Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
File:                     UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json)
Hash identifier:          HPhg4mnddNZZ2sXmeRbWv3Sua/PVkszLHd8/1vPOr60=
Subject key identifier:   C9:F8:3A:A6:DF:A4:B6:F4:A0:35:F1:BE:FB:38:5C:74:E9:B1:33:B8
Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
Certificate issuer:       /CN=51da0066122e6ba294d2b747938d46c74e99f880
Certificate serial:       0190448C02B84A6EE8D3907CC14BB4942B9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
Manifest number:          0224
Signing time:             Sun 23 Jun 2024 10:02:24 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:24 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:24 +0000
Files and hashes:         1: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: SRZ2GywMLtn7c71HVdbQq5mW49MA/gmJHO/UMH8xMOs=)
                          2: sbFNUCEEatjFA8zN2mObxw5H11I.roa (hash: 1Dg64se94f9BCd076weBFjUBv09xEQOI8IfEjFd51q0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:02:b8:4a:6e:e8:d3:90:7c:c1:4b:b4:94:2b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880
        Validity
            Not Before: Jun 23 10:02:24 2024 GMT
            Not After : Jun 24 10:02:24 2024 GMT
        Subject: CN=c9f83aa6dfa4b6f4a035f1befb385c74e9b133b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:60:df:8f:a1:6d:5b:a9:df:12:2b:79:83:
                    da:56:c5:4f:ca:87:bc:31:29:47:8a:48:2a:19:0c:
                    bf:cb:89:82:12:0f:8c:b1:85:a2:73:cb:0a:d6:9d:
                    3f:d8:8b:a2:ec:fa:a6:d2:d1:3c:67:08:e3:56:99:
                    c9:e0:9e:3c:1a:b3:97:56:7e:32:53:7d:f9:dd:17:
                    09:90:ca:7b:f4:ba:e3:73:1e:4c:07:d3:4d:5d:f6:
                    35:4e:5d:ab:17:23:35:1b:2c:5a:ea:d3:1f:f8:01:
                    30:83:6e:84:27:c2:f8:7e:29:c8:f6:ed:a6:d7:11:
                    83:c8:92:26:0d:3e:4a:40:ec:05:01:1c:79:94:ca:
                    e0:8e:e0:df:97:83:86:fc:0b:e1:20:14:8c:f1:f2:
                    0c:f8:9c:87:8a:03:9e:f3:74:fd:b4:30:08:30:01:
                    80:89:c6:af:bf:16:2b:67:32:21:ad:31:dd:75:1b:
                    b8:26:13:fa:d4:34:f8:0c:fc:42:2b:ec:17:a6:1e:
                    8d:ee:92:45:ae:72:7b:24:79:c0:36:d8:25:fc:ae:
                    d6:8d:40:08:3c:a5:b5:70:84:ed:b2:9c:45:a4:48:
                    80:de:8d:1e:75:c3:20:e6:a7:e0:34:ac:1a:71:cf:
                    10:70:e7:95:8c:13:56:f6:2c:ed:45:9b:a9:2d:e6:
                    c7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F8:3A:A6:DF:A4:B6:F4:A0:35:F1:BE:FB:38:5C:74:E9:B1:33:B8
            X509v3 Authority Key Identifier:
                keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e4:6e:4d:3b:0a:4e:3b:24:b9:9c:fe:d2:d3:63:1c:6f:28:
         20:21:03:9f:91:e5:a8:b4:e4:89:e6:ad:f7:27:2b:93:cd:ea:
         46:41:ac:3f:b1:47:64:d5:48:87:be:ac:ed:93:d6:fd:b7:9f:
         56:81:37:f1:b4:5c:68:a3:26:ac:45:25:97:1c:da:49:1f:e4:
         c1:38:88:33:f4:7d:30:e4:93:d8:76:25:b3:5c:e2:96:0d:3e:
         24:7e:ec:43:4d:78:b1:25:d5:3d:a2:ee:be:69:08:71:82:4d:
         5f:46:70:f9:98:1b:a3:dd:7c:af:e6:20:fa:fd:a3:3f:16:51:
         93:52:54:7f:32:f8:05:2f:2f:55:4b:be:e6:aa:9c:c2:d8:00:
         f5:59:d9:92:61:f4:38:0c:58:af:85:81:c0:10:84:cd:39:40:
         59:b4:6f:ed:83:8f:73:96:ae:a9:cf:e7:5d:b3:09:a5:c9:72:
         71:6f:fb:dd:7c:34:ef:45:cf:4f:2a:68:e3:67:8f:ab:0d:b6:
         c4:27:34:d0:29:f9:f8:5b:3e:9d:ba:7a:ac:cf:8a:c6:5a:e7:
         a8:27:e0:6a:82:82:68:b2:c7:db:2f:cf:a1:dd:54:ab:1c:60:
         d7:9f:a6:23:87:eb:83:6f:2c:e1:92:90:a8:ce:ad:c6:7c:78:
         43:74:3b:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEjAK4Sm7o05B8wUu0lCueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZGEwMDY2MTIyZTZiYTI5NGQyYjc0NzkzOGQ0NmM3NGU5
OWY4ODAwHhcNMjQwNjIzMTAwMjI0WhcNMjQwNjI0MTAwMjI0WjAzMTEwLwYDVQQD
EyhjOWY4M2FhNmRmYTRiNmY0YTAzNWYxYmVmYjM4NWM3NGU5YjEzM2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyVg34+hbVup3xIreYPaVsVPyoe8
MSlHikgqGQy/y4mCEg+MsYWic8sK1p0/2Iui7Pqm0tE8ZwjjVpnJ4J48GrOXVn4y
U3353RcJkMp79Lrjcx5MB9NNXfY1Tl2rFyM1Gyxa6tMf+AEwg26EJ8L4finI9u2m
1xGDyJImDT5KQOwFARx5lMrgjuDfl4OG/AvhIBSM8fIM+JyHigOe83T9tDAIMAGA
icavvxYrZzIhrTHddRu4JhP61DT4DPxCK+wXph6N7pJFrnJ7JHnANtgl/K7WjUAI
PKW1cITtspxFpEiA3o0edcMg5qfgNKwacc8QcOeVjBNW9iztRZupLebHjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMn4OqbfpLb0oDXxvvs4XHTpsTO4MB8GA1UdIwQY
MBaAFFHaAGYSLmuilNK3R5ONRsdOmfiAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2It
YmU0OGI3OTI1NDc4LzEvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2ItYmU0OGI3OTI1NDc4
LzEvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPORuTTsK
TjskuZz+0tNjHG8oICEDn5HlqLTkieat9ycrk83qRkGsP7FHZNVIh76s7ZPW/bef
VoE38bRcaKMmrEUllxzaSR/kwTiIM/R9MOST2HYls1zilg0+JH7sQ014sSXVPaLu
vmkIcYJNX0Zw+Zgbo918r+Yg+v2jPxZRk1JUfzL4BS8vVUu+5qqcwtgA9VnZkmH0
OAxYr4WBwBCEzTlAWbRv7YOPc5auqc/nXbMJpclycW/73Xw070XPTypo42ePqw22
xCc00Cn5+Fs+nbp6rM+KxlrnqCfgaoKCaLLH2y/Pod1Uqxxg15+mI4frg28s4ZKQ
qM6txnx4Q3Q7IA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 16:52:10 2024 by rpki-client on console-fra.rpki-client.org