Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File:                     UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier:          RcNNnZhqnSbUgtXpaje3mVSRwVee7YZbvcVD/KmnRL8=
Subject key identifier:   52:A2:EE:3D:CF:13:DA:33:D1:FD:17:FB:34:24:8F:42:1B:74:0F:30
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer:       /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial:       0192124F9AEB3F3D86089072952DE7167B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number:          6A
Signing time:             Sat 21 Sep 2024 02:00:59 +0000
Manifest this update:     Sat 21 Sep 2024 02:00:59 +0000
Manifest next update:     Sun 22 Sep 2024 02:00:59 +0000
Files and hashes:         1: 71myYITlUVQajP0ePdEslQC0ghg.roa (hash: OPTGlY9bOc65gBLissKvUwDAiN6wlzPR3azq6qrARHI=)
                          2: JIMm9ZORvKE2wdLMUwrjokMNthY.roa (hash: YeoytfoU+yWlYewK2iJJfp/6BblqzLBNbHcbXcWBljg=)
                          3: RWpe2ZX63sD_n-DJKEgyHCV1BvE.roa (hash: n946iD8t/a2YG9qYxfaYdPE+5+vKYHWfySkfIYCQj34=)
                          4: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: 55Rd1mq1lD8j6oUB55pNnjMG32rk06ZH0heiYSu/QQ0=)
                          5: Y9xz12vPqVJigwWtagZPVAVVQLc.roa (hash: XDGsxhhSzIJRXvwF4UANSkBOst3vHGA1A/zXpUbTAoE=)
                          6: hEeJf4mqGC80Gj5rjCurUlFZE-o.roa (hash: pz8zOorLARGxfUuVQMg+/4TRrQ0MSpeMRWIfYAmBIVM=)
                          7: mbM8I4bHenNeEH4ohofVUw85gIk.roa (hash: w6VNZJf18vl0Ct2yx+mmP4fdMsY2fofZYaT/6a0dJW0=)
                          8: vko9WSKbSibrCeLhnWjS0lqS-1Y.roa (hash: AufjCOoJddmM4zvUzRJAFaeksfclGSSyceLyoADPLp4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Sep 2024 01:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:12:4f:9a:eb:3f:3d:86:08:90:72:95:2d:e7:16:7b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
        Validity
            Not Before: Sep 21 02:00:59 2024 GMT
            Not After : Sep 22 02:00:59 2024 GMT
        Subject: CN=52a2ee3dcf13da33d1fd17fb34248f421b740f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:03:0d:70:f0:13:39:47:52:36:0e:2c:29:c0:
                    da:4f:d8:d6:ca:fd:1d:19:df:d2:ca:b3:4d:0e:d3:
                    6a:94:b5:0a:03:d2:22:8f:62:2a:fe:96:7c:40:b5:
                    6c:47:37:c1:d6:f4:1d:08:99:e5:40:52:1c:13:11:
                    45:24:08:89:f8:2b:d8:07:89:eb:38:ca:16:d8:5c:
                    c0:9c:ce:48:f4:04:73:e9:a4:eb:9c:fe:22:8c:85:
                    72:8a:17:58:1f:47:36:c2:e9:4e:62:75:bc:1d:49:
                    89:fb:b1:4a:95:f8:5d:91:6e:cd:53:1c:4d:a1:65:
                    24:54:2d:9f:1a:88:9c:61:9a:3c:18:3c:c6:df:72:
                    44:35:1f:84:d6:84:5a:a2:cf:2e:21:c0:5e:cd:8b:
                    0e:23:ff:e9:66:84:90:c3:36:18:f9:8b:be:a3:1f:
                    82:2f:cf:e2:b9:77:99:9c:18:30:24:d0:79:00:69:
                    bb:45:8e:02:1f:ea:a3:54:7f:fa:b5:5e:fd:5d:6e:
                    d0:7b:fb:f6:5c:3b:4b:97:b8:94:7f:8c:20:09:38:
                    90:7a:7d:9d:86:70:ba:f5:b5:b6:8b:06:09:3a:fa:
                    df:51:87:ce:f6:1b:1d:bc:f4:56:e1:6a:14:18:9e:
                    95:97:1b:fc:29:71:49:a4:62:fa:09:57:c8:c1:ea:
                    dc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A2:EE:3D:CF:13:DA:33:D1:FD:17:FB:34:24:8F:42:1B:74:0F:30
            X509v3 Authority Key Identifier:
                keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:35:97:55:a3:98:6a:ff:d3:6c:42:85:04:7b:dc:14:0a:b8:
         76:97:7d:2b:bd:a5:af:f1:c6:e0:d7:03:ea:39:f1:ba:4e:fe:
         56:a0:70:45:da:be:5e:4c:4d:13:54:e1:bf:98:85:83:57:c7:
         8e:9c:42:bc:69:f1:ae:b5:2e:fd:96:35:f7:5d:c9:72:42:36:
         a9:31:4d:b7:58:04:0f:85:94:75:1e:77:43:de:05:40:92:3b:
         82:c1:ed:80:c5:4f:77:88:d9:4d:66:cf:2c:9f:3e:d8:a0:b2:
         a9:8a:7b:45:da:41:1e:20:f7:e2:ae:bb:f1:d9:ed:a3:92:10:
         ad:a8:a3:60:12:27:d5:a8:27:49:89:9f:aa:13:f8:3b:16:e3:
         a1:6a:59:bb:74:e1:63:ff:5b:de:f9:21:0a:98:2f:df:c9:b3:
         c5:f5:3c:7c:d1:cd:80:d2:d3:83:00:fa:86:b6:70:16:bf:cd:
         4c:84:89:79:58:7b:b2:c2:e5:92:5a:5c:2d:6e:07:95:08:6e:
         b5:25:e2:e8:6e:2b:d6:e5:a3:d8:2f:e3:2d:f3:04:88:ee:cc:
         1d:14:e5:ee:8a:97:3f:08:6b:ac:df:6c:a6:a8:0d:a0:d6:d6:
         2b:20:00:19:00:fc:2e:6f:1b:d5:c8:4c:c5:21:63:0d:53:18:
         2b:03:67:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 09:28:08 2024 by rpki-client on console-ams.rpki-client.org