Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
File:                     uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft (raw, json)
Hash identifier:          PNMUBPJNiQ8+YojepLF7/oVFdUn+vTVMGnAnIfhk8js=
Subject key identifier:   7F:6F:A2:39:99:6F:75:DC:F8:51:59:C8:9C:79:A2:A4:02:0E:ED:FF
Authority key identifier: BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD
Certificate issuer:       /CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead
Certificate serial:       01901EFDEF425FD148BD7DCA4203A35C8879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 03:01:16 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:16 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:16 +0000
Files and hashes:         1: O3Gh_6okeRiSw7glpG1_M_6crRQ.roa (hash: pRxDeJ3BdGOBf79VVdApMx0n3RsWf69z4LMDl/byqs4=)
                          2: uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl (hash: iOFb1amDc3gJZuJbUlJJpFkA7b0Fvq4sz9CjzXD4fzE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:ef:42:5f:d1:48:bd:7d:ca:42:03:a3:5c:88:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead
        Validity
            Not Before: Jun 16 03:01:16 2024 GMT
            Not After : Jun 17 03:01:16 2024 GMT
        Subject: CN=7f6fa239996f75dcf85159c89c79a2a4020eedff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:8f:fc:51:4b:97:b0:92:62:e5:ac:93:22:
                    4b:c5:19:2e:cb:97:74:df:37:19:cf:b8:8a:20:18:
                    a4:2e:f1:6a:c5:fc:b3:14:da:40:1a:d1:7b:b1:72:
                    82:aa:72:8a:25:e6:4c:18:6f:a3:d7:38:cc:5a:85:
                    24:f3:a3:b0:81:82:84:21:16:c9:21:54:2c:b5:8a:
                    9d:86:2b:47:c3:23:96:02:05:cf:f4:0e:4a:bf:f5:
                    78:ee:bb:d7:f4:d6:50:80:65:c5:3d:d9:71:86:5b:
                    9e:ac:48:da:e6:dc:c5:b2:3b:b7:cb:1e:5a:ba:f3:
                    33:6a:19:58:2e:d9:70:5c:06:40:14:3d:4d:14:de:
                    c2:12:50:1b:03:32:71:cd:dd:ab:c7:57:e7:a1:96:
                    cd:8e:ca:44:6b:32:4f:c0:20:01:bc:26:b5:9a:9a:
                    7a:7a:79:5a:26:34:d4:23:f7:88:15:ee:b4:d7:42:
                    1e:17:c8:db:04:39:76:dc:a5:de:22:ae:af:a1:df:
                    73:e3:8f:70:e8:4d:40:f4:15:19:8a:62:76:35:c2:
                    b6:3a:b4:7f:d4:83:aa:60:d0:d7:c3:69:e8:ed:89:
                    61:37:9b:4e:3d:32:81:17:41:be:0c:fa:c8:b8:90:
                    c9:fd:19:95:da:52:22:d4:a5:cf:9e:c5:a6:14:77:
                    87:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6F:A2:39:99:6F:75:DC:F8:51:59:C8:9C:79:A2:A4:02:0E:ED:FF
            X509v3 Authority Key Identifier:
                keyid:BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:13:e2:09:b3:4a:f9:45:1c:2a:56:83:0c:3c:b8:fc:fd:27:
         cb:1a:c7:86:cc:db:79:f0:eb:58:6a:9d:41:08:e8:dc:92:87:
         4b:04:39:e7:94:9c:3f:e4:b4:d6:ff:d3:81:83:7d:5c:cd:31:
         36:b1:89:1d:91:10:46:43:40:3c:84:ff:be:c1:5e:31:86:f0:
         85:6e:cd:0e:e7:47:bf:82:b4:fd:56:2c:25:f8:dd:0c:09:51:
         0d:a0:a3:80:1a:ed:40:47:ec:dd:87:e9:e4:26:f6:3c:d0:5b:
         e6:58:e0:80:f4:24:0c:04:48:07:67:6a:ba:7c:08:ec:b4:bb:
         19:0e:ac:2f:e0:2d:03:1a:25:e4:a6:aa:6d:ec:92:81:4d:46:
         3c:28:1e:e7:e2:5a:6c:6c:45:c7:f1:f2:d1:53:a0:03:ef:80:
         56:3d:66:31:d0:7c:87:03:f1:88:4c:4a:5e:e4:f3:32:fb:57:
         11:8b:f0:ae:f8:58:53:f5:a3:2a:5f:c4:a4:87:71:26:eb:04:
         99:13:10:53:7d:f8:a8:d0:f7:cb:38:39:6b:7d:b6:48:82:5e:
         01:c3:a4:fc:5e:91:4c:48:6d:21:dd:66:ad:87:c4:da:01:b1:
         f6:f6:c9:0c:1f:a9:e6:8c:d2:7d:b3:d5:b0:c6:0c:71:e7:ed:
         b6:48:c3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:28 2024 by rpki-client on console-fra.rpki-client.org