Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File:                     uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier:          CamSdUsUGbvF+VK1hfgHQtqjx15RnKTsSgJB3cVJZMQ=
Subject key identifier:   9B:59:26:59:FC:35:E1:74:C0:75:CF:EC:56:7C:40:C9:12:59:F9:AF
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer:       /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial:       0191F9D9D0072344CCD3589789A74FA16B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number:          0102
Signing time:             Mon 16 Sep 2024 08:01:26 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:26 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:26 +0000
Files and hashes:         1: rt9Fd4vhh2yB_PZGvPSik_mr1_U.roa (hash: vHvuEU/6KT1VDEfuN5RpMTWp02AiDP8fmQeE21wieSg=)
                          2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: GmVkiq7TlYa9DCttiGLr/seuvb0QpElDsSpXs568WlU=)
                          3: wWgm0ytoOaL1Ee7wWaFN5Lv5W8A.roa (hash: YG9tkvoK4LnKk1n1uumcCyB2Yy7zFVpLUXAA3CGtZGE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:d0:07:23:44:cc:d3:58:97:89:a7:4f:a1:6b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
        Validity
            Not Before: Sep 16 08:01:26 2024 GMT
            Not After : Sep 17 08:01:26 2024 GMT
        Subject: CN=9b592659fc35e174c075cfec567c40c91259f9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:66:6d:91:8d:e6:36:e7:ed:a9:65:f1:02:
                    1a:49:12:db:28:1b:83:44:48:09:af:ff:53:b1:fa:
                    d1:8d:51:db:40:55:d9:27:16:ce:97:d0:0e:a4:eb:
                    d8:70:0a:b5:b3:40:0e:3c:03:8c:8f:c5:5f:0f:e0:
                    3d:8c:0a:6b:05:00:70:cb:59:c4:60:e9:91:25:89:
                    ac:ea:37:73:f8:07:b6:d2:c3:db:52:be:e0:bf:a7:
                    90:3b:74:31:41:cf:3d:f5:2b:5a:33:96:e5:18:84:
                    d1:47:5e:3e:4c:75:88:7a:45:78:c8:57:fe:fe:d1:
                    3b:73:22:18:2e:9f:0a:18:33:e0:32:6b:ff:59:9b:
                    da:ab:23:05:9b:55:69:87:79:d1:eb:b5:a5:72:a2:
                    c9:d4:1a:a2:6e:21:99:15:a6:9a:89:b3:21:92:4b:
                    c7:2d:1d:9f:e5:7c:bb:74:86:97:57:1f:37:b2:d4:
                    7d:94:9d:4f:15:9b:9d:c5:06:fa:86:82:d8:ce:b4:
                    77:92:2a:0d:e4:05:3b:ed:96:ed:6e:70:eb:36:c4:
                    06:53:87:2f:71:ec:66:75:dd:3e:49:e6:89:58:f1:
                    08:81:fb:a5:27:b8:40:d6:43:a9:8e:5b:3b:35:82:
                    19:62:bd:09:6d:8c:03:05:17:60:c9:ce:0b:b7:ff:
                    54:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:59:26:59:FC:35:E1:74:C0:75:CF:EC:56:7C:40:C9:12:59:F9:AF
            X509v3 Authority Key Identifier:
                keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9c:23:fb:e2:be:c2:b0:08:a9:6b:c4:53:20:e1:64:46:1d:
         f9:78:f7:a3:59:ba:46:06:d5:07:29:9e:96:a4:b8:e5:20:95:
         15:4b:01:db:f6:93:49:07:2a:c2:f4:03:1f:ca:4b:bd:f2:7c:
         5e:d4:0d:7d:a3:a3:da:bf:c5:7d:dc:9c:95:6f:ce:4b:55:d3:
         0d:30:2a:11:1d:a8:0c:a6:ee:06:00:4b:b5:39:2e:02:02:88:
         e4:33:9f:af:52:60:05:60:c3:f0:af:cb:74:61:20:e6:f0:0b:
         7a:8a:4e:58:cf:37:6f:c3:1d:55:c9:da:9b:63:28:c4:86:95:
         45:66:e1:34:d6:30:f1:5a:f8:94:44:f8:c8:ea:23:f5:37:d8:
         37:7d:0e:17:f7:c8:99:0a:f8:8b:7a:c2:fa:26:d9:9a:39:56:
         82:29:0a:a9:b2:ce:ee:58:cb:24:b4:82:91:70:53:88:ff:15:
         cf:54:dc:ee:38:f7:dd:c1:73:45:bb:5e:41:0a:f2:c9:60:52:
         f5:b2:73:51:fc:41:59:96:4f:32:7a:17:2e:4f:11:cb:28:b6:
         6c:1b:5b:02:bf:a4:fd:ed:37:67:79:1a:28:ef:80:8c:4c:84:
         08:5b:a3:43:48:74:2d:4b:3e:89:c9:a5:48:1c:02:01:8d:7d:
         0a:a1:7d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----