Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
File:                     uFsMinWJOk-OHvDZpNQUeNizMng.mft (raw, json)
Hash identifier:          cqmJ53xCzfoS5WK+cQoM1NFGUPzuGAUEOIiYFSdZXnU=
Subject key identifier:   9A:E2:61:4E:47:F8:48:94:32:E3:A6:79:2B:14:94:50:37:24:A9:18
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Certificate issuer:       /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial:       0190452FD33C2D350945DC492F3871B6A1A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
Manifest number:          1130
Signing time:             Sun 23 Jun 2024 13:01:20 +0000
Manifest this update:     Sun 23 Jun 2024 13:01:20 +0000
Manifest next update:     Mon 24 Jun 2024 13:01:20 +0000
Files and hashes:         1: JV2k_KyZFj6EIOU_1LTqH7G3lZA.roa (hash: 9B70SyyKn90M2W+GLxXdB4/6s5sk5U9IxN4hiBR7V/M=)
                          2: JcPrcT4tqTyAPynZbpIVWr8ZKNk.roa (hash: HR9uUUH+ZsDQZwJ/hrsjZnZRZxi0iQYKtabFfu0hgMI=)
                          3: uFsMinWJOk-OHvDZpNQUeNizMng.crl (hash: eCAwlNirkHJHLgutsyzABiNjUekTeCpCraPwWicGunk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:d3:3c:2d:35:09:45:dc:49:2f:38:71:b6:a1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
        Validity
            Not Before: Jun 23 13:01:20 2024 GMT
            Not After : Jun 24 13:01:20 2024 GMT
        Subject: CN=9ae2614e47f8489432e3a6792b1494503724a918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:85:b5:61:33:4d:23:4d:17:77:41:b7:d6:
                    c3:af:b3:18:22:49:85:12:0b:c8:14:05:cf:bd:a9:
                    73:bd:3b:77:54:67:35:43:f7:2f:b6:fe:ec:7b:11:
                    1c:cd:f9:56:5a:17:fc:ad:3b:99:f3:3b:f7:5b:31:
                    a0:42:c5:ac:45:fa:76:e6:48:71:02:53:81:8b:8a:
                    c1:0c:3a:a3:27:86:0c:ff:99:f9:bb:f6:ee:6e:55:
                    2f:61:c1:11:58:18:42:40:03:22:d1:13:fc:e0:1b:
                    83:4f:a8:8c:91:54:27:5a:e9:24:72:9f:e6:e7:63:
                    9c:d2:34:a8:f1:0a:27:46:83:6d:25:05:75:37:9e:
                    19:f9:56:4c:65:76:09:d4:21:eb:79:67:f7:93:f2:
                    3a:ba:4f:04:90:8a:92:86:b8:f3:41:92:ca:9d:93:
                    ad:7b:19:dc:50:89:b8:9f:3a:bf:ed:3a:f4:c0:ec:
                    d7:2a:1f:45:82:0f:c0:b8:c6:81:f8:95:53:50:38:
                    3f:0c:47:7e:33:49:e3:f8:fc:bd:22:5a:44:f7:4d:
                    19:16:0a:00:83:87:d2:b5:d5:d4:b9:ad:1d:7a:9d:
                    06:5f:30:d9:d3:65:31:bd:ee:c0:be:20:33:b8:3b:
                    d7:f5:70:54:32:eb:5a:c1:0b:12:a5:4f:48:e6:e7:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E2:61:4E:47:F8:48:94:32:E3:A6:79:2B:14:94:50:37:24:A9:18
            X509v3 Authority Key Identifier:
                keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:96:02:3a:07:f8:4c:d2:22:6e:c3:12:33:60:f5:ef:48:c0:
         e7:9f:d4:e5:a7:e9:a0:f3:19:0d:f0:b4:0d:fa:57:4d:d3:44:
         60:03:b5:38:00:a3:8f:12:66:18:50:fb:52:1b:66:60:a9:d5:
         2d:fe:18:49:3d:26:c9:bb:e6:35:07:02:43:aa:91:fa:c6:c5:
         dd:57:31:e6:9d:f1:ef:06:06:31:7a:bf:3c:b3:e7:db:dc:86:
         eb:29:c8:5c:23:a1:e4:54:77:3c:ce:7c:ec:ae:7f:7a:37:4a:
         7f:31:41:45:b8:1d:9b:4d:4d:da:c3:7f:94:6a:7a:7c:94:62:
         72:a6:2b:b8:74:98:e7:6f:4c:8f:5f:99:e3:bc:5a:b0:5a:b0:
         ac:32:87:af:c5:79:6a:be:6c:88:d5:62:2b:63:02:f7:fc:b4:
         39:74:d1:ac:47:d9:55:15:76:d8:9b:49:99:45:dc:a4:69:82:
         d8:61:e6:e2:17:71:10:db:69:9f:a0:8d:b5:84:96:b2:4e:c9:
         77:d5:ad:77:f4:72:3e:60:3a:ce:83:0d:80:b4:9f:13:1c:d9:
         17:1e:d1:bb:6d:03:67:1d:cc:30:cb:5d:d1:54:b7:7b:c7:9a:
         35:23:a3:53:fe:aa:7c:cf:2c:85:90:7a:50:30:be:ad:c0:d2:
         57:54:a2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:52:28 2024 by rpki-client on console-fra.rpki-client.org