Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
File:                     UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json)
Hash identifier:          2/ckAXHx09SK2CO5+X49I2dykJa5oy6LTC59h+QNUMk=
Subject key identifier:   B8:B1:C9:1E:92:67:F6:03:22:8E:50:C3:BF:6C:5E:04:3B:67:B6:0C
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Certificate issuer:       /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial:       01901D45F8C1E7E00CFA285C96DFD3513CE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
Manifest number:          0BD7
Signing time:             Sat 15 Jun 2024 19:00:43 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:43 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:43 +0000
Files and hashes:         1: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: 0KpoSkXeImiJ0RNsSgC9dtCWsnoOXUT8DjU0HmiyF6o=)
                          2: h-uxfCutWm90cb_OkGvZdgUO3TA.roa (hash: FLvrb9Luuy4YS1hW1kAMyMSg2Zmerv3JjDZnFsPOO4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:f8:c1:e7:e0:0c:fa:28:5c:96:df:d3:51:3c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
        Validity
            Not Before: Jun 15 19:00:43 2024 GMT
            Not After : Jun 16 19:00:43 2024 GMT
        Subject: CN=b8b1c91e9267f603228e50c3bf6c5e043b67b60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9f:72:46:24:70:3f:a3:98:81:8e:ef:3a:9d:
                    d7:c8:83:5f:25:4f:69:cc:38:01:68:ff:f0:06:2d:
                    c6:5a:95:9b:8a:d1:88:c4:df:09:4d:9e:84:c2:a6:
                    2f:6b:4f:ff:6a:38:60:d1:e1:7b:09:e2:1a:0b:85:
                    af:8e:81:e7:f1:8e:9f:13:74:b1:7b:f5:d8:fc:2c:
                    4b:b0:76:13:24:fd:62:04:53:ec:6b:dd:55:d8:7a:
                    2a:27:94:ab:c5:d1:56:53:a2:17:2a:55:6e:ae:83:
                    1c:5a:04:9c:b9:2d:12:eb:1b:2c:bb:86:83:12:78:
                    cc:ec:65:6b:be:1c:84:02:e8:59:e6:6b:b5:cb:84:
                    71:76:84:f2:0c:fb:81:8d:03:46:ee:ec:02:ff:85:
                    6a:5f:0c:eb:d9:2d:23:c7:07:40:8d:23:b1:0a:c5:
                    f1:d5:fd:40:e3:c8:c2:f3:b0:d0:1a:a7:32:1b:32:
                    20:8e:63:d7:e7:44:9a:76:48:79:62:8c:8c:29:39:
                    b1:b5:2f:36:35:12:46:5d:91:c5:d8:e9:41:26:5f:
                    38:46:0c:cf:20:e0:1f:dc:04:1b:4b:3b:ce:4b:2b:
                    ee:15:23:a4:d0:e7:54:9e:9d:09:98:aa:7d:3e:a9:
                    8b:ed:30:ae:e4:b7:18:75:30:5d:fa:ec:96:ba:fc:
                    af:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B1:C9:1E:92:67:F6:03:22:8E:50:C3:BF:6C:5E:04:3B:67:B6:0C
            X509v3 Authority Key Identifier:
                keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ef:31:c9:c2:b8:7c:f7:9c:d1:e1:d0:d4:2f:b1:87:17:8e:
         fd:ba:60:df:c6:68:55:ac:b1:95:5a:6f:e5:cf:18:82:67:bb:
         13:fe:70:a3:47:df:b9:d0:52:83:2a:72:03:3a:a2:bb:c5:72:
         e0:c3:63:a5:a6:e3:80:01:d3:df:0a:dd:be:d0:79:05:61:21:
         19:07:a7:e7:06:a0:d4:50:4d:12:4a:ef:35:d0:d9:9e:bb:c3:
         96:b3:87:17:c4:e1:24:f1:79:8c:dd:2e:9a:d7:f3:cc:97:e4:
         77:91:e8:eb:d6:b4:09:c0:2a:bd:87:ed:c5:ae:83:89:45:ad:
         f2:bf:7a:6e:a3:b5:bc:75:cf:81:39:e8:5e:a0:f6:6f:ab:00:
         57:f0:dc:78:2f:06:6c:74:cf:d4:76:cf:db:db:fd:e2:0c:7f:
         1b:b7:bf:63:54:f0:9e:30:ce:d7:b2:08:5f:68:bd:90:45:6c:
         ee:68:84:0e:84:b1:be:61:ff:77:e3:97:28:bb:df:d6:7f:cf:
         d9:98:af:bc:c9:a3:97:12:fd:a7:85:bd:2a:15:f0:1c:af:00:
         21:8c:bb:42:d1:a1:f5:b5:bd:67:c0:b3:b8:3d:9e:d0:38:42:
         d7:d6:c3:aa:41:02:7e:8f:7c:2b:2b:a9:f9:0c:31:25:9c:07:
         72:6a:24:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:19:31 2024 by rpki-client on console-ams.rpki-client.org