Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
File:                     ug-GS6D6IE3pOsWqhPcotiIMb3w.mft (raw, json)
Hash identifier:          Bv8VWDz9Bk/kEkJKC7du9fAbv330O6MsJKcVq49pmfA=
Subject key identifier:   26:EE:46:92:F6:82:14:8A:24:4A:6C:6F:AD:FF:27:F2:1D:34:00:2E
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Certificate issuer:       /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial:       0193568A3C3DD696D521DCCF11FDE5A97800
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
Manifest number:          0A08
Signing time:             Sat 23 Nov 2024 01:02:00 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:00 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:00 +0000
Files and hashes:         1: cIlDDAuEbPAnRn4Qtr2LOISF6wc.roa (hash: hmoIVvqkMOYFP3SeUd5ogS67VZNE35qduPA2zqKLkGE=)
                          2: ug-GS6D6IE3pOsWqhPcotiIMb3w.crl (hash: j4qI+xZVDkL1x91DskXfDLQoj+896neuqJ5h9y9DnDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:3c:3d:d6:96:d5:21:dc:cf:11:fd:e5:a9:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
        Validity
            Not Before: Nov 23 01:02:00 2024 GMT
            Not After : Nov 24 01:02:00 2024 GMT
        Subject: CN=26ee4692f682148a244a6c6fadff27f21d34002e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:09:19:5a:b1:ba:67:a3:0f:ee:89:12:70:
                    3c:cc:91:df:b6:4e:ba:ca:54:06:7f:21:c2:21:42:
                    cb:c0:39:32:49:07:90:cd:b2:ff:53:fb:20:6c:f9:
                    9a:4b:27:20:83:bf:69:62:bc:98:8d:30:e5:53:dc:
                    4a:07:54:a7:99:ed:2c:20:27:cc:98:76:53:ef:5f:
                    c3:41:84:da:97:65:c8:d6:21:94:ce:e7:db:b9:f7:
                    bf:c0:4e:5f:21:ab:b2:7e:ca:d7:f4:29:d0:56:f0:
                    28:99:77:52:1d:fd:0a:d4:20:cf:a5:7f:7d:28:69:
                    2c:7d:20:ad:23:08:e2:6a:5e:e3:ca:a2:bd:2f:11:
                    31:be:90:63:ab:d2:6a:4c:6e:03:f5:e0:15:09:b8:
                    59:26:6d:df:8e:47:63:a4:2a:59:04:19:f3:85:3d:
                    25:9b:4c:3d:40:0f:b1:39:24:c5:55:93:60:01:6d:
                    0e:a9:44:9e:6b:dd:1e:4a:c7:37:65:ad:74:81:2b:
                    7f:99:e2:d0:79:0a:6c:6c:63:6f:29:3a:87:38:d9:
                    39:e9:f4:26:1d:e2:bd:d2:06:55:73:1d:ce:08:5d:
                    77:17:b4:12:23:d3:b2:87:80:1e:64:82:4b:87:3e:
                    30:7a:f4:0f:90:03:2a:1e:ca:a4:6e:6a:3c:1c:e8:
                    98:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EE:46:92:F6:82:14:8A:24:4A:6C:6F:AD:FF:27:F2:1D:34:00:2E
            X509v3 Authority Key Identifier:
                keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:5f:e7:1d:fa:21:51:de:76:64:fe:c9:b8:ca:cf:07:36:e3:
         7d:47:ed:d5:cd:80:ba:cd:52:30:e1:3e:eb:35:36:0b:06:f2:
         e9:b3:25:43:10:b9:0c:63:06:38:bf:1d:54:e6:c4:59:bc:6e:
         c8:d1:78:d4:53:25:45:03:5b:aa:07:77:2f:c2:b5:a1:e9:ec:
         c2:d7:51:35:91:a8:5d:7c:52:6d:85:f3:24:01:cc:0d:95:b2:
         89:ed:db:0f:d0:5b:6b:7d:a9:70:eb:43:69:cc:31:87:8b:4c:
         37:4b:35:25:ac:28:32:16:51:4f:cc:de:2d:2c:9f:06:28:3b:
         ee:3b:6d:e8:22:34:2e:db:ca:7f:88:59:98:26:e9:5c:ce:cc:
         0f:26:34:77:ee:91:a8:53:9f:01:a5:e5:e1:2f:5c:64:91:19:
         63:42:27:fa:10:76:ef:97:b8:55:33:c9:99:45:1d:6b:89:b5:
         14:94:fb:ba:b2:81:8e:58:4d:d8:b4:6a:22:44:cc:8a:41:28:
         7b:b9:ae:3c:6b:9c:58:70:72:2b:09:0c:12:95:de:b5:16:1f:
         80:24:a2:ca:c2:75:0f:8b:30:2d:d6:be:59:2a:a5:02:90:c4:
         8f:7c:29:65:e0:a2:90:ee:f5:85:26:b7:d9:ee:01:44:bc:25:
         ec:67:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:45 2024 by rpki-client on console-ams.rpki-client.org