Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
File:                     uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft (raw, json)
Hash identifier:          51NC/iw3fX9bOz/MPeQg6v77V9WHOPs6pe9UCHCXfcs=
Subject key identifier:   19:47:EE:50:23:45:16:4E:41:F4:ED:FF:FA:9F:75:61:A1:47:A1:D9
Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
Certificate issuer:       /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Certificate serial:       01951134BB05A2EC2EC15BC4667E2C5D3015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
Manifest number:          06CF
Signing time:             Mon 17 Feb 2025 00:00:23 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:23 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:23 +0000
Files and hashes:         1: L9CG-uKBgPcQQjIG2xRR57nEAUA.roa (hash: ZHHT6JiUh3jUpW8AwMlMx74U4JBCKKASfzMtrPAJssU=)
                          2: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl (hash: kVEGKJDxz2vQ+NZ8A4gSRR3h+Kb2p4/lA9AA/glVvoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:bb:05:a2:ec:2e:c1:5b:c4:66:7e:2c:5d:30:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
        Validity
            Not Before: Feb 17 00:00:23 2025 GMT
            Not After : Feb 18 00:00:23 2025 GMT
        Subject: CN=1947ee502345164e41f4edfffa9f7561a147a1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:78:b4:3c:c2:49:bb:c8:b0:23:f8:76:9e:a8:
                    09:2a:42:d7:95:39:3d:36:ed:19:20:ea:52:6c:a9:
                    ca:76:3b:04:11:90:a9:32:47:91:ce:7d:54:a5:34:
                    d7:9b:7f:08:70:a7:de:b2:8d:d7:33:fb:74:4e:32:
                    de:f1:69:28:6d:25:38:7b:fa:01:9a:60:3c:10:76:
                    03:84:99:bc:2c:36:8f:ed:fa:31:4f:68:9c:69:6d:
                    f3:16:90:59:2e:da:9d:ab:3e:9e:03:c2:55:78:c3:
                    bc:8b:f2:5c:17:20:95:70:1a:6c:5d:bf:3d:94:25:
                    1f:54:7c:3c:4e:c2:5b:5b:05:d1:a0:fc:0a:3d:1d:
                    e1:11:18:96:4d:e6:5d:a6:fe:2d:2f:a4:56:c4:91:
                    4e:ee:01:b2:c2:32:f8:26:76:6a:a3:1a:7d:a7:5f:
                    4e:de:e5:53:35:cd:36:bd:78:49:90:20:72:e3:ff:
                    fd:ea:fb:63:cc:28:ec:a2:34:d0:9c:f5:d4:13:1c:
                    b7:5d:61:e2:de:a0:4e:4b:54:5c:2e:29:1a:5c:59:
                    25:82:25:80:6b:5d:a9:93:e2:c3:76:01:3f:b4:10:
                    17:99:23:ae:08:57:72:ea:ce:e4:8e:1e:fc:e5:a1:
                    e5:dd:f4:10:a6:29:ae:9c:9c:31:93:b5:f7:84:58:
                    f0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:47:EE:50:23:45:16:4E:41:F4:ED:FF:FA:9F:75:61:A1:47:A1:D9
            X509v3 Authority Key Identifier:
                keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5a:ab:e0:5d:9b:2f:98:8e:41:5a:3f:7e:0e:02:73:e7:2b:
         04:b7:0a:29:ac:e5:a6:5d:a0:62:47:10:0f:f9:d5:6a:3d:f2:
         f7:bf:a9:f5:5c:e1:d2:72:4b:bb:2b:e9:0a:7c:68:b9:5e:31:
         a3:2a:02:6f:68:7e:ce:4f:75:8c:41:e1:e5:41:c2:b5:70:4e:
         95:69:49:9a:0a:63:03:23:92:77:bd:89:20:e7:af:47:ac:da:
         42:69:33:d9:8e:3c:ec:dd:52:26:31:31:f8:a7:bd:d8:d7:51:
         75:6a:5c:18:4d:6c:09:97:b3:22:f1:32:8a:51:31:35:8a:b2:
         c6:26:22:0c:9e:07:35:2d:6e:cb:8c:82:ac:0b:ac:1f:ce:29:
         a3:74:2c:b2:89:d8:04:6a:28:a8:66:98:fc:88:6b:9b:41:ae:
         fc:34:e1:39:88:f4:78:2f:69:d6:4b:e7:4e:96:11:c8:f5:b6:
         8f:06:e5:62:b1:52:9d:bd:1b:7e:16:2e:45:37:49:1f:e9:24:
         f3:83:3f:63:f9:bd:e6:ec:1a:16:a8:9e:5a:00:67:ed:34:16:
         98:2a:cb:ba:8a:64:35:6e:2b:dc:46:3c:61:9a:b5:e8:2f:0e:
         6b:50:70:aa:bb:f3:6a:c8:8d:2d:20:31:0b:a4:50:b4:11:fb:
         8a:df:90:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:54 2025 by rpki-client