Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
File:                     U0Yz8Z9h1lRuur996ft6qYftW_M.mft (raw, json)
Hash identifier:          48W8ntWDxznDWS3aOH0YLUL/agF/DDjibKcCLqpkO8A=
Subject key identifier:   CA:89:83:AA:99:A2:C2:7C:60:02:BF:E9:4C:EB:0E:FA:56:2A:EC:3B
Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Certificate issuer:       /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Certificate serial:       0193640F5578DC55D34D6391E754D4DAD5F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
Manifest number:          1378
Signing time:             Mon 25 Nov 2024 16:02:26 +0000
Manifest this update:     Mon 25 Nov 2024 16:02:26 +0000
Manifest next update:     Tue 26 Nov 2024 16:02:26 +0000
Files and hashes:         1: RHLLQaO9epjTpcYnivetdGCwuC4.roa (hash: h0jWdRDzxRl/+lWehcEUFMB39+o17/XZJvBGMxvK8tY=)
                          2: U0Yz8Z9h1lRuur996ft6qYftW_M.crl (hash: Bggp63542SW4oeglXWAHnMlHDyHPEqBNigx6SXid5DA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0f:55:78:dc:55:d3:4d:63:91:e7:54:d4:da:d5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
        Validity
            Not Before: Nov 25 16:02:26 2024 GMT
            Not After : Nov 26 16:02:26 2024 GMT
        Subject: CN=ca8983aa99a2c27c6002bfe94ceb0efa562aec3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:c4:83:9a:cf:3b:d5:31:88:16:29:c5:bc:
                    51:df:09:ef:e0:5c:76:73:86:d4:7d:5b:f1:93:ca:
                    5b:ec:38:43:45:bc:af:13:f5:00:f8:99:97:11:ea:
                    51:10:9f:8b:28:e1:fd:41:ab:07:33:b7:e2:42:2d:
                    a3:67:c2:62:30:6e:f2:61:2b:76:9f:21:e8:b8:6e:
                    0a:bd:67:74:2b:d7:a3:99:81:d1:03:46:20:4a:75:
                    6f:db:90:b0:86:2d:93:54:cb:6e:04:c3:b5:76:af:
                    d5:38:9f:86:55:ca:d4:5c:a3:7c:3f:9b:e5:de:3b:
                    90:03:e5:ec:93:e0:1b:8c:28:dc:8b:5b:e4:15:ba:
                    23:98:4c:c7:0c:95:10:71:9b:dc:1f:c5:37:13:1a:
                    2f:d1:42:49:96:9f:d1:12:38:68:08:0d:ea:1c:88:
                    4f:50:e1:e3:d4:c7:9c:69:ef:3e:62:47:1d:40:9f:
                    b4:0a:54:f9:c1:a5:16:34:27:ca:0f:e5:b0:35:a1:
                    67:a1:68:ea:79:e8:1a:3a:63:83:b7:17:5b:25:7a:
                    3d:ef:e8:f7:68:05:cd:77:3d:79:87:e0:18:81:49:
                    9f:60:2b:9e:15:39:b0:c4:7d:ad:b4:8a:3f:a6:81:
                    b2:c0:f6:45:45:77:77:bf:a6:c0:95:c9:f9:8b:77:
                    4a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:89:83:AA:99:A2:C2:7C:60:02:BF:E9:4C:EB:0E:FA:56:2A:EC:3B
            X509v3 Authority Key Identifier:
                keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d8:ec:59:57:fc:22:a4:ce:e3:7c:28:61:65:69:a4:c3:15:
         5d:12:cc:30:22:6a:96:b4:49:5f:a4:ca:a3:bc:49:0d:bf:da:
         8c:0a:6b:2f:f5:e0:c5:4c:e5:5a:1c:a0:66:ee:76:c8:14:9d:
         a8:b9:46:3d:a1:dd:29:b4:07:a1:dd:28:4a:82:62:e6:37:41:
         1d:4d:c1:7b:2d:7c:b1:c5:b9:ee:64:f7:73:5e:51:e9:94:9c:
         c6:f0:2d:d8:d3:18:3d:4c:05:40:6b:49:e2:d4:06:8f:39:96:
         d6:d0:a0:15:04:80:67:47:83:ba:a2:6f:2c:d4:c8:3d:b9:d5:
         ba:ef:64:e2:b8:a3:e6:cc:3d:d1:2b:9a:d3:c1:ca:52:91:f4:
         0b:61:08:0f:08:81:76:8e:13:34:e8:d8:73:df:2b:f3:42:69:
         80:18:2d:45:1f:d8:22:cd:b1:33:7a:7c:ab:a5:d2:39:85:3d:
         0d:5e:53:90:a4:2b:e0:e8:23:f2:2a:a1:45:27:94:bb:0b:b0:
         b8:12:c0:99:ac:78:87:c2:de:73:2c:6a:f1:c3:17:82:47:76:
         a8:9e:23:3f:f9:ae:b3:7c:4a:cb:fa:80:7a:7d:ec:93:5f:41:
         c6:00:72:70:46:5a:36:47:f8:46:2b:41:cb:35:78:b7:0c:c6:
         56:02:95:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:32:03 2024 by rpki-client on console-fra.rpki-client.org