Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
File:                     uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json)
Hash identifier:          71n4ZxZz21iJ/DUMP0oeAnxOWP1Wn88nxxIxeHBQ13I=
Subject key identifier:   B4:38:17:CB:4B:3E:C1:38:2E:EB:54:6A:F2:3B:28:81:1C:CC:45:5E
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Certificate issuer:       /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial:       019356898BD1EF69EDE0551AA1A496764D62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
Manifest number:          1376
Signing time:             Sat 23 Nov 2024 01:01:14 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:14 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:14 +0000
Files and hashes:         1: BScY9kgr2wH_48zXQUAuH3eBRYk.roa (hash: hMIjRdIvJPKTkF2OakBfT35zPk+MuzxDrXlsvoWL9Ok=)
                          2: g30csKEs4GUN9uj5gdIDDFa04GA.roa (hash: 0htpbGS4m8ZXFOHVCgny+OxZ5LRK7U5JKvSVaTRmnk8=)
                          3: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: 6HUREV3ZIybW1CjywXT46wUMhGiPRHKUPhrYgeWrfk4=)
                          4: yj8povSyrrKOPMXQ4wz1GezAvp0.roa (hash: qKexIWCtlbmc02YN3D8ZPQcLueZi3RQ2FIyPvyFoxvo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:8b:d1:ef:69:ed:e0:55:1a:a1:a4:96:76:4d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb190d102ac9603b405b36374d429868604937af
        Validity
            Not Before: Nov 23 01:01:14 2024 GMT
            Not After : Nov 24 01:01:14 2024 GMT
        Subject: CN=b43817cb4b3ec1382eeb546af23b28811ccc455e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c3:9c:f8:18:8b:c5:8d:7f:88:e3:e7:c0:be:
                    2f:7b:b0:19:4b:48:9a:7c:85:32:15:a6:78:3a:b0:
                    cd:3a:de:e8:e0:7a:f5:d4:51:f6:ac:e9:be:7d:3d:
                    b7:da:a2:c7:95:0b:3c:4c:26:85:a5:fd:96:1e:3a:
                    74:a9:03:4d:ae:a5:09:ad:67:4d:89:0a:bc:93:bd:
                    8b:7d:e6:59:cd:59:30:30:4c:e6:f6:1b:e4:e7:f9:
                    54:b2:4c:21:48:98:77:3f:0e:fb:6b:44:3f:4e:42:
                    df:a0:73:0e:d0:72:94:f5:07:d7:2d:6f:54:35:1c:
                    28:de:f2:ca:b9:89:00:9c:b5:cc:ea:03:70:75:a8:
                    5b:9d:8c:20:22:19:e8:2d:29:f5:03:14:09:63:92:
                    be:9f:a1:cb:e5:70:12:59:63:4b:63:f9:fe:dc:c3:
                    49:99:da:38:8a:4d:f5:33:a2:69:b2:84:0b:19:45:
                    55:ad:bf:7f:fc:54:a3:0c:a3:2a:97:6b:26:00:81:
                    f1:d2:78:75:61:9e:ad:c9:8b:86:33:73:c4:50:c2:
                    a5:41:a2:69:f6:19:b7:0e:fc:d6:51:fe:9d:5a:67:
                    fb:95:8b:58:e9:13:37:87:97:c5:27:37:6b:d8:1c:
                    8a:20:41:b4:d4:35:50:22:26:a1:87:75:ac:99:c4:
                    9b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:38:17:CB:4B:3E:C1:38:2E:EB:54:6A:F2:3B:28:81:1C:CC:45:5E
            X509v3 Authority Key Identifier:
                keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:2c:24:bc:a5:73:89:c1:24:aa:32:bb:f1:0a:eb:22:b2:6f:
         c7:88:61:04:6b:56:15:3e:cb:9b:d4:21:59:29:25:d6:22:25:
         fc:db:cd:00:8e:64:ef:77:3e:1a:0c:67:d7:41:be:4c:ee:50:
         a3:59:29:be:5e:dd:8a:b6:65:e2:01:3c:60:ba:3f:83:b6:52:
         79:b9:7e:a8:fc:d8:ca:56:e2:4e:1d:68:34:84:ba:60:e5:68:
         6a:d3:ad:ec:10:ee:27:b5:f7:b2:29:c7:22:4a:ec:5c:99:66:
         db:79:de:20:4b:7e:a0:94:57:be:70:51:5e:88:43:94:9c:ed:
         5c:26:25:32:f8:6e:76:00:81:a4:00:07:ee:6c:41:0e:6d:c2:
         24:83:14:b9:27:45:51:b1:ba:a8:f5:0d:08:23:cf:aa:35:fa:
         ab:2d:97:ff:e8:38:f6:66:29:d1:22:8a:08:4e:10:a8:f3:83:
         f4:3c:bf:b2:03:88:ae:0e:d0:01:07:8e:d7:a5:39:25:93:1f:
         c0:bf:63:65:63:e4:8a:09:83:eb:3e:16:bb:6e:cd:67:a2:8a:
         52:c0:f2:ee:64:d5:00:c8:8a:5a:93:6d:ec:dc:db:f8:27:68:
         92:f7:95:43:af:c6:7c:f9:a2:9f:00:4e:6f:34:3a:0d:c8:94:
         8d:e8:50:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:35 2024 by rpki-client on console-ams.rpki-client.org