Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
File:                     Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft (raw, json)
Hash identifier:          w5aGcDB2OCMc1kbcUB1UnGi0gmBaO2DxeSN742JTJ2I=
Subject key identifier:   94:B5:02:0E:39:53:26:A9:9F:9B:6E:7F:49:F7:DE:40:0B:D1:DC:19
Authority key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
Certificate issuer:       /CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Certificate serial:       01901D0F7D0D1BEC9AB55B0376CC69623348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
Manifest number:          037D
Signing time:             Sat 15 Jun 2024 18:01:12 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:12 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:12 +0000
Files and hashes:         1: Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl (hash: oK3R+kADHORfGw6fgkoI+y7LisWBGpQb2nFBUwAIfmo=)
                          2: fh_fN6IggxnN7ViMy6Ta99s43Ok.roa (hash: LyRgZ56xoLGVEad5ZMcOIVv4+9Vietiou/zkCUb7jGI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:7d:0d:1b:ec:9a:b5:5b:03:76:cc:69:62:33:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
        Validity
            Not Before: Jun 15 18:01:12 2024 GMT
            Not After : Jun 16 18:01:12 2024 GMT
        Subject: CN=94b5020e395326a99f9b6e7f49f7de400bd1dc19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:26:63:59:db:63:e6:2e:ce:87:70:62:85:
                    b2:2a:b4:0d:b2:89:a9:c9:05:c7:01:a2:c6:bb:ae:
                    e5:cc:75:24:7e:00:e8:b0:01:ea:6d:49:52:37:6f:
                    3e:9a:91:85:65:99:ca:bd:30:e0:d3:b2:6f:a2:b6:
                    e5:99:81:90:70:08:d9:ce:29:2e:bc:03:d0:aa:45:
                    54:13:55:08:03:73:66:10:86:99:56:34:f4:3a:81:
                    29:be:9d:5e:04:72:03:d1:f7:38:25:c4:87:5c:4c:
                    41:22:8f:9a:0e:b4:c8:fd:ff:6a:43:57:0f:75:e1:
                    75:0c:4d:95:56:f5:cc:bb:7a:05:f4:9e:74:76:f0:
                    e6:de:4f:70:10:2b:70:1c:74:1d:e6:7f:e5:5c:38:
                    2f:c9:2e:41:83:9d:f3:77:22:14:09:f6:62:eb:87:
                    03:dc:9b:92:ef:68:85:80:bb:04:48:e8:1e:3b:a9:
                    c7:12:45:e4:c5:14:ef:ca:89:3e:5d:05:86:0c:21:
                    f2:4c:62:4a:ec:dc:56:79:e7:69:35:9c:f4:08:d0:
                    44:ab:f3:a4:43:e3:f2:68:bc:44:31:7a:41:aa:a9:
                    48:a7:02:cc:13:8f:a6:12:67:80:db:a2:9f:07:b1:
                    bc:92:95:1d:56:f0:15:41:db:bc:dc:b5:f4:77:11:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B5:02:0E:39:53:26:A9:9F:9B:6E:7F:49:F7:DE:40:0B:D1:DC:19
            X509v3 Authority Key Identifier:
