:e0:64:b7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
        Validity
            Not Before: Jun 22 04:00:59 2024 GMT
            Not After : Jun 23 04:00:59 2024 GMT
        Subject: CN=71e64ca337c375ae5067842119a5005e753dc6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:37:d1:e4:03:d2:15:35:5e:4d:c4:58:0a:
                    fb:e3:23:1b:7b:c7:8b:cf:1a:a0:a0:05:83:6f:6d:
                    34:8d:22:db:d9:24:27:03:17:66:eb:e5:e1:78:49:
                    76:bc:1e:4d:8c:cf:49:ab:72:b4:29:a9:3e:dd:af:
                    d2:5a:d7:1e:00:cc:12:8b:30:ad:45:43:9f:fe:0e:
                    85:95:84:a8:8d:91:24:05:4a:85:08:02:d6:b8:3b:
                    ee:18:cc:c5:27:01:77:96:e4:c6:96:dc:4a:62:b4:
                    81:4e:13:9a:9a:e7:b2:1a:f7:d9:7d:a4:83:53:e5:
                    25:bf:79:ba:9c:05:bc:ca:f6:dc:aa:6d:75:a9:37:
                    20:f4:4e:29:f0:e2:c2:d5:e3:90:00:5a:69:99:6d:
                    d3:ca:6f:52:d9:2d:db:3c:4d:6e:7b:62:c8:4f:89:
                    6a:7f:f4:dc:e1:26:b3:9c:36:ac:3d:9f:67:c1:6f:
                    47:5a:ba:de:95:06:44:3b:47:57:21:05:71:84:c5:
                    40:6d:cd:e5:7a:4e:37:8f:3a:33:9f:1f:67:41:7f:
                    96:c8:e4:96:95:1a:5c:35:99:17:d0:db:3c:85:6b:
                    fc:dd:de:05:6f:f7:ba:e2:7c:a7:e5:44:2e:79:92:
                    6a:6e:38:72:ab:df:0d:0c:e7:d2:89:f0:12:10:35:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E6:4C:A3:37:C3:75:AE:50:67:84:21:19:A5:00:5E:75:3D:C6:B6
            X509v3 Authority Key Identifier:
                keyid:BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a1:56:26:88:e8:a1:b5:b4:e7:da:2e:46:2b:bc:2c:eb:0b:
         eb:e4:0c:15:8d:e6:42:38:ce:d5:e1:1f:f1:96:33:dc:5a:09:
         b4:a2:50:6b:e2:94:da:88:87:65:4a:83:70:0f:d7:21:3a:4a:
         fe:89:91:bb:18:4f:44:d7:f7:b0:8f:91:64:a4:b4:a5:f3:9c:
         f8:32:10:cf:67:5f:fe:32:b1:37:20:ac:0e:8f:22:16:aa:e2:
         d5:e4:fb:d7:de:f9:d6:28:ad:9f:23:72:2a:f6:52:d2:20:0c:
         89:fc:ff:f9:9e:9b:a2:fd:fe:89:14:cf:50:22:7f:54:17:50:
         a1:f9:07:a8:16:4b:3b:d4:34:53:d2:de:ef:97:3e:d7:a5:8c:
         e2:7e:a4:29:90:61:d0:c9:f9:da:52:07:a5:11:63:d8:3d:41:
         4c:86:8a:7c:7c:04:0a:52:e8:ad:c5:fa:b8:71:2c:96:4a:65:
         5a:6b:79:4c:6d:59:c3:af:29:f7:e6:98:c2:17:5e:09:4e:b8:
         ee:61:c5:02:a6:a4:73:f5:c5:d7:a6:25:45:30:94:9b:92:f4:
         91:48:b4:ff:6c:e9:f6:bf:cd:0f:08:9b:87:3b:2f:40:be:69:
         73:a2:6a:51:b1:e2:ef:f7:45:d3:70:7d:7b:3b:08:77:50:b6:
         35:28:5e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:40:28 2024 by rpki-client on console-ams.rpki-client.org