Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File:                     UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier:          mvWFmE/4NpNiJqGLTMVXZZGFneAXCXk9eAlAD3HSp98=
Subject key identifier:   19:4C:A0:12:D7:A5:94:11:D9:54:04:95:B9:76:01:59:70:C6:B3:BF
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer:       /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial:       019369DAC6390350C90234FA396B48DAB277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:02:45 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:45 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:45 +0000
Files and hashes:         1: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: jcuBh8bEvLXqxls/CHyjbV8RceDDyHqIQbIv5GUtWXQ=)
                          2: hYqASM0-yhjFxLcuCur2XwsrI7M.roa (hash: GhqpckVOc9QQ9jyk+mWP+4gFJnWsd4cv+1FdzWAWj4w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:c6:39:03:50:c9:02:34:fa:39:6b:48:da:b2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
        Validity
            Not Before: Nov 26 19:02:45 2024 GMT
            Not After : Nov 27 19:02:45 2024 GMT
        Subject: CN=194ca012d7a59411d9540495b976015970c6b3bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d0:29:fa:35:e3:d6:42:cb:65:05:6b:da:d6:
                    bc:60:ed:38:93:bb:6b:50:c2:46:c3:b9:20:af:56:
                    1d:ac:4c:07:bf:3e:14:ca:3d:4b:a1:cc:67:bd:aa:
                    fc:b2:fa:07:b1:70:eb:eb:dd:a7:d9:7e:1e:51:5c:
                    04:45:9e:7e:bb:9f:d0:21:7a:2f:14:86:ff:f7:d5:
                    12:3b:fb:30:74:a1:79:f6:fe:60:a2:71:50:77:d4:
                    c3:ea:7b:d8:14:48:50:cb:22:fb:a4:5a:77:ed:1f:
                    39:3e:18:11:e2:1b:5d:d5:a4:23:97:3f:12:cf:f3:
                    59:93:a6:f9:3a:42:d8:19:ba:3e:c2:25:a2:1d:ed:
                    06:88:16:61:d8:1c:b4:1b:51:30:4b:b8:98:82:67:
                    3f:43:3f:93:a5:c0:79:5f:3f:de:41:3f:87:41:d9:
                    d2:f5:71:26:88:35:b1:dc:29:8e:ca:5f:4f:11:39:
                    ef:d3:e2:ea:ed:9b:de:6e:d0:2e:c7:27:d5:6c:97:
                    0e:76:55:1b:c7:d6:c7:c4:71:4f:51:23:c2:5e:c0:
                    f3:ce:8d:08:0d:2e:51:b2:d3:47:f2:ce:8e:5d:96:
                    4c:5d:ab:df:c0:01:d7:8e:e3:a1:9a:15:5d:17:a2:
                    8c:5f:5f:99:23:85:c3:65:25:fc:04:1a:90:de:25:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4C:A0:12:D7:A5:94:11:D9:54:04:95:B9:76:01:59:70:C6:B3:BF
            X509v3 Authority Key Identifier:
                keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6c:83:c9:4e:db:99:17:bd:db:d9:82:40:24:6b:c5:fa:50:
         93:8d:4a:46:92:9f:f8:6e:68:57:7f:13:57:44:26:c3:a1:28:
         46:44:5b:dd:71:0c:d4:32:e1:77:05:58:0f:74:38:14:eb:22:
         bd:f3:4c:b2:a2:2b:cc:70:25:b3:30:36:08:66:56:6c:21:58:
         27:68:1b:1d:6e:41:e9:d0:db:dc:09:0d:a9:a7:b9:09:2a:35:
         84:3c:cb:ff:f8:5d:2b:21:a0:30:32:fc:2f:aa:28:78:cb:8f:
         31:77:09:e6:1e:25:cf:f3:53:ab:41:fc:97:1e:b6:08:1c:80:
         4b:e0:0c:49:2e:d7:f2:86:2f:61:36:ef:59:0b:98:8f:03:56:
         86:ac:bd:67:06:a0:bf:19:9e:cc:9e:8e:09:57:5e:4e:69:25:
         64:1f:b3:5e:d6:70:5e:bb:65:e6:52:d3:63:32:9f:48:df:ef:
         15:aa:01:b9:f1:a8:92:71:d1:48:f7:e1:fb:f9:40:3a:7f:c5:
         19:fb:86:7f:0c:f8:ff:17:81:7f:45:22:ee:2c:30:5f:a2:06:
         7f:7a:e9:a4:85:89:4a:3d:a9:42:05:ee:b0:cd:27:8a:06:32:
         54:16:c3:0f:1b:f4:12:25:80:c5:e1:a1:54:c9:4d:38:1b:4c:
         57:2a:db:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:14 2024 by rpki-client on console-ams.rpki-client.org