Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
File:                     UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft (raw, json)
Hash identifier:          KIfO4Ug2Bpjd/vA2eGxs9iBIPC3ASwTbW43pmqENYMw=
Subject key identifier:   76:43:56:C3:FE:DF:D5:13:37:B8:1C:71:36:0A:19:6C:CB:40:46:66
Authority key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
Certificate issuer:       /CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Certificate serial:       0190546BC72EAA8A66ABD7331585A4065CDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
Manifest number:          11E2
Signing time:             Wed 26 Jun 2024 12:01:07 +0000
Manifest this update:     Wed 26 Jun 2024 12:01:07 +0000
Manifest next update:     Thu 27 Jun 2024 12:01:07 +0000
Files and hashes:         1: UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl (hash: cpxRJIn0Fd1uM9EjVj7pY+53KGCZ1QISPcnWIvCwffE=)
                          2: gn0pW4yvQSC2tqur9J6XWhniWN8.roa (hash: I4siKf/0Syjrm4QRMFKResE5U/AU4oPV0qrVMl7zWFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:54:6b:c7:2e:aa:8a:66:ab:d7:33:15:85:a4:06:5c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
        Validity
            Not Before: Jun 26 12:01:07 2024 GMT
            Not After : Jun 27 12:01:07 2024 GMT
        Subject: CN=764356c3fedfd51337b81c71360a196ccb404666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:03:d0:ed:5e:42:d4:0b:35:4e:6f:67:94:df:
                    65:91:32:91:dd:35:9a:5c:db:91:dd:d5:57:06:c4:
                    db:64:65:9b:f2:e7:71:80:9f:1b:a0:17:d4:72:73:
                    d1:0f:cc:96:a0:1d:bd:e9:06:23:c8:f4:1c:6e:4d:
                    92:17:a9:82:65:e9:d9:9b:b4:c6:5b:20:02:03:6a:
                    f6:7a:41:d8:df:bf:60:e8:17:88:cc:5c:a2:6b:b0:
                    37:2c:84:e4:09:6d:fd:ce:de:2a:f4:ca:9f:fb:4a:
                    a8:07:6f:de:8b:e7:8b:ec:13:0a:3c:d8:ee:03:da:
                    46:04:c8:73:e1:4e:9d:1b:3a:b9:00:17:79:21:85:
                    5a:ac:28:39:d9:5f:54:4a:04:96:90:bf:68:e9:38:
                    de:62:06:4f:18:65:70:79:1d:6d:23:92:17:09:a3:
                    9a:5c:91:76:cd:f6:d8:a0:43:52:66:68:29:1f:7c:
                    38:c2:23:27:ea:ed:8b:37:e1:9d:3a:95:e9:e8:69:
                    b9:21:01:31:f1:a5:81:b5:f7:0b:c2:7f:5a:02:89:
                    d8:56:fa:22:5d:c5:31:52:aa:33:bc:17:fc:ab:aa:
                    ae:d0:69:df:d6:be:e3:86:66:14:b2:53:af:ec:56:
                    d9:f4:a4:b4:50:cf:0a:31:ce:e5:fc:7d:a7:4a:f4:
                    7f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:43:56:C3:FE:DF:D5:13:37:B8:1C:71:36:0A:19:6C:CB:40:46:66
            X509v3 Authority Key Identifier:
                keyid:51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e8:68:ea:42:24:b3:5c:6c:0c:29:2c:97:b0:19:85:ab:f2:
         65:3e:1a:43:4a:d3:3c:fb:eb:82:77:ff:44:87:f9:f7:40:5c:
         6d:ec:46:6b:ea:8f:15:b6:fd:6a:5a:a9:68:e0:d9:14:ab:41:
         62:73:c3:05:5f:0a:6e:1f:df:78:16:79:0a:83:4c:b7:ca:50:
         b3:49:e1:6a:41:35:18:a5:70:8a:31:51:ca:87:1e:a2:c3:ed:
         7c:3d:75:5e:4e:ec:c9:a8:91:6c:e8:15:3c:bd:b8:22:67:d7:
         9d:ad:1f:50:fb:94:fc:e7:7e:44:e2:8a:53:c9:46:c6:cf:5e:
         84:15:71:5b:68:bb:45:7b:c0:9f:04:92:c2:5f:a1:df:70:e3:
         6c:8e:fb:64:fb:5b:70:96:a2:c8:85:c2:89:b9:cb:41:65:6a:
         91:a2:a9:65:a4:13:fc:79:0a:64:08:20:3e:35:e8:31:59:98:
         f3:d5:76:95:3e:34:3e:3b:d5:2b:e8:a2:70:0e:2d:e1:d0:8d:
         f5:bd:84:8c:31:9f:31:f2:a5:58:54:d9:09:96:31:e5:7c:90:
         a8:fd:58:ce:e9:0f:82:0b:d5:d6:71:2f:d6:61:7d:1e:2b:56:
         27:92:1c:f3:ac:7a:f9:ee:32:34:04:d7:2f:7f:70:a5:ae:71:
         a8:75:7d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:38:10 2024 by rpki-client on console-ams.rpki-client.org