                keyid:53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f1:95:a6:e5:72:89:28:e4:93:e9:8d:5b:db:a8:2b:18:7c:
         1d:19:5e:8a:7d:27:99:6a:dd:e4:f7:aa:5f:8a:5d:31:8a:e0:
         8e:a0:ad:6d:55:66:cd:00:12:0a:5b:cb:8a:ad:83:01:80:1c:
         f1:c8:c7:ef:06:8a:12:cc:a4:39:ba:05:d0:fa:47:95:4b:14:
         bf:ba:eb:50:a1:44:9a:fb:e7:fb:e9:3a:01:3f:ac:18:e5:6a:
         77:b7:29:b0:6f:7e:29:1f:a3:ef:c1:3a:99:f2:cd:30:a9:0e:
         9c:ed:b4:3f:f4:22:ef:a3:57:e6:3a:78:51:67:81:8e:06:cc:
         ed:19:6d:59:0a:4f:80:18:a1:1d:2d:f4:02:7e:17:d6:02:9d:
         05:c1:d2:ab:eb:fb:b6:3c:f3:f4:0f:ed:80:2f:ad:4a:16:49:
         11:1b:43:5b:08:ee:af:bf:29:8a:ee:8f:d5:0a:56:d2:9c:3b:
         8b:9e:9d:bf:5a:09:27:85:56:f8:02:47:60:4a:5a:0b:22:8e:
         c3:80:e4:57:e7:16:1c:19:64:fb:88:d1:8e:10:0a:15:fa:bd:
         34:da:a4:0c:0a:57:6a:6d:29:99:8a:63:68:af:3d:86:d2:5a:
         18:c3:b5:d6:45:69:ec:3e:de:0a:f3:35:49:e5:54:f1:7e:74:
         ce:21:40:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdD30NG+yatVsDdsxpYjNIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMWQ1NWE4NjlmMTA1YWY2YWJjZGZhMGNhNDA2YWYxZjQ5
YjI0ZjEwHhcNMjQwNjE1MTgwMTEyWhcNMjQwNjE2MTgwMTEyWjAzMTEwLwYDVQQD
Eyg5NGI1MDIwZTM5NTMyNmE5OWY5YjZlN2Y0OWY3ZGU0MDBiZDFkYzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufUmY1nbY+YuzodwYoWyKrQNsomp
yQXHAaLGu67lzHUkfgDosAHqbUlSN28+mpGFZZnKvTDg07JvorblmYGQcAjZziku
vAPQqkVUE1UIA3NmEIaZVjT0OoEpvp1eBHID0fc4JcSHXExBIo+aDrTI/f9qQ1cP
deF1DE2VVvXMu3oF9J50dvDm3k9wECtwHHQd5n/lXDgvyS5Bg53zdyIUCfZi64cD
3JuS72iFgLsESOgeO6nHEkXkxRTvyok+XQWGDCHyTGJK7NxWeedpNZz0CNBEq/Ok
Q+PyaLxEMXpBqqlIpwLME4+mEmeA26KfB7G8kpUdVvAVQdu83LX0dxHvCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJS1Ag45Uyapn5tuf0n33kAL0dwZMB8GA1UdIwQY
MBaAFFMdVahp8QWvarzfoMpAavH0myTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXgxVnFHbnhCYTlxdk4tZ3lrQnE4ZlNiSlBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lZWMyY2QtMzZkZS00Zjk2LTlmYjIt
NGRjMWVmODkwNDRiLzEvVXgxVnFHbnhCYTlxdk4tZ3lrQnE4ZlNiSlBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lZWMyY2QtMzZkZS00Zjk2LTlmYjItNGRjMWVmODkwNDRi
LzEvVXgxVnFHbnhCYTlxdk4tZ3lrQnE4ZlNiSlBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfGVpuVy
iSjkk+mNW9uoKxh8HRlein0nmWrd5PeqX4pdMYrgjqCtbVVmzQASClvLiq2DAYAc
8cjH7waKEsykOboF0PpHlUsUv7rrUKFEmvvn++k6AT+sGOVqd7cpsG9+KR+j78E6
mfLNMKkOnO20P/Qi76NX5jp4UWeBjgbM7RltWQpPgBihHS30An4X1gKdBcHSq+v7
tjzz9A/tgC+tShZJERtDWwjur78piu6P1QpW0pw7i56dv1oJJ4VW+AJHYEpaCyKO
w4DkV+cWHBlk+4jRjhAKFfq9NNqkDApXam0pmYpjaK89htJaGMO11kVp7D7eCvM1
SeVU8X50ziFAWA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:29 2024 by rpki-client on console-fra.rpki-client.org