Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
File:                     ufdKR6bRoL9MIW5fq02R-xKd89Y.mft (raw, json)
Hash identifier:          X83bF//FYiOzRcs18KVg2Y/8Zsqr12c/rMQbb9ReETY=
Subject key identifier:   A3:C1:A3:72:8C:DF:5B:58:C4:47:8E:AE:02:0D:78:41:23:B7:11:2A
Authority key identifier: B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
Certificate issuer:       /CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Certificate serial:       018F874A4EA2AD5F5897D5DADDC2C0932879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
Manifest number:          06AD
Signing time:             Fri 17 May 2024 16:02:24 +0000
Manifest this update:     Fri 17 May 2024 16:02:24 +0000
Manifest next update:     Sat 18 May 2024 16:02:24 +0000
Files and hashes:         1: 60hMVdAs7gCbEfLe3Z9SqrJL4rc.roa (hash: X1Fqxcr0zU4B6H5Hq9S9fYEtK8cWlHz5HttPuolt2qw=)
                          2: Gs4tH4IVE2PsgHYc367W6VW4g-k.roa (hash: UNbfP0l2oHk4YAYsujSnSkxgPBkB8SPkF4o4TV+ALPQ=)
                          3: _Um_PacsCcGGNFV6nsh2hMGC7_0.roa (hash: 0F4uQNkxWGGJ1jVKWX4O9XIgcNoyE67KayxXqefk3/Q=)
                          4: ufdKR6bRoL9MIW5fq02R-xKd89Y.crl (hash: VE7TlB5jnFBWuHtYepSN3Hq+nUutgLmUUfS1Enu5QVc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:4e:a2:ad:5f:58:97:d5:da:dd:c2:c0:93:28:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
        Validity
            Not Before: May 17 16:02:24 2024 GMT
            Not After : May 18 16:02:24 2024 GMT
        Subject: CN=a3c1a3728cdf5b58c4478eae020d784123b7112a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3a:ff:40:a5:f9:75:30:f2:34:6e:cc:d1:5c:
                    78:3c:08:24:8a:4e:22:cc:2f:e8:60:69:ba:34:fb:
                    b9:cf:68:77:43:6a:c0:67:33:47:b1:14:34:3f:48:
                    2b:aa:57:e5:b9:17:d7:50:fc:91:fb:91:82:eb:a5:
                    0a:e9:1a:c3:c9:39:9a:a2:46:4d:ee:88:35:6d:2e:
                    2d:a5:dd:e3:53:db:81:5d:ca:7e:4e:6e:a5:c9:a8:
                    85:e3:a1:54:a3:dc:62:6d:48:c8:03:80:dd:95:61:
                    74:a7:69:cc:36:8f:13:a4:c8:07:71:67:22:42:05:
                    20:e6:c6:60:3a:6f:b0:4f:c3:9e:2c:6b:fa:5c:01:
                    0c:e7:11:31:ad:3f:1c:ed:a4:0c:55:1c:6a:8c:d2:
                    89:ab:47:b0:d1:46:ec:f3:10:0e:c9:b4:cb:e4:bd:
                    61:e6:46:28:35:a3:80:a9:3f:2b:49:47:eb:4a:57:
                    8e:ef:c3:84:cd:4c:db:3d:35:cb:2e:79:3b:77:6b:
                    49:ee:9d:df:51:d0:d4:69:69:cc:c1:d5:32:73:b6:
                    e6:61:99:fa:31:a1:4d:26:e4:5f:84:2e:01:9d:c5:
                    24:80:09:cf:2e:7d:cc:c7:35:ed:35:ff:c3:61:cf:
                    77:29:21:97:fc:b2:84:02:8b:4e:0b:7a:47:72:ff:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C1:A3:72:8C:DF:5B:58:C4:47:8E:AE:02:0D:78:41:23:B7:11:2A
            X509v3 Authority Key Identifier:
                keyid:B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d3:29:c3:2c:11:55:0d:d7:bc:77:3a:e2:d2:b6:12:35:ab:
         0a:94:3d:5f:7e:d9:6e:8a:3d:8d:15:d5:da:e5:5d:04:fc:d4:
         41:26:de:ba:ae:32:f7:58:bc:b1:27:b4:43:b7:3b:fa:5c:08:
         de:0c:f2:eb:bc:11:40:38:1b:24:7a:d3:b8:13:09:96:d4:40:
         f3:84:94:38:bc:cd:21:f0:b9:f4:6e:6a:fe:40:41:37:2e:20:
         72:e8:c3:68:52:61:0e:8f:b5:7f:94:0d:11:0c:2a:f7:4d:9b:
         c3:52:d5:62:78:fb:f0:a1:3a:5c:89:49:66:d0:30:74:ae:03:
         b1:f8:23:1e:07:42:06:9d:de:15:b2:e4:74:9e:0a:a6:a7:fd:
         a2:62:db:01:d8:21:6f:33:ad:2a:a7:8f:21:d4:b2:32:5f:2e:
         d6:c5:34:a8:c0:c8:74:7f:4f:dc:2e:02:d0:04:22:fe:85:5f:
         b1:cf:57:fd:ee:e4:88:af:ba:3e:f5:5e:8d:00:be:fb:06:79:
         6d:87:a6:87:7c:55:d8:5b:2f:ae:76:88:c5:cc:98:9a:12:12:
         2e:0d:e4:23:50:1b:ed:5f:05:8b:2b:47:bf:72:69:99:a2:fd:
         c6:65:34:91:e2:02:5f:3c:07:52:dc:fa:06:ec:1c:af:e3:6b:
         93:3f:69:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:15:08 2024 by rpki-client on console-fra.rpki-client.org