Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
File:                     Us2aZRLb8lpfGbgn16LH4iou6N0.mft (raw, json)
Hash identifier:          bBUOncOLzuZ4Ohj9GhajZ5U3utCMGEda/UkW0aMeeHY=
Subject key identifier:   1C:C6:8A:75:A9:16:DB:17:8E:83:56:A3:0A:C3:4A:42:FC:8E:3A:FB
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Certificate issuer:       /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial:       01901CA1B1505C45BD07A91B9B3B1A5C5975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
Manifest number:          0470
Signing time:             Sat 15 Jun 2024 16:01:16 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:16 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:16 +0000
Files and hashes:         1: 5OlYaVOhI0SCKEIUUiYsHhEFMMI.roa (hash: YShzu/eEd15uFYmrmymsRyvmltlahvnrP7KmaIMgxDI=)
                          2: B32DVQQ22oyuQhRCNlG3c8c15KY.roa (hash: pJNtYc9wlgWSjb36pDcMyU4o1KUTgf9bYMSRjfop6iw=)
                          3: Mb1bkxqCUyVEHUyjNXhFFJQzL-o.roa (hash: /ZKZSuexa8O8H8TunUKYFqIZ+SWpHK6UFIFolrBfphM=)
                          4: MrwdC8Q_xzXYK-bPVXHLI9fzi-o.roa (hash: dUgXccgoPv/MGjieaNOv7XYful0KfsG9FU8U6il7RQ8=)
                          5: TeaWbzsg2w9T1dl0kCak2TSISf0.roa (hash: KgozOWoDYN7ASXyaZ8GGvoXoSuR3Q0CVVN5+ctylnBE=)
                          6: Us2aZRLb8lpfGbgn16LH4iou6N0.crl (hash: WdktQQwl7MB/XjIQwIv8K3EEFjQ4RhYIdvXtRvre8SM=)
                          7: _Zl3RIgF1MTfp9OivbM2P67TD68.roa (hash: HDjmdS6gWOdFNcac5Yx8clUzUXlhap6nsHS3e/TobS8=)
                          8: bF_AztaW8uBxIScLJr4ynDQT-VE.roa (hash: VUI15Pc9TEmSppS1E2A5QgubXBtBsWbSEbPDZpgnwsQ=)
                          9: dg3DvqX4fv_b7dA_McuPip09OYA.roa (hash: n1zdAkHrm69leyk6LB7n5DRQSEOLrNMianChVw6OnMs=)
                          10: elYm1NNxuk4TzjdGCk4LZ5Djry0.roa (hash: IdWSZl8rnOQDQKWO6MUOiZ8yQKJA38j8/HimunLfZQs=)
                          11: l43uZC20RxHvL203pIUVfCcvhJg.roa (hash: gB4TzAMY6INvaE8AUkC0Lqt4evemz+/WxQAbmVHbxH0=)
                          12: x9Uu-Vzax50NvBBzlnTQbRn6ySQ.roa (hash: 1U4h2uHZiOIAx/Er3+KP3I/7Zo26gdc551kp6Zeqj4U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:b1:50:5c:45:bd:07:a9:1b:9b:3b:1a:5c:59:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
        Validity
            Not Before: Jun 15 16:01:16 2024 GMT
            Not After : Jun 16 16:01:16 2024 GMT
        Subject: CN=1cc68a75a916db178e8356a30ac34a42fc8e3afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3f:2e:c6:a5:4b:22:c5:3c:a7:30:7d:94:24:
                    42:e1:be:8d:0e:09:83:be:ce:33:03:94:86:67:3b:
                    3c:64:89:0a:b5:37:ca:c6:04:bf:74:2c:92:d6:ec:
                    df:4f:40:fe:dd:d9:17:73:fd:3b:08:c0:1d:fc:27:
                    d2:33:68:f2:95:b0:0d:3d:24:a8:10:09:e6:25:e5:
                    bd:94:6e:fd:ca:2c:31:17:ed:99:5a:57:99:24:48:
                    18:86:b9:8e:9d:40:f8:e9:02:30:17:ad:a6:72:1d:
                    85:72:f8:f6:98:b2:62:1f:57:55:18:46:23:f8:b8:
                    8a:79:b3:b2:17:6f:05:4b:f7:25:98:c4:e3:b5:7f:
                    fd:de:b3:7c:6e:d2:63:7f:e7:eb:d6:9e:22:5f:54:
                    ef:c5:7c:b7:c0:0c:08:e0:08:2a:60:0d:8a:f5:be:
                    c1:c0:4d:4d:d0:21:5b:8e:47:53:d4:fc:e4:5b:ab:
                    3e:d8:e2:92:ef:0c:44:5b:79:a8:00:f4:a4:1a:1e:
                    6c:49:0d:70:a7:fb:1f:b0:ac:0b:d7:64:4c:2b:fa:
                    2a:5b:8b:35:51:58:20:75:f9:a3:bc:c9:73:67:cd:
                    2d:70:71:c8:e5:f3:cc:f0:fc:2e:40:c5:73:21:f1:
                    63:94:40:80:c2:d7:48:86:41:90:85:44:35:ac:79:
                    bf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C6:8A:75:A9:16:DB:17:8E:83:56:A3:0A:C3:4A:42:FC:8E:3A:FB
            X509v3 Authority Key Identifier:
                keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1d:bd:00:79:97:e2:66:8a:ba:92:3a:ee:af:c0:4c:55:ba:
         46:6d:b5:d3:01:af:61:b9:b2:c7:19:70:d1:11:4c:70:06:d5:
         2a:29:ff:ba:d7:c9:38:99:e6:da:02:8f:05:39:a0:46:78:f3:
         9d:69:c8:00:bf:e7:57:66:93:47:a3:3f:1f:f7:20:8f:02:84:
         b6:10:d2:a1:99:34:db:ca:2d:8f:95:e5:79:23:cb:4d:7a:a9:
         33:cc:23:52:63:19:61:21:8b:4c:8e:40:50:88:48:10:40:ae:
         6a:ab:a5:71:08:23:f8:bd:b6:ff:f0:45:a6:8c:5c:4b:e7:4f:
         75:fe:78:bf:8f:a1:e1:67:8d:e5:2b:87:a4:5d:98:b5:69:c8:
         df:b3:c7:3d:61:c8:be:b9:c7:4b:bc:e2:e7:c7:03:9d:11:82:
         40:68:85:3f:cd:ac:94:72:72:70:87:3c:01:03:75:9a:1e:e0:
         a5:d5:4e:2b:0b:13:84:4e:f3:e8:01:ba:f6:5e:25:78:c5:97:
         1e:ac:36:e5:d3:5d:ff:f0:a5:cf:ae:7e:c7:f2:bb:cb:75:19:
         4a:ef:4f:d0:17:9c:66:d6:d8:f5:8a:2f:49:49:45:c1:22:83:
         f9:2e:4d:4a:15:c4:f0:0e:8b:ba:73:3f:9b:b0:1e:68:86:da:
         7e:be:d2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 16:58:47 2024 by rpki-client on console-fra.rpki-client.org