Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
File:                     ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft (raw, json)
Hash identifier:          qGLItu4s7j7KYc2BjWl5i1lPQHTsFBNjKOUlFbtbiKs=
Subject key identifier:   3F:86:5C:82:D3:C4:6F:B9:4E:73:9D:25:E7:CB:46:92:4C:C4:97:22
Authority key identifier: B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
Certificate issuer:       /CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Certificate serial:       01906A85BECC5A0C34A995311D62E910BD09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
Manifest number:          11F0
Signing time:             Sun 30 Jun 2024 19:01:08 +0000
Manifest this update:     Sun 30 Jun 2024 19:01:08 +0000
Manifest next update:     Mon 01 Jul 2024 19:01:08 +0000
Files and hashes:         1: fzSrL8rZzzGSBDjJlSyRlPaclxg.roa (hash: ynDvbcuL0i7aMGCEhsGFPTPralMdydSjkujBQmHTmqs=)
                          2: ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl (hash: bP6ntkSS6ucDsTAZsv67j+WzK14/vvXRFAczFR34UWM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 19:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6a:85:be:cc:5a:0c:34:a9:95:31:1d:62:e9:10:bd:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
        Validity
            Not Before: Jun 30 19:01:08 2024 GMT
            Not After : Jul  1 19:01:08 2024 GMT
        Subject: CN=3f865c82d3c46fb94e739d25e7cb46924cc49722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5a:23:00:02:84:5a:7f:2e:39:4d:52:ff:69:
                    b4:5a:51:4f:5e:3b:4d:7b:86:a0:57:59:b5:1e:08:
                    b5:64:15:1b:3f:16:01:c3:33:ae:34:99:38:cc:cd:
                    4b:d1:97:b8:c6:62:64:d7:8f:2c:02:66:9d:f9:26:
                    42:79:bb:d5:8f:59:ce:c8:ff:f5:ff:b9:11:93:d6:
                    bb:6e:a5:49:26:cc:6e:b1:02:e6:f3:48:ef:e3:0d:
                    a2:aa:5f:be:7f:b6:3c:e6:51:5f:d9:51:84:5f:fd:
                    16:5e:6d:1d:bd:0d:ba:ef:27:66:27:b1:35:4c:1f:
                    2d:8d:2d:fe:c4:72:9d:8e:7c:42:f9:07:5b:0f:0f:
                    b1:bf:10:02:36:49:fb:af:73:4d:14:8b:14:b7:0c:
                    a8:c8:74:8c:f8:54:bf:4a:ea:84:61:f6:2b:ef:71:
                    3b:30:22:93:48:9e:af:f3:70:e8:47:95:46:d8:d1:
                    a0:6e:88:1e:52:85:3f:36:7f:ad:34:70:b1:2f:34:
                    3d:dc:97:c6:6d:68:b3:fc:01:c9:d6:f9:a3:61:12:
                    2a:4f:d9:63:50:81:dc:19:61:ba:a8:4a:56:ca:3d:
                    61:e1:b1:6c:1e:79:be:bb:13:26:94:03:9c:ee:9a:
                    83:ae:bd:31:f3:23:cf:bc:93:7f:82:a3:84:6a:a9:
                    a1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:86:5C:82:D3:C4:6F:B9:4E:73:9D:25:E7:CB:46:92:4C:C4:97:22
            X509v3 Authority Key Identifier:
                keyid:B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2c:02:04:b7:77:70:c1:50:92:75:61:f9:04:ca:51:01:88:
         05:74:e4:0d:e9:07:db:9e:72:44:fd:7f:7a:24:99:68:72:a6:
         17:d1:9f:4d:c4:80:03:32:38:80:94:82:d0:db:fe:1d:6e:36:
         13:b9:6d:2b:02:08:b5:6f:0b:5b:0c:65:0a:ed:ac:7d:ac:fd:
         eb:f9:3f:5c:eb:c9:22:f0:e4:90:5e:a4:30:95:f4:57:d1:81:
         d3:b1:5f:ca:1d:e2:79:9d:a5:8f:53:78:23:1d:1d:38:03:2f:
         d8:50:5a:fa:fd:db:b8:f6:d4:77:d2:0d:43:d0:ab:56:45:c3:
         e2:1e:41:ad:31:0b:a9:03:0f:b5:c9:9c:8f:02:20:54:37:20:
         76:08:af:2c:23:44:47:82:16:5c:ec:5b:2a:8a:f0:b5:43:0b:
         83:22:4d:09:9d:dd:42:79:35:63:ed:bc:37:33:72:25:ab:6b:
         1e:6e:e1:9f:96:a0:8e:e6:f1:7c:f2:3d:34:9c:fc:9a:db:6a:
         ee:80:23:1f:4b:d6:f6:2f:69:1d:04:b5:55:6d:fa:d3:ee:35:
         29:e7:84:4d:ee:1c:a8:61:d2:69:02:ab:b1:e8:7f:98:3f:1c:
         fa:68:3d:34:0e:e0:bf:10:7d:25:3f:26:17:e9:ca:33:28:3f:
         61:5a:6c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:57:13 2024 by rpki-client on console-fra.rpki-client.org