Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
File:                     sf_ufb9_RWbqnjBUaywqLnM28vQ.mft (raw, json)
Hash identifier:          ISKaSNo6BGVtUaqUXdpOSUAAHCYrVQYnSAxsWIai+7o=
Subject key identifier:   2C:2A:73:A3:DB:3B:E0:B2:CE:7B:0B:02:67:07:19:BF:3B:3F:23:2E
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Certificate issuer:       /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial:       019351D0A04DB60FAA78967C61145857C1C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 03:00:46 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:46 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:46 +0000
Files and hashes:         1: Mn2xhKE-2Pb-73H7TTZXNgyrysA.roa (hash: IYPvGvOP3Hl7DOEW3p83WuNgIyIRVBF5o7PxYk1KZ6Q=)
                          2: UXkaTHP_xJFTL9koLApJw6jU_RM.roa (hash: gPgDjKFqybNYP9Mxn1GDXwgCe7HpxgC/qtYRMCXUR4M=)
                          3: hxAashSwpfEKX7tutykgdJUuMPc.roa (hash: BaKWbTbdpiLR0Te+xWGLU+6uX8maVkuHjYeIedFYVp4=)
                          4: ruV6M_L_vyULp4Ss-6UCRY9SBx0.roa (hash: BmUZDYA1IJby60CRqGOwmnqIbgF/89zITc1b59rpcXY=)
                          5: sf_ufb9_RWbqnjBUaywqLnM28vQ.crl (hash: R3NLNmAS1+6aAcFYQFZ4C9HthTFWM4pMvbivXxOCNgo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:a0:4d:b6:0f:aa:78:96:7c:61:14:58:57:c1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
        Validity
            Not Before: Nov 22 03:00:46 2024 GMT
            Not After : Nov 23 03:00:46 2024 GMT
        Subject: CN=2c2a73a3db3be0b2ce7b0b02670719bf3b3f232e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:5e:48:35:58:9b:06:d3:e8:07:8a:f7:31:
                    0e:65:39:ae:19:db:b5:6d:69:25:01:da:29:b2:d7:
                    d7:98:a3:aa:f8:36:0b:1b:dd:d4:2c:47:9f:56:a5:
                    18:f4:ab:fb:1d:e0:6f:51:50:06:26:96:c5:25:ca:
                    25:53:ed:0e:cb:78:e9:70:8d:e3:3d:27:a6:65:0d:
                    e5:a2:25:e7:2c:0f:48:fb:8c:c8:67:34:61:ad:73:
                    dc:19:f6:59:da:21:d8:7b:36:a0:64:7a:68:ed:4b:
                    32:36:4f:93:ec:11:e7:a0:cf:d1:70:d5:cc:4a:8f:
                    ba:d4:d8:8e:67:8b:00:19:ae:2c:63:0b:01:6f:d1:
                    97:ef:a5:9e:0f:32:3c:3f:30:f3:e0:39:3d:e7:5a:
                    fc:45:ac:4b:3e:12:fc:8a:18:6b:31:1f:bd:71:2d:
                    10:22:7c:03:37:c4:91:e4:38:ad:88:89:f2:e7:74:
                    b5:1b:36:25:bf:65:c8:89:53:a0:c2:36:30:a2:48:
                    7a:97:6f:f7:0b:49:49:2f:93:82:cc:9f:d2:28:43:
                    56:20:35:7d:74:9a:5a:ff:41:03:46:f7:17:7a:d7:
                    7b:9c:8e:23:68:3a:b7:cc:a4:31:20:6e:15:11:0e:
                    95:28:83:95:92:b6:f9:e1:c0:2a:61:5c:79:92:d5:
                    8a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2A:73:A3:DB:3B:E0:B2:CE:7B:0B:02:67:07:19:BF:3B:3F:23:2E
            X509v3 Authority Key Identifier:
                keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c4:5a:d4:be:c1:8e:40:e1:ac:bb:95:12:63:78:85:b6:7a:
         48:e5:58:96:42:78:be:4b:21:55:e0:37:90:9f:0b:78:6b:3e:
         a2:40:20:e4:ba:26:b7:4a:8c:3a:21:a6:8a:ec:85:10:f1:df:
         13:a5:1e:fa:0f:cf:4e:0d:6f:8d:9b:5a:54:67:05:91:e4:bc:
         4d:47:78:62:74:07:32:88:a3:33:6e:dd:8f:be:fc:a1:ed:c1:
         97:5d:ff:8f:c9:d5:1c:0c:9c:64:2b:f2:1a:94:d8:47:7a:b4:
         3a:81:7f:48:78:c6:5b:cb:10:cb:6d:64:9b:4b:b6:c8:fd:16:
         05:54:c2:2b:f3:d3:29:6c:fd:7b:48:eb:96:e0:10:68:3d:a6:
         65:6c:78:3e:d7:05:2b:6f:21:03:49:9b:1d:9f:f7:45:3f:2d:
         a6:fb:ea:93:98:56:63:00:6d:39:4f:4c:5d:a7:85:d6:08:14:
         b0:0b:da:6e:e0:36:21:1c:38:73:f3:1c:4c:72:97:40:98:6f:
         3e:a4:89:20:68:2f:99:03:e9:08:87:ae:f1:a2:90:03:55:33:
         75:ae:f8:bd:da:75:30:09:0f:f3:d8:cf:29:e3:ae:21:e0:a3:
         70:da:e9:2b:6a:09:3e:6a:0c:e4:a3:c4:ac:23:bb:12:c9:ae:
         96:3b:a0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:52:04 2024 by rpki-client on console-ams.rpki-client.org