Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
File:                     uCtyJxX5G-eSoew8Med-2doFy-E.mft (raw, json)
Hash identifier:          uc5HbHiqjfylO0yoKEvDPi9GW5zBDGHrZj/Pb/BeCBc=
Subject key identifier:   43:D4:5F:40:68:ED:87:57:AA:CC:0B:C2:1A:8C:A1:0C:FB:88:61:C4
Authority key identifier: B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1
Certificate issuer:       /CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
Certificate serial:       019369DA322DD8F22FFB2E9B40B9CD2AA5B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
Manifest number:          1381
Signing time:             Tue 26 Nov 2024 19:02:07 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:07 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:07 +0000
Files and hashes:         1: N5-pexFVA5BbQzVgzbTOOhnNV5o.roa (hash: HUMz72UBcy0wYfyIC3mCoBI2MEv7sN9tFYXjLEQxM9o=)
                          2: uCtyJxX5G-eSoew8Med-2doFy-E.crl (hash: kwe9N0dlxA7F3hdxwaFFM6WAB8ZSBslGqr8VcRt28uI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:32:2d:d8:f2:2f:fb:2e:9b:40:b9:cd:2a:a5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
        Validity
            Not Before: Nov 26 19:02:07 2024 GMT
            Not After : Nov 27 19:02:07 2024 GMT
        Subject: CN=43d45f4068ed8757aacc0bc21a8ca10cfb8861c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:75:1b:62:7f:3b:7f:62:46:ef:ff:ba:9b:
                    06:38:dd:fe:06:90:74:74:07:9f:9b:08:f8:e4:1b:
                    e1:5f:06:fe:7a:df:c6:d6:bd:be:bd:fb:e4:c8:f8:
                    ec:bb:26:e1:d0:55:20:de:58:b5:72:ce:55:26:79:
                    c0:6d:da:63:ef:c9:b8:0e:2f:c8:b8:b1:eb:bf:db:
                    49:62:b2:21:6b:b8:b1:07:ac:c5:74:45:4a:c0:24:
                    74:8e:23:8f:65:fa:c6:eb:76:70:31:f2:51:55:d3:
                    b1:de:58:de:9d:e2:fc:a9:97:c8:00:ec:17:d8:a6:
                    89:2e:7e:85:ba:4c:7b:fb:23:7c:8c:59:e1:fb:e3:
                    28:34:a9:e1:99:64:26:76:53:83:a2:da:ec:b5:5b:
                    18:35:99:c3:2b:bd:64:cc:61:80:93:d9:54:72:34:
                    b6:e3:39:15:a2:b7:f8:78:7a:36:98:07:00:a6:85:
                    91:9d:f1:15:67:85:70:2d:01:92:a5:78:9c:dc:ea:
                    e3:85:5e:ad:b9:18:03:be:e3:c1:d7:5a:23:c0:3e:
                    11:95:9e:36:5a:fc:f6:3c:f3:7d:2e:78:22:42:3f:
                    92:26:67:d1:5d:4d:f4:8b:a3:12:90:36:ef:ee:94:
                    75:cd:2d:3c:a4:d4:b5:2a:52:4d:01:c7:28:4b:2c:
                    d1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D4:5F:40:68:ED:87:57:AA:CC:0B:C2:1A:8C:A1:0C:FB:88:61:C4
            X509v3 Authority Key Identifier:
                keyid:B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a0:74:c9:0b:20:a1:87:ba:f6:73:0e:95:53:35:0b:e8:04:
         b2:60:16:38:c3:52:41:cf:75:d8:eb:3d:83:9a:be:3a:37:24:
         c2:2b:d9:a4:da:d2:34:64:80:1e:f2:1b:c0:cd:1b:b9:8a:dd:
         bc:5d:84:a3:b2:29:3d:80:98:58:22:ec:25:af:b3:94:03:12:
         46:a8:ec:46:90:2c:cf:48:56:77:d2:de:6a:fd:c9:f8:17:9c:
         da:df:6a:e4:56:bf:6b:09:3b:d6:39:cf:1c:18:d4:db:c9:db:
         da:e7:6f:d7:b6:99:3d:d7:7b:b0:5e:e6:b5:5c:4f:b5:29:4b:
         8c:71:82:19:04:28:46:03:a9:ee:de:15:d7:d8:9e:5b:f7:59:
         c8:87:a5:9c:a0:83:6f:39:89:56:9e:a5:63:b5:f8:be:01:27:
         47:37:ba:81:b6:18:0d:17:e6:9a:e2:ec:5d:f7:00:4e:e0:2c:
         8e:72:47:52:d3:e9:71:ee:9e:31:65:b6:4c:3d:a2:af:9b:6c:
         78:df:89:f5:32:2f:a6:f1:cb:9b:b7:8c:d3:62:55:43:d0:65:
         87:45:e5:22:af:ea:65:d4:b4:e8:a4:48:e9:61:ff:9f:0f:c5:
         91:b1:b4:da:50:9c:b9:07:c3:33:8f:1d:49:e9:f3:64:13:61:
         5c:71:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:13:07 2024 by rpki-client on console-ams.rpki-client.org