Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4269dc-e8a5-4aa8-9971-e368966dd85f/1/uGYR0dkPCoB7KUn3R01Bw2g4htw.mft
File:                     uGYR0dkPCoB7KUn3R01Bw2g4htw.mft (raw, json)
Hash identifier:          kz84CgTZ/DIK/yej4LxF4YILvL6gYYt/qXdbPzPuGS0=
Subject key identifier:   67:D0:AE:18:22:7D:72:12:17:19:04:1F:0A:D3:15:3B:F6:B0:AE:7E
Authority key identifier: B8:66:11:D1:D9:0F:0A:80:7B:29:49:F7:47:4D:41:C3:68:38:86:DC
Certificate issuer:       /CN=b86611d1d90f0a807b2949f7474d41c3683886dc
Certificate serial:       019095A92F916411D1CB1A2859646C49D3B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGYR0dkPCoB7KUn3R01Bw2g4htw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/4269dc-e8a5-4aa8-9971-e368966dd85f/1/uGYR0dkPCoB7KUn3R01Bw2g4htw.mft
Manifest number:          1203
Signing time:             Tue 09 Jul 2024 04:03:31 +0000
Manifest this update:     Tue 09 Jul 2024 04:03:31 +0000
Manifest next update:     Wed 10 Jul 2024 04:03:31 +0000
Files and hashes:         1: CBMLSgB_nkTJo6PiWoY5oG6_TUg.roa (hash: JhE+1KPBMbjPKBx5mdeH0sIv6eombbvFSqdXMUwLht0=)
                          2: uGYR0dkPCoB7KUn3R01Bw2g4htw.crl (hash: vA71PBeLCwpJGN+0IxfsZ9PpD2nHwCeQVJffjyHe/oA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/4269dc-e8a5-4aa8-9971-e368966dd85f/1/uGYR0dkPCoB7KUn3R01Bw2g4htw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/4269dc-e8a5-4aa8-9971-e368966dd85f/1/uGYR0dkPCoB7KUn3R01Bw2g4htw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uGYR0dkPCoB7KUn3R01Bw2g4htw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jul 2024 04:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:95:a9:2f:91:64:11:d1:cb:1a:28:59:64:6c:49:d3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86611d1d90f0a807b2949f7474d41c3683886dc
        Validity
            Not Before: Jul  9 04:03:31 2024 GMT
            Not After : Jul 10 04:03:31 2024 GMT
        Subject: CN=67d0ae18227d72121719041f0ad3153bf6b0ae7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:df:b9:4a:b4:65:8c:23:92:b7:5f:92:d4:
                    c7:2d:3a:5b:8f:36:d5:a6:dc:9a:21:a0:bc:81:44:
                    e2:40:63:2b:4d:af:a6:82:86:c1:16:4c:4e:31:df:
                    08:79:8b:22:45:59:f5:4a:08:fb:ca:21:38:5e:d5:
                    2b:02:cc:d0:91:8d:66:23:e0:96:b6:16:8b:6d:9c:
                    16:d1:e3:80:7d:c3:4a:fc:fd:00:d8:87:4e:7b:df:
                    76:ae:11:ad:f7:29:05:84:74:07:83:11:24:10:ba:
                    84:21:55:97:84:3a:98:c0:ee:7b:10:87:56:63:48:
                    82:a1:9c:c6:41:28:b1:83:98:40:cc:53:4f:82:e5:
                    f4:10:bb:3d:66:6b:9a:4d:e2:84:f9:b8:1d:6f:54:
                    87:94:ac:d2:38:3a:ed:14:26:29:cd:c2:73:46:b0:
                    43:00:4e:30:fc:09:c3:88:a4:23:19:24:a3:d1:ba:
                    da:ca:9b:8d:4a:d5:82:65:c6:b0:d5:58:e4:c0:55:
                    75:ac:fc:b7:9f:7c:7a:9f:cd:e0:f2:62:74:a6:09:
                    95:3c:5e:1f:52:dd:a2:90:a3:8f:d9:ee:04:43:cc:
                    a3:6f:cc:d7:b8:4b:cf:9b:e6:b7:20:17:3a:d8:31:
                    3b:9d:15:5f:d8:aa:73:4e:3a:51:e2:df:51:49:c2:
                    6c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D0:AE:18:22:7D:72:12:17:19:04:1F:0A:D3:15:3B:F6:B0:AE:7E
            X509v3 Authority Key Identifier:
                keyid:B8:66:11:D1:D9:0F:0A:80:7B:29:49:F7:47:4D:41:C3:68:38:86:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGYR0dkPCoB7KUn3R01Bw2g4htw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4269dc-e8a5-4aa8-9971-e368966dd85f/1/uGYR0dkPCoB7KUn3R01Bw2g4htw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4269dc-e8a5-4aa8-9971-e368966dd85f/1/uGYR0dkPCoB7KUn3R01Bw2g4htw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:76:83:92:45:1e:91:3a:a9:e3:c6:84:8f:74:20:db:53:22:
         34:b5:42:c8:6a:4e:db:85:6b:29:be:e8:37:4d:65:2a:69:85:
         9d:ef:ff:6d:41:5f:e1:02:1b:4f:7e:1f:af:de:bd:7d:de:70:
         2c:71:33:da:50:73:bd:4b:3f:bf:2f:1a:6e:65:03:99:47:d6:
         8d:e3:dd:89:f7:42:f8:48:a7:8e:75:44:a9:e8:72:3f:c3:28:
         2f:86:ad:56:cc:0f:92:b2:df:e6:05:de:a1:83:2a:cc:2f:87:
         e2:40:cd:d7:dd:08:77:51:37:40:67:01:27:92:45:db:67:2e:
         91:33:a7:ed:1e:98:3e:7d:05:f0:1e:3f:d6:01:25:5a:6e:33:
         a1:79:7b:29:54:a2:af:c6:56:f5:82:e4:1d:09:8e:1c:9a:3b:
         ae:22:c5:75:ce:65:12:3c:18:85:5b:56:93:bc:56:f1:93:d3:
         8b:6f:56:94:ca:f6:b6:4e:75:bd:25:63:23:e9:51:dc:e9:58:
         89:88:3a:e2:0b:51:07:e5:d4:2f:ad:4e:61:24:19:8b:1e:ca:
         ad:5b:94:92:7e:a9:ba:9a:9e:43:e9:bc:a3:6e:e7:90:16:20:
         0f:e2:07:04:da:8f:b4:2e:70:1c:d5:98:3d:3a:83:9f:86:d0:
         7f:36:8f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 11:31:59 2024 by rpki-client on console.sobornost.net