Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
File:                     uef3G89S7W0Ft-s7dB7HkG533Mo.mft (raw, json)
Hash identifier:          qYev8FDN+JZSnIf9tFY4qoCgBsUYV/0EamZgRrBLH9M=
Subject key identifier:   54:54:A2:C7:28:A3:67:FB:8C:67:1A:21:CC:04:3B:6E:F0:07:6B:98
Authority key identifier: B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA
Certificate issuer:       /CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
Certificate serial:       019045662AB3020BFA4FF6E0AEF59BC95182
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
Manifest number:          11DC
Signing time:             Sun 23 Jun 2024 14:00:41 +0000
Manifest this update:     Sun 23 Jun 2024 14:00:41 +0000
Manifest next update:     Mon 24 Jun 2024 14:00:41 +0000
Files and hashes:         1: is7aFOli9Wim5VcHFEn4TbrS1_g.roa (hash: ui6owyMSkHDH0EUm/X0xHmb8XgPXHDLPHJseePad/NY=)
                          2: uef3G89S7W0Ft-s7dB7HkG533Mo.crl (hash: MNi/p/ULZAwPlDPtpJniDmGefEyr1B0X/fjOums14tQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:2a:b3:02:0b:fa:4f:f6:e0:ae:f5:9b:c9:51:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
        Validity
            Not Before: Jun 23 14:00:41 2024 GMT
            Not After : Jun 24 14:00:41 2024 GMT
        Subject: CN=5454a2c728a367fb8c671a21cc043b6ef0076b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:46:bd:8c:54:ed:30:a7:a0:9a:04:77:c7:
                    05:34:1d:7c:4a:48:04:e2:09:8f:86:61:4f:a5:b6:
                    27:3a:63:af:b4:8b:9e:8c:ef:d0:4b:84:5e:32:bc:
                    e0:34:bc:d3:5f:06:e4:0d:69:13:2e:a8:55:9a:8c:
                    ee:8f:52:4d:4f:4d:f8:b5:f6:02:ca:f5:19:5a:e5:
                    a1:25:4a:40:e8:8b:25:dd:3c:b2:75:3a:86:ef:92:
                    12:95:cc:1e:9b:ab:f0:3f:54:53:c7:ea:be:94:e8:
                    29:44:2d:0e:fe:65:58:7d:60:d3:a3:41:e2:23:b0:
                    da:cf:1c:e9:60:08:a5:e1:0a:54:95:fb:5a:32:7e:
                    3d:04:e4:dd:c9:20:fc:70:b2:ca:a6:5f:3e:e9:94:
                    90:a7:7e:23:37:47:5c:39:80:53:03:0a:75:97:8e:
                    7d:08:e5:f2:38:42:7e:6a:1d:61:b9:85:40:18:9a:
                    07:d5:61:1a:57:59:84:25:28:78:cb:8f:66:e6:90:
                    29:3a:cb:cb:93:7c:63:b5:16:b5:aa:b6:25:a2:08:
                    7a:d4:5e:2c:a0:b6:df:52:84:b1:fc:e8:27:62:05:
                    22:70:16:a7:ba:97:10:f9:eb:ab:72:7d:d4:b0:d6:
                    65:ec:63:d4:58:85:a0:9e:5a:93:35:11:ee:98:4e:
                    e0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:54:A2:C7:28:A3:67:FB:8C:67:1A:21:CC:04:3B:6E:F0:07:6B:98
            X509v3 Authority Key Identifier:
                keyid:B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:24:b5:ae:0a:72:e7:7c:d3:b4:e2:7b:d3:04:14:a7:88:fa:
         10:7e:b2:f6:ac:09:56:ac:54:ff:49:8a:16:1e:cd:9c:1d:67:
         44:50:a5:37:6f:fd:a5:6f:f7:c4:6f:31:b4:3e:0e:27:75:24:
         36:c8:04:c7:1f:29:25:40:7a:3e:ec:3a:81:99:5f:1d:bc:12:
         69:ac:47:32:a5:66:4f:59:ac:e1:d7:30:7a:3d:59:16:c3:9c:
         2b:9f:04:b0:55:ad:b6:9b:13:d5:24:99:7a:3d:57:57:ba:69:
         fc:ef:27:ba:ba:bb:05:0f:9a:13:dd:8f:e0:06:21:08:37:6c:
         30:50:ee:86:fa:16:8e:98:83:82:64:a4:82:5b:06:2f:3b:d7:
         fc:3e:f0:61:84:1f:32:77:a0:27:b7:fe:de:b8:47:66:51:ac:
         83:45:5c:21:f1:15:a9:44:a9:f3:eb:41:64:79:e7:c8:d8:3d:
         b2:67:5b:07:0c:e2:8f:7c:b9:18:52:4f:b4:c0:44:64:dd:a9:
         ef:ba:11:cf:f9:16:24:a5:83:e2:26:57:0d:34:e9:e7:94:ea:
         1d:23:9e:69:81:52:11:19:83:da:f0:66:8e:7d:9d:da:61:7e:
         4c:c9:c0:16:03:ed:32:ed:61:4f:5b:5a:de:84:c8:2f:89:1d:
         0e:61:d5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:50:40 2024 by rpki-client on console-ams.rpki-client.org