Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File:                     UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier:          EIz64/BGS+aJNqM3ZDl2H7mhp6Lj/wGpiPmrUDZTJh0=
Subject key identifier:   3D:FA:A1:1D:1F:79:55:0F:3C:0F:8B:8D:EE:7E:66:9E:D6:DF:4C:93
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer:       /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial:       019049B1004F16DEE2D3B52A2FE4E36185A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number:          11DB
Signing time:             Mon 24 Jun 2024 10:00:54 +0000
Manifest this update:     Mon 24 Jun 2024 10:00:54 +0000
Manifest next update:     Tue 25 Jun 2024 10:00:54 +0000
Files and hashes:         1: OFbw4SrYaM6691_TpICzZ3Dumyw.roa (hash: dGHkY7xddS5edkaumz54VM1yrJOENswrz+8Ta+n5WYU=)
                          2: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: KWv51cCJ3OEEq1HYGAKUvgT9ArFh2wUmRtIvkt7OGRM=)
                          3: tjZFTLEPYDGQ2iSEazkmBtl0Lms.roa (hash: 0bESaKk5KKoU18DKaJUO174K4XV590RxAqSNW6nnrDY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:b1:00:4f:16:de:e2:d3:b5:2a:2f:e4:e3:61:85:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
        Validity
            Not Before: Jun 24 10:00:54 2024 GMT
            Not After : Jun 25 10:00:54 2024 GMT
        Subject: CN=3dfaa11d1f79550f3c0f8b8dee7e669ed6df4c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:60:b5:44:a8:72:82:38:70:79:71:16:4a:
                    c1:d5:3c:0a:12:2c:16:3b:cd:87:1f:96:26:b4:dc:
                    49:30:15:84:2f:8b:b1:7a:a0:b8:0c:c1:92:8b:ec:
                    38:6a:0c:11:bd:91:80:c9:50:5a:fb:64:2e:9e:5f:
                    5b:39:0d:6d:7e:43:3f:aa:d0:9b:e7:d5:28:7a:ab:
                    ed:6f:6b:ab:3d:8e:9a:33:2d:d7:9d:2c:07:49:38:
                    7e:3b:74:61:2b:c1:4c:2b:57:9f:05:de:e6:8c:f5:
                    d6:9d:a7:50:8f:0b:61:df:b2:b9:99:96:07:8f:85:
                    5f:be:0f:f2:5e:b0:ab:8e:bb:2f:2f:b9:a0:d8:3d:
                    1b:18:16:33:eb:30:2b:78:5c:6b:4e:59:bc:0e:a0:
                    1b:13:b6:2b:02:a1:21:7b:df:16:e9:e6:ca:db:a1:
                    53:40:3c:f7:cb:5d:17:8e:8c:d4:84:f7:f4:f0:b2:
                    91:47:f8:b7:38:25:9f:0d:44:0a:52:ad:7a:17:0d:
                    b4:f1:88:14:60:ba:c5:fe:98:d2:82:a0:26:2d:38:
                    75:90:d8:45:3f:c6:59:1c:ad:3e:56:3a:60:16:b4:
                    ee:0a:e7:28:d5:48:b2:06:9c:9b:49:cb:3f:b4:83:
                    33:55:76:a4:eb:fc:5d:e4:9f:9e:72:cb:ff:41:ff:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FA:A1:1D:1F:79:55:0F:3C:0F:8B:8D:EE:7E:66:9E:D6:DF:4C:93
