Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft
File:                     upnU2xLk8LAC9g6SzFM-b4gtFQg.mft (raw, json)
Hash identifier:          P1lI36SDtwZtz9/Uj6zxoShNlkXTMfCwv6SF447DU9c=
Subject key identifier:   9D:19:93:0B:3E:36:25:1A:C3:4F:ED:03:B9:10:C8:5C:1D:CE:91:48
Authority key identifier: BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08
Certificate issuer:       /CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
Certificate serial:       018F8D1595F03B43322081728662DB8E96DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft
Manifest number:          0C81
Signing time:             Sat 18 May 2024 19:02:33 +0000
Manifest this update:     Sat 18 May 2024 19:02:33 +0000
Manifest next update:     Sun 19 May 2024 19:02:33 +0000
Files and hashes:         1: M70cuy9V9EyYk2nobkeBUfH2s4Y.roa (hash: 3vMZWQKovzfFQ+s2kOXkaCGWvNjeKtwH8XccCZZeBhI=)
                          2: SJUMWfy-_S2bbNSGO_9IMByJtFE.roa (hash: 3Z6S1BKBJ8DeI9sOxdBvxeOO8w3UVzV2+bJCaabofVE=)
                          3: upnU2xLk8LAC9g6SzFM-b4gtFQg.crl (hash: YKgHmvfqMhtzmA4FQkcy+MiLb2pk8A6uzaLHoPwdGwA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:15:95:f0:3b:43:32:20:81:72:86:62:db:8e:96:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
        Validity
            Not Before: May 18 19:02:33 2024 GMT
            Not After : May 19 19:02:33 2024 GMT
        Subject: CN=9d19930b3e36251ac34fed03b910c85c1dce9148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:91:97:10:de:ad:0e:4e:1d:53:25:3a:d9:
                    2c:fe:3a:23:0d:a3:9b:6a:74:b9:44:7f:8b:c9:0a:
                    f7:83:82:93:2e:9f:6d:69:f4:af:b5:19:88:51:75:
                    90:06:38:2e:e5:96:1b:c6:d6:9c:92:8f:f9:e7:5f:
                    66:7b:4f:81:ca:6f:87:da:ae:dd:ce:b9:92:b2:47:
                    11:cb:26:e9:04:bb:34:6b:af:58:68:69:c0:a8:df:
                    92:2f:9f:f8:f2:42:f8:fd:da:82:f8:33:4d:2f:dc:
                    a6:ca:c1:d4:3a:cd:09:c5:e3:26:50:72:59:9d:66:
                    8a:a4:7e:ad:4e:ef:45:ae:f3:18:d1:77:dd:6a:0b:
                    69:28:d1:65:89:85:54:52:a5:9e:43:ae:6e:c8:a0:
                    f5:8b:eb:d8:2a:ae:d6:53:14:88:15:0b:69:df:d3:
                    c5:de:72:6e:cb:15:c1:dd:fb:db:e4:70:14:f3:4e:
                    89:5f:c9:1f:8c:e5:74:56:7b:73:91:4a:cd:d5:21:
                    46:da:18:4a:1c:59:9d:85:13:97:15:0e:a2:10:18:
                    95:d8:b3:9b:32:1c:d1:37:d1:4d:8d:9f:64:25:d9:
                    cc:2d:d1:6a:d9:18:21:20:c9:b1:a4:fe:a0:0e:95:
                    02:a2:b9:19:57:74:13:d2:a9:3a:20:f1:f2:43:d7:
                    25:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:19:93:0B:3E:36:25:1A:C3:4F:ED:03:B9:10:C8:5C:1D:CE:91:48
            X509v3 Authority Key Identifier:
                keyid:BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:cf:11:e8:41:5b:84:6a:1f:1d:5a:fa:d1:97:2e:32:93:4a:
         2a:73:9b:3c:25:aa:7c:06:f6:39:e0:18:d7:11:71:91:a9:93:
         af:75:36:df:e4:61:ab:d6:52:08:de:76:aa:62:77:21:8f:20:
         9f:46:63:21:d8:b3:26:d1:31:59:6d:f4:26:e4:ea:8c:5c:56:
         8e:f3:8a:05:85:4e:96:a9:c3:47:5b:8c:05:2a:58:b1:8b:6d:
         4c:b5:fd:fd:6b:c5:c4:1f:ff:5b:1a:13:e4:fb:78:d8:99:17:
         6d:4a:86:8e:d6:61:47:f9:18:5c:96:1d:1d:a5:08:0b:95:4c:
         08:29:99:69:1b:a5:1b:ef:53:3b:71:38:f7:f9:1e:54:3b:0b:
         35:2c:fc:32:30:25:bc:d1:67:ec:03:ea:5a:c6:96:80:9a:a6:
         c1:4f:c2:cf:ba:ac:ba:80:c4:ab:d3:a7:45:be:4d:6c:d7:06:
         d8:37:4b:a3:84:78:e0:f2:c9:81:98:45:d8:88:17:bb:24:fa:
         29:e1:26:08:cf:a5:cf:84:78:0d:5f:77:66:a7:c5:5c:03:88:
         d3:64:ae:3e:43:6e:33:7e:0c:96:5e:19:5f:87:44:62:85:ed:
         54:c5:cd:8b:57:06:bc:ec:b2:6a:f6:af:37:d6:f6:6a:2a:f5:
         23:62:07:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:11:42 2024 by rpki-client on console-fra.rpki-client.org