Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
File:                     UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json)
Hash identifier:          nysn5t+uuMdiFB+GZvwwBeMZUKMjciDVXR0VauYddYw=
Subject key identifier:   4B:E3:F0:01:0B:55:BA:7E:3B:0F:8E:A6:32:14:E3:30:97:89:77:DD
Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Certificate issuer:       /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Certificate serial:       0193572D7B7AB1A44C7C274C516AD4BC7558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 04:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:18 +0000
Files and hashes:         1: 4oNng4SZnDzAK1Q3_8RVjM5kjtw.roa (hash: iCVW3R6AYJBzMjM6jjBLzlHC2KZ/rKtbC5DXa5QnONo=)
                          2: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: v1ZHeUzkzYb21SBdtrj16uHTVtw31c+oQifvnTrJsgE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:7b:7a:b1:a4:4c:7c:27:4c:51:6a:d4:bc:75:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
        Validity
            Not Before: Nov 23 04:00:18 2024 GMT
            Not After : Nov 24 04:00:18 2024 GMT
        Subject: CN=4be3f0010b55ba7e3b0f8ea63214e330978977dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fa:d1:77:1b:79:a0:67:51:2a:12:c5:59:81:
                    e6:fe:de:c9:73:d8:72:23:92:d1:e9:71:2f:51:ac:
                    f5:f2:05:02:48:6b:6b:f5:b2:41:ca:7e:c8:1e:2e:
                    a0:61:15:63:15:67:0b:93:62:48:ae:4a:10:df:91:
                    35:9e:7e:c0:ee:ed:cf:c3:15:8a:76:08:3b:a6:fb:
                    3f:7a:fc:f2:77:5f:0d:df:71:0d:d3:d0:c9:ac:aa:
                    2b:4c:77:33:4e:37:31:4f:af:73:32:44:c5:e5:46:
                    80:da:9f:23:a7:ad:a6:29:af:97:85:34:53:f6:d9:
                    16:87:cc:49:4a:b7:24:b2:d2:39:c1:d2:86:e3:ca:
                    9c:84:0d:ba:3e:e1:88:a5:c3:e1:43:0a:fe:7b:9f:
                    74:02:4c:9f:f5:8b:e4:53:2b:d1:f2:ba:be:65:31:
                    83:07:79:19:9e:a3:fd:14:c9:80:1d:fd:d2:4b:8d:
                    c4:d5:e6:c8:06:cd:44:43:bd:b1:2d:87:ac:05:f1:
                    ed:68:d6:d6:b2:e8:1e:5f:2e:e4:57:e2:bb:d9:12:
                    fb:21:a6:cd:c0:1a:ce:b8:1f:f6:04:4a:e0:a7:63:
                    99:37:c2:95:0f:21:f2:e3:8f:dc:d2:06:41:d8:28:
                    57:25:54:91:04:96:d1:86:cc:a5:0a:4f:2d:c1:a7:
                    a9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E3:F0:01:0B:55:BA:7E:3B:0F:8E:A6:32:14:E3:30:97:89:77:DD
            X509v3 Authority Key Identifier:
                keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:99:e4:e0:89:f5:04:1d:2d:fb:cf:1e:ca:ee:06:3f:cc:46:
         a9:2b:36:ba:c2:56:21:df:43:f4:ab:5a:5a:4c:1d:f9:bb:59:
         c5:b3:61:dd:f6:d5:07:5a:58:a1:03:5d:c4:c5:89:36:6c:08:
         8d:31:85:95:f7:b0:60:99:fe:df:94:24:2c:b5:59:e7:fc:c2:
         30:50:e8:2c:c8:2c:2f:f7:4c:3e:db:ff:c3:ff:92:75:b6:c9:
         23:40:a2:b1:3c:fc:6e:09:12:f8:88:f6:4f:b5:64:9b:ec:cc:
         4f:f8:b2:fd:0b:e3:23:67:77:77:53:d5:8e:d7:d5:ab:d5:f3:
         83:41:95:17:55:80:76:4a:54:e0:be:39:a7:b2:75:1b:f7:e5:
         4d:6e:ec:d7:ed:5c:a0:d4:39:35:ad:db:13:af:b9:37:c4:67:
         0b:7d:ee:ab:e4:dd:4f:0b:96:72:12:1d:7f:f1:d0:6a:d3:4c:
         3f:47:d3:2d:6a:61:d5:1b:8d:a6:85:ed:e1:71:c2:3d:e7:ec:
         3d:da:f0:89:56:56:a8:da:57:00:d3:01:1e:95:66:bc:98:40:
         0a:78:6c:ea:e4:0b:6e:43:5b:88:e7:69:7a:db:bd:b8:fc:fa:
         38:13:22:9f:1a:89:f5:6f:99:5a:98:12:91:de:c4:55:be:5a:
         7f:f6:ab:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:02 2024 by rpki-client on console-ams.rpki-client.org