Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
File:                     UoMHMHbmc6Mrfda83A-8wW83tqE.mft (raw, json)
Hash identifier:          R+RzrvSgj60Mkpz6vhY1+A5kaVDNtXo9OM6LNuj2N78=
Subject key identifier:   C9:CC:06:26:98:7E:72:19:81:C1:68:37:40:E4:D0:40:5A:E0:FC:2A
Authority key identifier: 52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
Certificate issuer:       /CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Certificate serial:       01906C0628243D345EBB1504F8D5BFE21789
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
Manifest number:          11EE
Signing time:             Mon 01 Jul 2024 02:01:01 +0000
Manifest this update:     Mon 01 Jul 2024 02:01:01 +0000
Manifest next update:     Tue 02 Jul 2024 02:01:01 +0000
Files and hashes:         1: PuuC-HsAwSwp9LKvkvvRnhd-yvg.roa (hash: kxJBImrwTrDsEU2dj9nn5/1If1Rk8km40KDpjgnL7sU=)
                          2: UoMHMHbmc6Mrfda83A-8wW83tqE.crl (hash: oIJXKDhhUCSvtMgv2ug5W0fgT++rLr/CuSbj/8Mq68s=)
                          3: ZO5MFJsngPXsOMCLNwM_PfKZQMI.roa (hash: /PMMlJK60JDn2M/fUhpLHw20M4dkNS1K/mN5jJT2Qfs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 02:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6c:06:28:24:3d:34:5e:bb:15:04:f8:d5:bf:e2:17:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
        Validity
            Not Before: Jul  1 02:01:01 2024 GMT
            Not After : Jul  2 02:01:01 2024 GMT
        Subject: CN=c9cc0626987e721981c1683740e4d0405ae0fc2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:bd:e9:8f:c8:ce:94:cc:cb:8f:2a:71:1e:
                    c8:7b:aa:f6:2a:3c:a8:2d:58:ff:77:39:e3:ff:86:
                    de:1c:9b:b4:97:20:a2:b5:77:55:3e:b7:5f:79:d8:
                    06:c0:63:7c:09:16:b9:fd:22:37:11:2c:5b:7d:77:
                    87:8b:40:55:f4:24:9b:7e:16:bc:b9:e9:50:c1:c6:
                    c3:a8:f9:14:2c:b3:05:a6:40:0f:fd:c0:4c:8c:dc:
                    c0:f7:30:73:c4:fe:a7:55:a7:61:4d:5f:96:50:9d:
                    37:4a:63:1d:81:bc:18:f8:72:78:3e:13:c6:da:70:
                    42:5c:fb:cc:58:78:6a:16:08:89:83:d1:9e:40:3f:
                    cd:45:17:f3:a6:33:fd:63:9b:59:7e:d6:93:66:d1:
                    2e:64:23:be:c8:db:1e:2f:99:92:1b:92:59:d5:ff:
                    11:87:b7:17:ca:08:45:d5:c8:e7:79:a1:8f:19:de:
                    ce:dc:a0:ae:bb:83:1c:a9:b1:d2:63:7f:38:f5:9d:
                    95:3a:94:e5:5e:67:e1:d8:24:ee:07:69:00:16:57:
                    82:79:f2:ba:7b:90:8b:f4:9e:31:34:0e:bc:6e:3a:
                    b0:e0:f3:00:8c:8a:da:2f:ac:a5:12:ed:74:05:51:
                    fc:7f:b9:0f:bf:20:e3:4d:dd:a4:81:1d:72:d2:a0:
                    7b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CC:06:26:98:7E:72:19:81:C1:68:37:40:E4:D0:40:5A:E0:FC:2A
            X509v3 Authority Key Identifier:
                keyid:52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b9:93:6a:c8:51:b4:46:07:0e:f1:bc:06:01:2b:a7:ea:e7:
         b2:a1:4a:76:f6:80:96:31:1e:c5:6b:1d:0f:a9:a7:51:0c:b2:
         87:3c:ad:2b:21:3f:26:92:07:67:43:f1:95:93:57:e5:93:27:
         43:9d:37:04:bc:ea:82:9d:84:78:e6:45:eb:c6:93:de:c2:94:
         d5:06:98:98:73:0d:52:14:fd:5b:94:fd:3d:21:b5:e4:46:26:
         8f:4a:33:2f:8b:96:68:e6:60:87:2a:27:c0:7a:06:c0:31:b7:
         7f:8a:1c:da:ab:7c:38:0b:da:e9:ea:d8:72:4d:75:74:37:5e:
         16:46:29:55:db:df:6a:ea:6c:bd:2d:63:32:79:85:71:c8:1d:
         2e:73:3f:8b:66:ec:df:05:33:39:e1:05:d3:ec:6e:ce:94:eb:
         45:84:ab:40:8d:a8:c7:82:ad:7f:1b:2b:e8:78:00:96:4c:a2:
         90:c8:a5:b8:55:37:e3:0d:14:dc:c7:e7:1b:e2:39:51:a3:c4:
         cc:70:a0:78:8a:09:b6:01:47:ba:bc:c7:d3:bb:fb:73:4c:e0:
         76:1a:ff:55:da:cd:aa:a1:61:5e:0d:69:42:f5:ef:cd:bf:de:
         eb:f1:ec:76:44:ff:66:3a:9b:5e:9b:79:00:f4:88:4d:f9:5a:
         32:b9:8e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 10:33:46 2024 by rpki-client on console-ams.rpki-client.org