Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
File:                     uAc3zhz75lM7WIC2bqniQTzZyCU.mft (raw, json)
Hash identifier:          S4QVA+3gOji5HbK/hnhGN0k/hSDFdtFjeXqYURqdSF4=
Subject key identifier:   09:BA:AA:40:55:5E:37:7A:00:50:4F:8B:A3:95:5D:57:10:9D:07:27
Authority key identifier: B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
Certificate issuer:       /CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Certificate serial:       01901DEBBDB90C144F8D0394ABEA74119521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
Manifest number:          070B
Signing time:             Sat 15 Jun 2024 22:01:47 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:47 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:47 +0000
Files and hashes:         1: nELAq7KVOKa6z9lCfjWmlRCYE9Y.roa (hash: GZU2CMN20uDxZJbh7627V+szffKMA2lxY+yxenfw7p8=)
                          2: uAc3zhz75lM7WIC2bqniQTzZyCU.crl (hash: MCWmyUdK9ujeJwqsm0rGaUWYBdq7JvBq0ov8MzDCyPg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:bd:b9:0c:14:4f:8d:03:94:ab:ea:74:11:95:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
        Validity
            Not Before: Jun 15 22:01:47 2024 GMT
            Not After : Jun 16 22:01:47 2024 GMT
        Subject: CN=09baaa40555e377a00504f8ba3955d57109d0727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e1:05:62:af:6e:d7:d2:db:70:cd:8b:40:84:
                    22:58:a5:f5:00:f9:bf:69:0d:7e:d2:dd:94:af:cc:
                    24:b6:7a:41:77:de:1f:92:6d:81:a6:59:4c:95:8c:
                    21:70:c5:76:68:6e:9c:24:1d:09:91:f3:92:4d:ca:
                    26:5e:9e:27:08:fc:15:35:13:cc:b5:76:f8:e4:ee:
                    47:c1:36:d9:0e:06:8c:b8:af:24:5d:ed:0f:99:10:
                    1c:8a:6c:86:52:e8:f8:97:64:4d:6b:67:15:31:c8:
                    1d:28:3b:c2:73:fd:0b:12:90:02:7b:54:49:51:18:
                    96:a9:c3:b3:4f:db:e2:fe:3b:f7:8e:09:b9:48:d1:
                    46:bb:93:30:5a:ca:d7:44:74:71:0f:41:d9:cf:66:
                    ec:3a:02:d8:2b:bb:9f:75:0a:20:27:31:87:e4:99:
                    39:9f:1c:d5:5c:24:c1:62:5e:76:65:b2:66:03:30:
                    a5:9c:03:89:35:58:30:59:f7:93:89:10:d3:d6:a0:
                    63:bf:89:4f:99:a8:bf:b9:87:d0:30:55:c1:29:29:
                    7f:1e:0f:e1:9d:e2:b3:14:34:66:9d:2d:42:8c:45:
                    c5:db:58:38:cd:a7:37:45:40:26:ae:79:00:bb:83:
                    14:38:dd:58:7e:91:2b:b1:d1:52:c7:88:5c:4d:cb:
                    ec:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BA:AA:40:55:5E:37:7A:00:50:4F:8B:A3:95:5D:57:10:9D:07:27
            X509v3 Authority Key Identifier:
                keyid:B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8b:41:69:d8:86:c4:26:a2:d0:c1:e2:1a:7b:b7:1b:94:cc:
         2c:6b:ee:e1:68:ab:1a:5a:68:40:47:e8:b6:16:52:ac:51:34:
         54:6e:1f:06:5d:8a:80:00:e7:49:9e:f5:56:1f:bc:9d:b6:e1:
         b1:ed:63:96:26:1e:48:81:4a:30:da:d6:fa:81:82:12:dd:53:
         bf:c4:54:6d:11:f0:ca:c1:fa:a9:7e:5c:95:56:e3:7b:79:7d:
         da:60:b6:44:e4:de:7b:97:66:41:5c:1f:9c:cc:ba:b7:b7:a0:
         0f:c3:9f:15:cb:6f:19:f5:63:bb:38:a0:58:73:cc:65:cd:2a:
         90:1d:48:a9:13:02:08:44:09:0c:69:69:90:99:4e:69:ad:6a:
         5e:c9:ad:0f:3f:c5:f4:bc:98:53:d7:00:69:a0:c1:bc:04:2a:
         1a:7b:58:fe:0d:a2:36:0d:f5:ba:27:78:a0:25:e1:d8:eb:c9:
         6f:e1:14:09:18:c5:be:15:34:ca:75:66:65:74:9b:5e:e8:2b:
         07:ed:47:00:3c:4a:78:78:97:24:e6:57:ce:61:85:07:e1:0f:
         5d:a5:2e:5b:65:06:06:b4:bc:cf:4a:d9:98:5e:9a:2f:66:29:
         ed:4f:ef:60:cd:e1:97:f0:d4:00:78:88:e8:18:14:51:a7:b6:
         01:f2:9a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:49:32 2024 by rpki-client on console-ams.rpki-client.org