            X509v3 Authority Key Identifier:
                keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:40:8d:d4:d2:b4:89:88:1e:0a:9c:aa:d3:bc:c8:42:1f:bf:
         e5:8c:f6:56:f1:8d:f9:a4:7b:f7:77:54:fb:58:67:0c:f4:de:
         41:49:94:6d:4d:d0:38:74:12:6b:50:07:9e:11:41:c6:85:6b:
         57:15:61:16:03:da:89:d5:9c:28:9d:aa:69:73:39:fb:6c:78:
         6a:94:c8:4a:b6:04:a9:8b:0e:39:8b:23:4c:bd:06:a4:10:2a:
         f0:2a:73:26:47:ea:76:8d:7e:e9:9c:b2:9d:ea:a6:73:b5:58:
         bd:b2:3b:72:63:61:8f:fc:99:49:7a:02:3d:59:78:43:ed:c2:
         53:7f:dc:ae:65:87:02:73:43:f7:e3:7c:ad:dd:2d:01:d3:87:
         9c:c0:bb:63:70:d3:13:5e:de:73:7d:b4:55:a1:75:8c:37:80:
         ee:f9:5c:80:5c:66:fe:7a:00:6d:4c:1f:4c:e9:29:50:dd:31:
         9b:f1:58:39:95:f2:9b:fb:fd:dc:0b:5c:4c:1f:cd:98:3c:aa:
         80:a0:8b:b9:c0:56:43:75:5d:59:e8:e9:36:39:a7:e6:8c:6b:
         e6:fc:50:27:bf:f3:35:f8:74:31:75:e0:09:ec:b2:a1:1b:2a:
         c4:20:1f:1c:4f:e1:ed:25:78:cf:d8:64:7a:9b:44:30:a4:fa:
         17:ec:c8:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBJsQBPFt7i07UqL+TjYYWhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTJiZTEzOWFlNzc5Y2QzZDRmZWViY2NkMzY4MjgxYTFm
NWU3YTAwHhcNMjQwNjI0MTAwMDU0WhcNMjQwNjI1MTAwMDU0WjAzMTEwLwYDVQQD
EygzZGZhYTExZDFmNzk1NTBmM2MwZjhiOGRlZTdlNjY5ZWQ2ZGY0YzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvFgtUSocoI4cHlxFkrB1TwKEiwW
O82HH5YmtNxJMBWEL4uxeqC4DMGSi+w4agwRvZGAyVBa+2Qunl9bOQ1tfkM/qtCb
59Uoeqvtb2urPY6aMy3XnSwHSTh+O3RhK8FMK1efBd7mjPXWnadQjwth37K5mZYH
j4Vfvg/yXrCrjrsvL7mg2D0bGBYz6zAreFxrTlm8DqAbE7YrAqEhe98W6ebK26FT
QDz3y10XjozUhPf08LKRR/i3OCWfDUQKUq16Fw208YgUYLrF/pjSgqAmLTh1kNhF
P8ZZHK0+VjpgFrTuCuco1UiyBpybScs/tIMzVXak6/xd5J+ecsv/Qf+DFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD36oR0feVUPPA+Lje5+Zp7W30yTMB8GA1UdIwQY
MBaAFFHivhOa53nNPU/uvM02goGh9eegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yZjU5MzEtMDVhOC00MzZiLTkyNzMt
Y2Q3YjZlZGJmY2Y1LzEvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yZjU5MzEtMDVhOC00MzZiLTkyNzMtY2Q3YjZlZGJmY2Y1
LzEvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0CN1NK0
iYgeCpyq07zIQh+/5Yz2VvGN+aR793dU+1hnDPTeQUmUbU3QOHQSa1AHnhFBxoVr
VxVhFgPaidWcKJ2qaXM5+2x4apTISrYEqYsOOYsjTL0GpBAq8CpzJkfqdo1+6Zyy
neqmc7VYvbI7cmNhj/yZSXoCPVl4Q+3CU3/crmWHAnND9+N8rd0tAdOHnMC7Y3DT
E17ec320VaF1jDeA7vlcgFxm/noAbUwfTOkpUN0xm/FYOZXym/v93AtcTB/NmDyq
gKCLucBWQ3VdWejpNjmn5oxr5vxQJ7/zNfh0MXXgCeyyoRsqxCAfHE/h7SV4z9hk
eptEMKT6F+zI7w==
-----END CERTIFICATE-----
Generated at Mon Jun 24 12:42:48 2024 by rpki-client on console-fra.rpki-client.org