Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
File:                     UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json)
Hash identifier:          ZG2zlrPn3nLDNVtLwOIl47DrwBKmj3D8msaI4NoXKiI=
Subject key identifier:   A5:3B:C6:34:E5:2B:08:5D:29:BF:C2:1C:52:EB:CC:3D:A1:17:BF:47
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Certificate issuer:       /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial:       019041F7B1B642C9B227E7EED76BD55F3C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
Manifest number:          0BEA
Signing time:             Sat 22 Jun 2024 22:01:10 +0000
Manifest this update:     Sat 22 Jun 2024 22:01:10 +0000
Manifest next update:     Sun 23 Jun 2024 22:01:10 +0000
Files and hashes:         1: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: Em4sfnjE5WSWVY3dfXKLMbn0t9VCGs5/blEnmRacPng=)
                          2: h-uxfCutWm90cb_OkGvZdgUO3TA.roa (hash: FLvrb9Luuy4YS1hW1kAMyMSg2Zmerv3JjDZnFsPOO4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:f7:b1:b6:42:c9:b2:27:e7:ee:d7:6b:d5:5f:3c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
        Validity
            Not Before: Jun 22 22:01:10 2024 GMT
            Not After : Jun 23 22:01:10 2024 GMT
        Subject: CN=a53bc634e52b085d29bfc21c52ebcc3da117bf47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:2a:c4:ec:1a:b0:b0:e9:55:76:50:a9:1b:
                    87:18:65:64:69:36:42:41:d3:ed:e7:a3:e8:5a:e5:
                    1f:c5:f5:f8:37:88:7e:1f:c2:50:d9:7d:f4:ad:76:
                    96:56:5f:eb:8f:11:82:89:ad:2d:64:5a:94:4a:f2:
                    a1:83:83:70:15:27:e1:d2:13:c3:4b:20:1b:e4:83:
                    32:65:9c:d8:6c:12:f9:8a:49:74:3e:88:4b:18:67:
                    28:e2:a4:db:9d:65:9e:c5:07:4c:b4:6e:ff:ae:1e:
                    fa:ae:0c:69:73:d2:93:5c:05:08:a2:e6:24:50:57:
                    24:df:0f:64:66:a3:93:c2:2d:df:63:56:67:16:72:
                    4d:89:96:3b:54:2d:ef:a1:90:57:ea:0c:fd:98:24:
                    13:32:2f:e0:81:1c:72:25:43:45:a8:8f:01:80:61:
                    4e:a7:cd:d3:65:f9:a7:98:93:e9:cf:f9:c8:1d:65:
                    07:15:aa:c9:48:7f:2c:be:11:a4:06:88:f8:34:88:
                    0d:37:ca:97:5e:b6:4a:75:f8:67:39:e0:f6:1e:ad:
                    0c:f4:8f:0f:2a:00:e9:d1:30:a8:12:b7:a4:ae:a3:
                    cd:1d:62:21:a0:7d:a1:b7:79:5b:92:3d:b2:a1:6e:
                    79:bd:54:2a:bb:82:2c:86:a8:15:1c:86:c4:1d:eb:
                    2c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3B:C6:34:E5:2B:08:5D:29:BF:C2:1C:52:EB:CC:3D:A1:17:BF:47
            X509v3 Authority Key Identifier:
                keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f6:e7:cd:81:2b:b0:73:9e:0d:47:26:18:15:e4:ac:2f:af:
         61:1e:03:f1:7d:de:9c:b8:cb:fd:33:54:ab:c6:0d:4d:82:96:
         aa:68:a2:9b:2d:fa:fa:36:ae:26:31:b4:d4:5b:15:8f:72:13:
         ae:75:79:f6:a4:88:2b:27:3e:2d:18:a1:65:1e:24:f2:d5:f3:
         2b:05:82:7b:ee:39:a7:ce:53:12:ad:05:e3:57:83:ab:bb:f6:
         92:fe:52:05:a9:19:11:9d:d8:7a:4d:28:ea:75:d5:59:3c:d7:
         9f:e0:e4:dd:c7:f9:42:07:de:a2:a3:bb:46:4c:7a:3f:a9:de:
         01:0b:90:8e:0b:41:07:7f:fd:d4:17:c6:cc:2b:39:84:25:2d:
         4c:3c:7d:95:a9:e3:4f:2b:4f:7d:a7:93:44:42:02:17:31:98:
         33:76:ca:a6:b9:c3:ab:12:28:7f:f3:60:7a:fa:3c:9c:d8:d2:
         33:bc:75:88:b7:b9:f8:98:10:bc:74:a9:d1:8e:c4:9b:81:a1:
         be:5b:54:3e:19:36:f6:34:64:9f:f0:d1:72:23:ca:f2:64:26:
         8c:df:03:9e:7c:7c:b1:59:b8:0e:6b:6a:83:e0:4f:26:55:1f:
         3d:21:6c:8b:97:eb:36:20:3b:99:8c:91:9c:1d:52:61:81:7f:
         03:a9:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:52:21 2024 by rpki-client on console-fra.rpki-client.org