Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File:                     2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier:          wFvdaJJBORdOPBwERy9hhc4+TtsCaZwGzY7POYjY+Rw=
Subject key identifier:   CF:44:27:A0:A4:57:CC:92:A8:DC:F6:FC:A3:DD:ED:5C:BA:CF:C3:DE
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer:       /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial:       01901D0F2E566F21629581B67D1BB3AB9BEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number:          0702
Signing time:             Sat 15 Jun 2024 18:00:52 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:52 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:52 +0000
Files and hashes:         1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: i8FS6SsTutWHBcE69WUtLNxzzzkXRu9b/oKECl5mnZ8=)
                          2: TWn-0uCyuiEJ3scUOYRJhHIGmMU.roa (hash: DywbCWNTo/70t7B5UtRTgv5T+ongZgC6jKWNzHqeh0c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:2e:56:6f:21:62:95:81:b6:7d:1b:b3:ab:9b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
        Validity
            Not Before: Jun 15 18:00:52 2024 GMT
            Not After : Jun 16 18:00:52 2024 GMT
        Subject: CN=cf4427a0a457cc92a8dcf6fca3dded5cbacfc3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:46:66:80:50:cd:7e:21:2b:83:0c:38:42:eb:
                    43:9d:ce:1c:db:c4:13:e9:1c:fe:8e:77:78:bd:d8:
                    e3:05:ca:01:4f:06:1c:c5:75:2c:73:2d:ac:dd:69:
                    2f:59:5c:2a:fe:27:56:f0:ed:0b:f2:1b:38:17:09:
                    bf:31:74:c3:78:c4:8f:25:9e:20:4c:28:b9:f0:26:
                    b8:bf:6e:6f:2f:90:cb:7a:28:f6:e7:3e:70:60:b6:
                    b9:18:fe:e3:4c:54:10:70:cb:57:1e:cf:04:6c:d8:
                    72:11:63:40:3a:32:ba:69:b9:d5:61:76:47:59:3d:
                    ac:51:82:92:2a:dc:ea:c6:10:6e:67:4a:58:4e:48:
                    1b:0f:58:68:9f:c0:85:30:3d:6e:c7:57:5b:10:6d:
                    99:0b:ab:be:1b:9b:8e:55:4e:be:ff:2e:6a:d9:5b:
                    c4:c3:74:e4:cb:31:ab:88:59:e2:95:2f:53:cb:fe:
                    39:02:85:48:19:50:e1:92:2f:b2:97:60:63:15:16:
                    1c:99:51:39:ad:73:2e:40:c5:1b:73:78:69:95:fc:
                    cb:fc:46:6c:11:b5:79:4e:3f:1b:f4:35:a1:1d:fe:
                    61:79:8c:20:da:14:25:68:3d:a1:34:67:4e:da:9b:
                    05:7b:37:9d:fa:e7:bf:9e:18:78:7d:c7:ef:f6:3f:
                    e3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:44:27:A0:A4:57:CC:92:A8:DC:F6:FC:A3:DD:ED:5C:BA:CF:C3:DE
            X509v3 Authority Key Identifier:
                keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ae:b3:e7:72:6c:43:ce:71:ac:34:11:ac:a5:ed:ad:78:dc:
         c4:2b:4d:41:26:85:07:a9:8f:c7:3b:09:38:01:49:38:d1:bc:
         5b:21:c6:55:0b:01:a3:4a:28:75:a9:c8:18:ff:10:be:a5:fe:
         19:92:39:d3:0f:03:31:04:38:43:2e:eb:5f:0b:38:d5:14:9c:
         c2:23:63:ad:b1:44:b0:50:82:bf:bd:2c:e0:36:56:ff:2f:18:
         6d:b1:95:de:86:02:77:ca:9a:b5:9a:5d:ec:19:91:c6:5b:48:
         46:67:ad:ee:06:8b:8b:ea:61:e4:17:e7:b0:86:04:01:24:a1:
         ba:9d:54:30:4e:bd:d9:04:74:c4:ca:a3:fc:16:f2:79:96:5e:
         f7:c0:be:38:63:8a:0e:60:96:6b:a1:bd:8c:fb:06:97:5c:ea:
         52:5a:eb:d7:5a:2e:3f:4a:0c:03:22:49:66:39:c1:49:11:28:
         09:1f:44:72:99:6b:ff:58:9b:87:aa:05:d0:3f:d0:32:fa:bb:
         47:61:4a:bf:7a:ea:77:d1:08:c6:11:21:a8:4b:25:bc:3e:a2:
         85:7d:0b:ba:e1:a1:68:9c:73:e9:55:6b:29:10:56:79:ef:02:
         0b:c9:ee:c3:45:5d:15:c4:03:06:9e:c9:4d:4f:ec:fe:87:70:
         7a:d3:42:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:52:07 2024 by rpki-client on console-ams.rpki-client.org