Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
File:                     ueLcI0DFMJtj66I8--fu0Rt0r0c.mft (raw, json)
Hash identifier:          tFT679lbp2hTl2WK5EknF/RsVaVzSZlYib81rAwdUcs=
Subject key identifier:   5A:BD:D4:45:5A:ED:40:33:11:28:A4:7A:79:A8:2E:6E:BD:40:AF:E8
Authority key identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
Certificate issuer:       /CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Certificate serial:       01902981EC4257776AA1B2E2DB0166B5F80B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
Manifest number:          0ACF
Signing time:             Tue 18 Jun 2024 04:01:38 +0000
Manifest this update:     Tue 18 Jun 2024 04:01:38 +0000
Manifest next update:     Wed 19 Jun 2024 04:01:38 +0000
Files and hashes:         1: 7c9aa3nLERcawQ6xm7xVlifSHVM.roa (hash: jl2UHmI+VncNpfJENfbzZdOXuv+wm4fYatwN/5b326E=)
                          2: NeBUyNnFXtSKShVvUNEIZWTrh_k.roa (hash: /3l5vOVIZbgErU///U2QXrW/hTZIiGQnTA2qPwJ3nt4=)
                          3: ueLcI0DFMJtj66I8--fu0Rt0r0c.crl (hash: ungSRjg/J6PARfaYwWpPeTNa2vJ/iNS6H+QNrFOxSig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 04:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:29:81:ec:42:57:77:6a:a1:b2:e2:db:01:66:b5:f8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
        Validity
            Not Before: Jun 18 04:01:38 2024 GMT
            Not After : Jun 19 04:01:38 2024 GMT
        Subject: CN=5abdd4455aed40331128a47a79a82e6ebd40afe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:e8:36:60:cc:b2:7b:4c:13:0b:e8:4e:b9:
                    4a:15:ef:ff:b7:70:2c:6d:73:79:42:db:f5:8c:7c:
                    90:66:9f:5a:87:a3:d4:87:ec:b3:1e:ef:9c:de:bf:
                    38:cc:fc:61:62:b4:d7:4e:da:95:8e:e6:be:c8:42:
                    58:29:93:15:95:6e:26:62:52:a8:64:2a:01:3c:d9:
                    7a:0a:3a:4b:58:5b:d1:fe:e9:52:e3:9e:de:29:c8:
                    59:a7:f6:d1:b5:5b:8c:5d:72:4b:f6:51:42:74:c1:
                    da:51:1e:f3:2b:29:15:e1:8e:a0:cb:0b:38:6f:ea:
                    20:81:2e:a5:87:12:29:ed:44:29:96:3e:c6:6a:37:
                    15:b6:3e:60:24:ba:75:d5:8d:4f:36:d9:f9:2b:77:
                    94:c9:b7:78:d9:5d:75:04:0a:5c:f0:ac:a0:26:55:
                    9d:d4:0c:ed:fa:0b:3d:5d:83:b8:99:f9:60:dc:e0:
                    6a:d3:b3:d4:a3:8b:09:6f:a3:e3:7b:8b:3c:19:b6:
                    b0:49:2b:23:0b:76:91:e3:fe:42:9d:9b:09:40:fe:
                    3a:91:6f:21:ab:a7:d0:c3:cf:b5:e7:fd:fc:a3:b5:
                    dc:8b:db:89:19:5f:56:f7:81:29:c7:89:72:9e:2b:
                    98:3e:f0:0b:71:d3:be:ef:5d:87:ed:b6:ba:57:73:
                    2a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BD:D4:45:5A:ED:40:33:11:28:A4:7A:79:A8:2E:6E:BD:40:AF:E8
            X509v3 Authority Key Identifier:
                keyid:B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:dc:9e:6b:63:ad:25:57:4f:b8:20:62:3e:4a:59:9d:6d:63:
         a6:69:40:e1:44:c7:76:58:8c:14:9e:85:11:4e:56:bd:6e:d3:
         f1:f5:05:58:1b:8d:8c:d3:fa:21:7b:45:79:3d:42:1e:fb:04:
         cd:b0:1b:db:93:55:45:03:3f:32:e5:6f:a1:5c:b7:48:c2:d0:
         d4:11:4f:bf:2a:c9:6d:e9:a7:6d:99:75:8f:3d:4a:f7:36:8e:
         78:42:f1:ba:5b:43:72:68:52:45:3f:3e:8e:38:7d:25:1e:50:
         df:24:16:71:ba:6c:ab:3e:56:bb:e8:76:ea:07:1b:a7:d8:2c:
         06:f0:c1:98:d4:ff:50:88:e4:f3:ee:4b:d4:df:48:d8:14:45:
         78:a8:75:fd:c2:26:0e:f0:ea:bf:76:91:c3:38:48:6f:90:9b:
         dd:41:0e:50:00:74:f0:6b:9f:da:bb:93:8e:52:83:b3:6b:d8:
         7e:94:df:54:9f:16:be:91:78:15:61:92:e3:30:e5:a9:29:fe:
         fa:80:0e:9e:bc:81:91:d1:74:34:3f:00:e2:8c:22:2c:4a:e1:
         43:fa:5b:2f:88:85:e4:d8:3e:16:d2:a0:3a:2b:61:fa:4d:9b:
         03:5b:dd:24:1e:b4:ba:a3:93:d8:62:ff:1a:19:6f:96:16:f4:
         86:15:75:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:32:48 2024 by rpki-client on console-ams.rpki-client.org