Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
File:                     UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft (raw, json)
Hash identifier:          GvTv4IhWcnPCI8u3qn7RvhIDtqGNHMS9U1JHaytwcnQ=
Subject key identifier:   1C:3C:75:B3:C1:F9:93:37:92:5A:C2:BA:36:D4:6F:41:7B:6E:D2:7A
Authority key identifier: 52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
Certificate issuer:       /CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Certificate serial:       019044F900A5AC7F80BDBE2CD94E7E6B3A04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 12:01:27 +0000
Manifest this update:     Sun 23 Jun 2024 12:01:27 +0000
Manifest next update:     Mon 24 Jun 2024 12:01:27 +0000
Files and hashes:         1: UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl (hash: ZJGm4vZPd6ysGijxmSU/fsNvyWB0h4oq96BqeTpJLJI=)
                          2: _J_FnoPK2DGKlhapEDuj7piGHps.roa (hash: EQxGB4fAOC61rc0AgAswre09FzxWwuoLPKQ2K5SUnGA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f9:00:a5:ac:7f:80:bd:be:2c:d9:4e:7e:6b:3a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5215fe83948cfc7d3e0072870c703fa313502cbc
        Validity
            Not Before: Jun 23 12:01:27 2024 GMT
            Not After : Jun 24 12:01:27 2024 GMT
        Subject: CN=1c3c75b3c1f99337925ac2ba36d46f417b6ed27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:e5:03:95:b9:65:10:18:52:f4:85:ab:09:
                    f5:38:da:65:4a:93:f3:e3:84:4e:5c:99:80:1c:03:
                    f6:05:92:e7:5a:cf:dc:44:5d:05:6f:5b:19:e3:6e:
                    f0:ba:f2:76:d5:a4:c9:2b:d5:5b:e6:05:8e:68:a4:
                    44:c9:bd:9f:cd:00:68:ac:dc:be:23:44:99:63:e9:
                    4b:0e:be:fd:2c:ee:11:5c:ce:9e:80:21:2f:a1:b2:
                    66:80:40:a5:4f:a4:8c:15:ae:d8:66:4b:5a:3d:33:
                    60:d3:ed:dd:d0:70:31:b3:78:4e:d5:24:ff:c9:1c:
                    4f:ac:3d:69:c8:c4:9a:b5:65:bf:9f:df:09:4d:8a:
                    22:ee:86:e3:9f:b7:73:23:3b:f8:83:05:3a:23:eb:
                    e1:d2:06:fb:e3:ab:d0:36:70:9f:dc:48:f8:68:c2:
                    9e:60:5d:33:04:d3:56:8a:69:16:de:68:25:3f:2f:
                    39:50:d2:4b:bb:84:c8:ef:c8:b1:1f:80:9f:5c:2d:
                    c3:7f:fc:5d:f0:fa:c5:0f:66:17:aa:34:ed:8b:89:
                    a4:df:b3:a7:77:06:bc:0e:d3:ff:a8:af:58:d0:f7:
                    c7:33:d9:74:22:dc:cd:09:d0:90:71:ec:a5:40:b2:
                    f0:91:2a:16:da:d6:e9:17:ca:48:4d:3b:77:1e:af:
                    01:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3C:75:B3:C1:F9:93:37:92:5A:C2:BA:36:D4:6F:41:7B:6E:D2:7A
            X509v3 Authority Key Identifier:
                keyid:52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:35:a5:82:59:39:dc:61:02:f7:23:fd:02:7a:3e:4b:a0:56:
         e0:f9:65:2e:a7:23:2b:ce:a3:25:19:0e:c7:82:1a:31:46:9e:
         0f:a8:3d:b0:ba:b7:50:77:fa:fb:cb:4d:39:87:01:23:a2:37:
         02:ba:b2:98:43:41:58:e6:28:3d:e2:25:84:50:85:13:37:a2:
         42:ce:b4:25:ad:c6:ab:1a:ea:b4:92:62:dd:28:d9:55:98:79:
         0e:dc:7a:4e:6d:8d:5b:f6:4a:e1:de:fd:ea:fe:55:af:6f:4c:
         17:a1:62:5f:81:4c:85:5f:d6:46:d7:d2:31:2e:af:70:5b:e4:
         f4:db:05:49:b3:2c:7a:7d:84:88:84:e3:24:21:4a:af:27:13:
         33:02:b9:b9:45:c6:2c:6c:c5:19:42:90:fa:57:0c:43:cb:71:
         2c:4f:cb:cc:d2:b5:3d:70:79:4f:7c:20:d5:4f:4d:1d:dc:9c:
         86:ab:2f:8f:0b:d4:a5:25:46:a9:c8:4d:7c:b5:96:07:69:98:
         fb:b9:3e:4e:f5:aa:be:1c:b3:6e:d5:21:97:7b:49:c2:8b:5e:
         4c:f5:6d:ac:d3:fa:b2:57:c4:21:f1:b9:83:f4:b5:54:3e:ac:
         10:fe:34:a8:b2:1a:68:51:d7:d5:5a:fc:d1:f8:f1:95:cf:f1:
         17:19:e4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:06:37 2024 by rpki-client on console-fra.rpki-client.org