Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
File:                     ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json)
Hash identifier:          ko/YKc/2sJqZdZH1AgkkkoX302uKiERRrEbMPyMDgOE=
Subject key identifier:   53:11:24:BC:9B:0C:4B:A4:2B:EA:67:6C:5F:1C:3C:9B:EF:43:5D:F1
Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6
Certificate issuer:       /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
Certificate serial:       019233C8E3371F2C8882D5560BDDCFA00D5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
Manifest number:          03E1
Signing time:             Fri 27 Sep 2024 14:00:56 +0000
Manifest this update:     Fri 27 Sep 2024 14:00:56 +0000
Manifest next update:     Sat 28 Sep 2024 14:00:56 +0000
Files and hashes:         1: 18C8Vnzf1ZT05VrwTmfp_hgJuwQ.roa (hash: ZxrpxxMSnzm4n5pA7j3QcHXiFBwfvRPAWXc0YZwbw3s=)
                          2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: JgJIZOV5hKvUUVYfrds+XHEGfD/EPSVEmD5LhhHZZA8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:33:c8:e3:37:1f:2c:88:82:d5:56:0b:dd:cf:a0:0d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
        Validity
            Not Before: Sep 27 14:00:56 2024 GMT
            Not After : Sep 28 14:00:56 2024 GMT
        Subject: CN=531124bc9b0c4ba42bea676c5f1c3c9bef435df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:41:00:f9:3f:e7:1b:a5:f6:7f:84:88:04:4d:
                    87:ca:d6:d0:e1:98:20:38:2a:5e:91:7e:08:1c:3a:
                    6c:b8:d5:69:af:a7:18:72:32:95:7e:ae:5a:9c:bd:
                    f6:d1:0c:03:3b:ce:6d:04:68:a5:22:6b:60:fb:15:
                    a2:25:6d:0f:7b:7e:44:f4:60:b7:46:cf:b5:b2:87:
                    07:35:f1:0b:af:25:46:70:6d:e0:cb:b9:bd:e0:39:
                    e0:53:67:74:a4:6d:45:b7:57:09:88:3d:6a:2a:82:
                    04:34:4c:3d:f5:e4:13:ae:55:5d:ea:16:a8:f8:57:
                    2c:1a:34:b9:4a:57:b9:b3:e8:d4:15:56:1f:93:cc:
                    96:34:2c:c4:f5:87:19:7f:55:93:75:3f:57:20:cf:
                    a8:ff:c5:44:7d:af:49:5f:43:18:7b:fd:b4:e6:b8:
                    ab:64:c0:79:ed:b7:40:b5:44:96:d9:ed:b6:c8:10:
                    83:f0:24:b2:d6:b3:95:2c:30:79:7a:67:6d:14:5b:
                    51:07:3a:20:14:62:cf:fe:ca:b2:cb:51:a4:e8:2d:
                    83:d7:76:fe:02:d4:eb:4e:23:2e:6b:bb:20:f8:50:
                    96:ed:c2:66:d9:86:e5:ee:f6:aa:08:a4:2f:d8:42:
                    04:d7:1a:d9:f0:c3:a0:32:73:41:84:43:47:b1:99:
                    dd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:11:24:BC:9B:0C:4B:A4:2B:EA:67:6C:5F:1C:3C:9B:EF:43:5D:F1
            X509v3 Authority Key Identifier:
                keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:46:ed:68:a3:85:79:99:4b:d2:69:49:01:72:8c:c3:4d:28:
         ec:72:28:8e:1f:da:bb:fb:7c:97:52:f0:58:90:2d:12:84:9a:
         2e:84:a6:7f:f1:e0:8d:55:88:94:8c:f5:03:44:71:18:d9:03:
         a3:23:93:8c:47:ef:8f:ac:0d:0b:0b:af:18:b1:0c:39:92:08:
         91:d2:29:16:ab:93:28:2d:40:85:32:34:51:02:be:1f:5b:cd:
         85:c2:3b:97:56:e9:6b:9f:4b:c7:1c:47:7c:f0:fb:e9:19:33:
         65:72:11:c9:7b:2c:61:39:b0:75:36:db:3f:5c:06:81:1d:3a:
         26:6e:b9:22:1b:16:ab:f4:b2:76:3c:89:60:2c:04:f0:2d:3b:
         04:92:c0:15:11:ab:f9:17:a3:72:4d:64:b3:90:a4:60:d1:37:
         44:48:54:6e:d5:70:1d:65:e3:4c:1f:2b:15:25:9d:ae:30:28:
         4d:87:bc:53:a5:0f:5d:bb:53:fe:cc:e1:ea:6f:e1:1f:cd:49:
         ef:da:c3:e3:c6:2c:e4:38:9b:75:41:de:71:df:64:1a:56:bb:
         79:df:a2:00:62:c1:e1:c1:81:cb:72:d1:a0:20:26:9b:69:2a:
         aa:f9:e9:64:0c:9a:3a:f7:f1:4f:b3:4d:93:c9:49:e6:be:50:
         66:cf:c9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:03:44 2024 by rpki-client on console-fra.rpki-client.org