Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
File:                     UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft (raw, json)
Hash identifier:          DbMfEOqmmu5S1p4KfbkHzHd4/34Yp0zHFV2CTC3Ge2M=
Subject key identifier:   CA:E2:E4:EF:F5:E4:B9:DB:7F:E1:06:9D:DD:41:A1:43:7E:C4:8B:ED
Authority key identifier: 51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
Certificate issuer:       /CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Certificate serial:       01901DEBCF805F98C0F947D2A64AE8705DD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
Manifest number:          10CB
Signing time:             Sat 15 Jun 2024 22:01:51 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:51 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:51 +0000
Files and hashes:         1: UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl (hash: vQRJtqnTYxqkPWniH+pUE88yVmtSzXC3znhcWA8Zgik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:cf:80:5f:98:c0:f9:47:d2:a6:4a:e8:70:5d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
        Validity
            Not Before: Jun 15 22:01:51 2024 GMT
            Not After : Jun 16 22:01:51 2024 GMT
        Subject: CN=cae2e4eff5e4b9db7fe1069ddd41a1437ec48bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:a3:01:7d:0d:cd:c7:2a:33:0f:bc:6e:b3:
                    f7:ac:2a:52:bd:08:51:26:35:67:ea:e9:cb:8c:f2:
                    a3:f3:14:53:2d:ba:c2:a6:f7:f9:4a:54:95:86:9f:
                    59:7d:bd:81:36:16:2c:8e:2b:df:6d:61:23:1f:c4:
                    ce:ab:9c:de:38:6f:a7:9c:d4:a7:a7:df:e8:24:fd:
                    a8:39:11:ce:04:38:bf:64:e4:13:aa:a6:8b:4c:68:
                    a8:bf:6a:e7:07:59:d8:30:24:f3:2d:7c:e7:5c:8b:
                    15:52:7d:0c:d4:a7:21:6e:94:ed:55:c4:5e:4a:4f:
                    9e:e2:06:0b:6c:19:6b:74:ed:06:9e:9d:74:07:17:
                    bc:e1:5e:e1:b0:f7:d6:4e:7a:30:3f:4b:14:74:24:
                    6c:b2:c2:74:12:7d:d5:19:21:a5:77:f6:ab:33:c9:
                    f9:5d:06:46:97:d7:19:a1:eb:73:cd:21:0a:bf:9c:
                    d0:9b:d5:5c:91:7b:a6:5e:7d:39:db:60:92:e2:7f:
                    31:be:59:bc:c2:bb:be:ce:e4:df:7e:8c:ea:07:db:
                    41:49:1e:6a:7a:02:4d:f7:7f:dd:d7:52:f7:7a:c6:
                    42:43:0e:08:d6:ba:e4:d3:dc:19:de:ee:f1:47:2b:
                    56:eb:49:63:b5:1d:83:93:35:87:b2:7a:87:3e:f8:
                    55:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E2:E4:EF:F5:E4:B9:DB:7F:E1:06:9D:DD:41:A1:43:7E:C4:8B:ED
            X509v3 Authority Key Identifier:
                keyid:51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4f:c5:57:6b:4e:9b:0d:40:04:33:97:ed:e6:80:49:d3:49:
         bf:34:6d:49:39:86:d2:87:d3:d3:9a:49:a3:a9:13:48:df:ec:
         12:43:6c:87:42:d7:13:5e:40:14:ad:a4:56:ea:ea:3f:56:37:
         a1:37:8d:c4:a9:85:fc:69:c6:be:9b:57:0c:ac:a6:97:83:ca:
         62:56:91:8c:b7:8b:03:4f:94:45:67:88:63:1c:e1:1a:34:43:
         06:18:0a:68:df:eb:2e:57:13:83:bd:8a:8b:64:c7:13:e3:8a:
         8d:d3:9c:82:61:e6:85:eb:b8:62:22:6b:c0:91:3f:97:e6:63:
         c3:cf:eb:b1:48:0b:69:ea:f8:fe:4c:26:94:85:0a:52:d0:eb:
         da:a5:29:f2:14:fb:06:30:98:8f:6c:1b:0f:7e:41:11:d6:00:
         90:6d:64:a0:cd:c4:d5:af:4b:de:31:99:4d:e1:1d:26:16:9b:
         4a:8f:06:b7:ba:dd:5b:79:7c:42:8e:ac:c2:16:91:e5:7e:a3:
         99:bd:31:65:33:fe:32:86:f4:b4:02:7e:40:35:16:df:3c:b7:
         57:39:03:76:cb:65:39:27:37:0f:de:67:c6:29:b0:06:57:b1:
         7b:0d:ba:97:2a:6c:11:9d:b5:05:ed:e9:06:53:12:52:2c:62:
         83:09:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:27 2024 by rpki-client on console-fra.rpki-client.org