Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
File:                     2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json)
Hash identifier:          7iBNQ/3rpxuCDsgIskN6OAH28pxNo+8K0ZnUAXZdEeo=
Subject key identifier:   B0:5E:64:09:38:E7:44:58:15:CC:6C:AF:D0:9E:29:48:B9:DC:4B:71
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Certificate issuer:       /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial:       018F4B6B510B8401EA3FE624E12602ACA2D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
Manifest number:          0E9B
Signing time:             Mon 06 May 2024 01:01:15 +0000
Manifest this update:     Mon 06 May 2024 01:01:15 +0000
Manifest next update:     Tue 07 May 2024 01:01:15 +0000
Files and hashes:         1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: Y1EY35vQm8EJGAmiOreojY7pZGpUEomgLe0DlXPRP/I=)
                          2: FDDIx9KhLAsg6zHqxdAb7TxzVk4.roa (hash: wG0s0SWMxXHMZgZr1IdtwEydq3mvcNJrOezrPwllGqU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6b:51:0b:84:01:ea:3f:e6:24:e1:26:02:ac:a2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
        Validity
            Not Before: May  6 01:01:15 2024 GMT
            Not After : May  7 01:01:15 2024 GMT
        Subject: CN=b05e640938e7445815cc6cafd09e2948b9dc4b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:85:f4:46:cf:02:ad:95:05:84:06:41:cf:c3:
                    1f:ab:9f:e1:62:72:9d:1e:3b:d0:43:15:f6:09:67:
                    15:47:f1:f1:2b:77:5b:91:a8:f2:c2:39:66:d9:37:
                    a0:4f:51:6e:fa:86:2b:c0:7a:fd:0d:64:c8:2b:51:
                    92:d0:a9:ae:37:a3:95:78:8f:45:91:d8:e9:70:30:
                    53:61:a8:05:58:61:f4:ce:27:eb:ac:8b:0c:4d:71:
                    04:9b:50:53:9a:bc:4b:16:c0:ad:4d:95:17:aa:f8:
                    08:dc:12:94:b8:46:c3:bd:7a:75:53:86:97:5f:ca:
                    eb:4e:97:eb:f2:9e:d4:26:93:31:af:90:7f:67:6f:
                    af:b8:cc:c1:5a:e6:5b:de:1e:06:04:c3:1c:29:a6:
                    4a:64:35:5a:97:59:11:12:a1:47:0f:68:31:14:88:
                    1a:0d:64:0c:c0:85:70:6b:77:29:42:a6:67:8e:ca:
                    ef:b3:76:63:0e:60:6c:af:4b:55:de:e7:ac:55:4a:
                    2c:b8:bd:46:51:22:d8:47:58:0a:83:1c:84:b7:72:
                    d9:93:bf:57:52:ce:12:b7:c8:66:43:c9:4c:36:c4:
                    f8:69:18:31:3b:34:4a:de:37:76:0e:7b:ef:3f:56:
                    fc:ca:ce:d0:30:c4:b1:ab:ba:52:51:e1:1a:aa:f1:
                    23:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5E:64:09:38:E7:44:58:15:CC:6C:AF:D0:9E:29:48:B9:DC:4B:71
            X509v3 Authority Key Identifier:
                keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:1b:72:d7:64:25:eb:c9:c5:66:04:54:ef:b7:e5:66:19:2f:
         c5:3c:65:68:96:34:e5:e4:7f:cb:dd:96:4e:3e:dc:ec:db:a7:
         7f:b8:9d:51:66:61:e2:d4:a1:fe:ed:57:af:93:84:53:53:13:
         af:65:e5:42:9e:07:81:a3:74:ed:c7:9a:5e:0a:6c:bf:06:d0:
         00:a3:a4:c9:24:07:48:0e:58:a4:42:88:9d:7a:4c:7f:5a:0e:
         6c:8f:4e:5a:8e:5f:e1:ab:ed:52:69:e8:b6:60:f8:19:d8:70:
         d2:24:83:f2:7c:61:c0:81:f3:b0:bd:df:e7:5c:68:cb:1e:94:
         5e:90:4f:56:ec:ad:11:e5:ef:d3:01:31:8f:e9:91:be:bd:e1:
         91:52:05:a4:b6:07:e6:aa:ea:ba:53:98:20:f3:2b:ce:87:ee:
         6c:df:74:7f:3d:85:ac:d0:65:0d:8e:a4:4b:ec:4a:3a:19:fe:
         65:4c:1c:c4:34:9c:e6:7e:c4:32:99:83:f2:03:21:aa:1d:5f:
         fe:96:96:41:fd:89:d8:b0:1b:38:ca:e3:54:b0:29:82:8f:a6:
         40:27:e0:cf:28:87:81:eb:a5:ff:a1:bd:9c:df:1a:07:11:30:
         05:6f:25:4e:93:21:4f:ee:d3:f3:76:c7:4d:f7:15:0b:7d:ab:
         5a:a4:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:15:39 2024 by rpki-client on console-ams.rpki-client.org