Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File:                     UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier:          lGMVljf5V9sRlKOOo1+m+EPDIu7+cSKw/Xfz58Xaa6s=
Subject key identifier:   53:6B:0B:62:68:FB:B8:99:9C:0B:2A:60:B6:25:71:36:3A:85:F0:48
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer:       /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial:       0193549AAC6CB89B9025056D321616A6ECD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number:          0AC9
Signing time:             Fri 22 Nov 2024 16:00:42 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:42 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:42 +0000
Files and hashes:         1: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: r8wvXCUWKqDeeAwUtrjV7LsbacLsgO5TxshcM98JBvg=)
                          2: X5Q0eUpDipCmMrzwipO8DT-BxaM.roa (hash: dpdRGmW8BJhoplmY6aFWdreSX1dHujBy28A7k5LrpJo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:ac:6c:b8:9b:90:25:05:6d:32:16:16:a6:ec:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
        Validity
            Not Before: Nov 22 16:00:42 2024 GMT
            Not After : Nov 23 16:00:42 2024 GMT
        Subject: CN=536b0b6268fbb8999c0b2a60b62571363a85f048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:c2:66:08:79:04:4d:1e:c5:06:96:b5:c1:
                    17:a5:53:d9:f6:b6:ee:a1:a0:cf:58:54:af:53:e8:
                    c3:6b:cc:1d:65:60:33:cf:d3:55:d1:bf:f0:19:3f:
                    c6:bc:ec:ce:0d:37:72:37:a9:48:67:b2:77:c6:59:
                    e2:99:a8:f2:8f:ef:f8:36:3d:9d:c2:4b:77:3d:48:
                    65:ed:dc:56:37:43:22:39:76:ea:e5:68:ec:13:eb:
                    b0:90:8f:80:1f:7a:01:6f:52:f8:98:6a:86:4f:83:
                    58:07:92:0f:a0:8c:09:16:b5:b3:0d:2b:f3:8a:57:
                    18:a9:e6:c2:bc:8c:a8:96:cd:fc:0d:ea:a2:a9:b4:
                    6f:b5:29:13:86:a1:6f:1b:1a:bf:77:b1:60:66:25:
                    2f:03:0c:db:a3:5f:09:55:68:8d:b2:cb:84:c2:a3:
                    a0:e4:9c:df:b8:31:93:16:c6:82:78:dc:01:bc:e1:
                    4d:d4:f9:96:c7:e4:25:20:65:a0:2b:ae:7e:a0:8a:
                    b8:11:03:62:9e:27:6e:b1:88:af:48:01:d9:f4:e3:
                    eb:53:fc:ec:28:90:52:d8:63:58:55:e7:3c:f5:31:
                    92:89:aa:5a:29:f1:1d:06:1a:59:b2:75:a2:43:81:
                    c0:9c:0e:da:00:db:03:df:45:43:ae:f0:b4:39:fc:
                    9e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6B:0B:62:68:FB:B8:99:9C:0B:2A:60:B6:25:71:36:3A:85:F0:48
            X509v3 Authority Key Identifier:
                keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0e:0b:63:57:f1:71:23:4f:da:21:61:a8:1e:19:13:4b:14:
         4e:ff:03:16:ad:31:82:80:83:8b:f0:bf:bb:cd:32:92:d4:8c:
         0f:08:75:2f:81:7a:a3:4c:ba:7d:2d:0c:74:3f:68:f0:73:46:
         a9:8e:67:9d:2d:13:55:8e:a6:f2:43:a3:94:b2:32:f2:54:4f:
         45:7d:bd:21:43:ec:23:d0:64:b6:1d:6c:8e:3e:1b:24:c7:2a:
         47:a6:6a:05:1e:9d:1c:af:d1:61:5f:ee:9b:bc:cc:e6:c1:68:
         1d:12:15:3b:b8:53:e5:dc:d1:c5:31:80:d7:18:e1:a7:8b:19:
         24:1c:d6:2b:e8:dd:a9:ad:94:7f:4e:9d:a6:de:dc:7a:71:74:
         46:15:4e:ae:66:d5:86:18:73:04:4c:fd:ed:db:bd:bd:a4:51:
         9d:e5:a3:36:c1:a7:15:5c:af:6e:8c:94:2a:73:f6:00:bc:e3:
         e8:88:16:85:2b:bf:a1:72:3c:7c:88:1e:4c:01:a0:55:4e:ec:
         c9:e4:8c:62:a4:ea:74:67:de:35:f1:47:5c:22:a1:41:dd:f1:
         31:18:1d:67:d3:bf:cc:93:85:d6:40:a6:fb:0b:65:c4:72:06:
         cd:1f:d9:5e:3e:82:ac:94:22:06:cf:ae:8c:c0:51:6d:2e:16:
         00:e4:2e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:59:35 2024 by rpki-client on console-ams.rpki-client.org