Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File:                     U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier:          IAslvqpeVAvGPKg3HD+PKPETrpxWd7D/7Hvq7eADU7A=
Subject key identifier:   B8:83:10:BD:39:58:95:27:C6:5D:9C:8E:62:35:99:63:F2:DB:92:78
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer:       /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial:       0190486831EADBD235ED73EF54EEA708FDA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number:          0899
Signing time:             Mon 24 Jun 2024 04:01:46 +0000
Manifest this update:     Mon 24 Jun 2024 04:01:46 +0000
Manifest next update:     Tue 25 Jun 2024 04:01:46 +0000
Files and hashes:         1: 3gLtSDLEe6rtZLYjTGS-p898gGg.roa (hash: MNsiVtjxGnS+4S66O4z33HHRr03ktwKBRe32ALWdmQc=)
                          2: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: z67VMfuZot1BorWionZoz1FynxbHCRMo9YKpxcFT9iI=)
                          3: X8irpd-3ZTCbCG81SguCHGWGATA.roa (hash: hZdQAoVG134VXboM+RRiU+3eX0GUHo+5pVXxqIQ1zrI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:31:ea:db:d2:35:ed:73:ef:54:ee:a7:08:fd:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
        Validity
            Not Before: Jun 24 04:01:46 2024 GMT
            Not After : Jun 25 04:01:46 2024 GMT
        Subject: CN=b88310bd39589527c65d9c8e62359963f2db9278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:ca:e3:9e:b8:09:07:d6:68:dd:53:06:cf:
                    0c:c4:e3:76:b0:dd:41:94:9a:91:e4:19:60:0b:4f:
                    53:2c:b6:92:e2:0a:00:ab:f4:ce:7e:f8:5e:0e:52:
                    ed:f2:04:34:26:61:c1:d9:a9:90:fd:69:ad:7f:dc:
                    4a:80:23:74:09:76:c4:75:2f:f8:e4:47:de:9a:c5:
                    9a:9d:d0:54:bc:68:de:9a:8e:48:d5:7f:3a:19:c9:
                    15:77:37:82:75:6c:dd:52:ac:d5:48:bd:b1:6b:db:
                    0b:e3:af:a7:95:79:a4:65:1d:cc:bb:00:0f:e7:93:
                    38:b0:fb:b0:c5:54:a2:43:aa:48:61:c4:dc:56:5e:
                    68:a6:53:21:d8:23:28:28:21:fa:e1:15:06:c0:4a:
                    19:e8:eb:3e:73:d8:63:a2:d0:11:48:28:05:c6:6b:
                    3b:7f:42:ef:a2:0f:f3:a9:2f:fa:ce:bf:c5:44:c9:
                    75:5c:28:df:f5:60:2c:fe:98:77:b3:37:18:0c:a6:
                    93:b8:56:81:e2:c3:11:75:73:6f:ec:16:05:33:9f:
                    b4:18:b1:cf:7c:64:d2:9e:82:5c:c7:72:23:63:58:
                    8a:38:76:76:01:da:4f:25:d7:81:3c:e2:05:6f:2b:
                    58:83:6d:ed:93:8b:2d:c6:50:30:cd:b6:e0:69:a0:
                    76:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:83:10:BD:39:58:95:27:C6:5D:9C:8E:62:35:99:63:F2:DB:92:78
            X509v3 Authority Key Identifier:
                keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:eb:64:56:1a:54:82:a8:b9:7c:95:66:c3:0e:16:7a:2f:8d:
         66:4f:27:05:1c:31:8e:1a:9e:08:af:2f:83:40:e0:ca:18:39:
         5e:a6:0f:9f:b3:3c:aa:5d:d7:98:2d:f6:60:53:35:89:41:56:
         bd:56:c3:35:5c:93:1a:4d:a3:57:12:00:19:ff:f8:18:5d:ff:
         41:1c:78:dd:34:4f:65:7d:87:76:d5:dd:8a:b4:06:b9:5a:58:
         12:08:79:c1:9d:e0:31:97:16:0a:51:b4:bf:2b:9f:8b:6f:15:
         e7:09:ef:5a:d7:07:da:8b:79:40:c8:1a:b6:03:22:7b:e8:10:
         5f:ba:7b:1f:3b:50:c2:70:c9:77:f4:52:e2:a1:32:8d:18:cd:
         20:66:15:ef:ba:42:84:2e:b7:9a:e2:27:2d:7e:b5:8c:9b:4e:
         ed:b0:a4:43:ca:be:87:98:2a:d1:6d:b7:87:e5:26:4d:2f:e4:
         4e:9c:72:a7:19:3b:a7:37:c0:50:c4:70:8d:7d:25:be:63:9f:
         83:59:f6:de:ff:df:cc:50:02:42:aa:57:b0:20:f7:9c:0f:23:
         5e:c0:fa:1d:1e:8c:17:4a:76:72:39:98:2d:3d:77:6a:19:ba:
         43:54:36:cd:cf:c8:7f:02:32:2e:3f:24:d4:44:d5:af:2e:5f:
         0b:1e:17:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:24:52 2024 by rpki-client on console-ams.rpki-client.org