Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
File:                     UmxhjRW7cS4-uuBqixgWl6XkB7g.mft (raw, json)
Hash identifier:          a7VXqrKJNuXHTunC8Cl4bQnzlqluJAHAG+RsX8eagcA=
Subject key identifier:   93:A6:4B:0E:79:D8:F5:DB:37:B6:EC:1F:C8:85:73:91:9E:74:38:E8
Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
Certificate issuer:       /CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Certificate serial:       01901E8FAFF9D1FB3EAAE1A1E83874128ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
Manifest number:          1090
Signing time:             Sun 16 Jun 2024 01:00:51 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:51 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:51 +0000
Files and hashes:         1: UmxhjRW7cS4-uuBqixgWl6XkB7g.crl (hash: SBeD8kzPvwjXi4ABM79YxBZnBsJEev0f3+PgbzWdi2c=)
                          2: gymANMOawpzu5t7gWLyvg2JyBtg.roa (hash: niq+T2EUZHjfIqR15q86ptIoQ4vTdcgmufFk38sjZr4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:af:f9:d1:fb:3e:aa:e1:a1:e8:38:74:12:8e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8
        Validity
            Not Before: Jun 16 01:00:51 2024 GMT
            Not After : Jun 17 01:00:51 2024 GMT
        Subject: CN=93a64b0e79d8f5db37b6ec1fc88573919e7438e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ed:9d:1a:d5:55:83:73:64:a9:7d:fa:ae:a6:
                    36:f1:fc:8c:89:c5:9c:b4:ac:47:26:22:7e:4d:0e:
                    f8:ea:0c:cf:b2:a1:df:9b:23:fa:e8:3f:cf:77:45:
                    dd:7b:d3:e4:05:39:f5:4b:8b:ef:0e:60:a6:fd:98:
                    87:c9:f6:28:b8:3e:9a:2c:3c:c3:b9:35:a7:b8:67:
                    fd:b0:f6:42:d8:6c:fa:50:f3:ec:54:ad:68:6f:5f:
                    e8:a0:41:01:a2:d6:8b:60:72:5c:1b:2b:22:1c:2b:
                    55:4d:18:a0:82:53:7f:d1:94:b5:d8:f7:c5:f8:48:
                    2b:d1:a7:6c:39:b2:a6:11:54:09:04:e0:24:75:6f:
                    50:69:1c:bd:03:b2:ae:57:6e:af:26:91:d1:9a:58:
                    9c:70:21:b2:4a:09:aa:bf:0a:b1:2c:9e:99:ac:45:
                    46:3d:82:2a:aa:53:72:af:3e:7b:cf:16:1e:68:38:
                    ca:e2:c6:4b:8f:97:69:89:40:33:90:29:de:31:ba:
                    b8:06:d1:e6:c7:c7:3b:9a:61:f5:1e:4e:86:1a:ff:
                    21:ed:76:3a:3d:07:a0:1b:96:5b:76:e2:8b:23:60:
                    aa:f9:81:d7:6d:ab:5a:6d:d3:78:c2:43:28:21:87:
                    e8:25:b5:2a:e6:e5:92:cf:75:e7:38:30:26:ac:fe:
                    3e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A6:4B:0E:79:D8:F5:DB:37:B6:EC:1F:C8:85:73:91:9E:74:38:E8
            X509v3 Authority Key Identifier:
                keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f0:6a:ad:b6:f8:73:4f:a7:21:dc:e5:78:28:b2:e2:29:a3:
         e7:85:28:6f:7f:c7:89:40:ac:e2:71:b6:89:11:8a:a8:34:8e:
         0e:4e:b3:48:70:8f:c7:50:4f:7b:d7:4b:9f:70:2c:38:21:43:
         68:1c:63:b3:24:16:d7:85:b8:7c:0c:e1:ed:e9:28:67:69:b5:
         0c:02:dd:1c:be:51:5f:f1:89:15:93:7f:fe:8b:ee:56:99:7d:
         ae:87:7c:41:7b:0c:00:f0:25:b9:69:de:76:d9:d0:b0:22:11:
         7b:92:c0:e2:d7:c1:ed:e0:c0:58:6c:4e:18:44:c0:e1:22:54:
         ad:f0:12:f5:dc:b2:95:88:1d:ac:d5:12:0c:6f:1f:a5:6c:42:
         2a:d5:f4:a6:48:80:6e:2d:24:78:68:51:6c:b8:8a:fc:90:27:
         21:ae:0c:dc:e7:36:5d:ad:4d:9b:14:cb:27:49:3d:f1:c2:6c:
         61:25:17:4f:a5:da:d3:3b:d6:c5:a0:6a:e3:f1:f8:bf:09:ea:
         06:4e:cb:c8:e2:59:e0:66:47:ab:31:a6:9e:7c:fd:c9:c5:aa:
         48:a7:40:c2:d0:04:78:0b:b7:06:45:6e:cd:bf:11:37:b6:1d:
         ce:cb:e9:34:3f:33:b7:45:ce:2d:1b:f5:6c:af:2a:c3:30:86:
         18:1f:f4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:47:01 2024 by rpki-client on console-fra.rpki-client.org