Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
File:                     u1KMEmrtDX9aBpUOssIDNIaFahU.mft (raw, json)
Hash identifier:          uY86Nntt2/nvwlnQS9+aK3gOOVNa6vizoTT0zNpX3XA=
Subject key identifier:   CF:62:6C:0E:DE:38:CF:37:29:BF:CA:FD:25:D6:06:36:92:00:66:15
Authority key identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
Certificate issuer:       /CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Certificate serial:       01936BC82277CFBA2EE757710D8D4C1389FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
Manifest number:          0C91
Signing time:             Wed 27 Nov 2024 04:01:38 +0000
Manifest this update:     Wed 27 Nov 2024 04:01:38 +0000
Manifest next update:     Thu 28 Nov 2024 04:01:38 +0000
Files and hashes:         1: E9PnOPhA3CNk0TEUhpDtLyU3NcI.roa (hash: t/9+7+WnBFE9o1Crdzk0wT85EEu+SA4n5PetryfvEyQ=)
                          2: u1KMEmrtDX9aBpUOssIDNIaFahU.crl (hash: oHvRan+ooeQvNjkMkt7RS9lBNr20BQTM5OLDzRQhRLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 04:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c8:22:77:cf:ba:2e:e7:57:71:0d:8d:4c:13:89:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb528c126aed0d7f5a06950eb2c2033486856a15
        Validity
            Not Before: Nov 27 04:01:38 2024 GMT
            Not After : Nov 28 04:01:38 2024 GMT
        Subject: CN=cf626c0ede38cf3729bfcafd25d6063692006615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:77:a9:f3:3e:80:e4:ee:b0:fd:75:b5:e5:
                    e7:39:5f:1d:8d:2b:c8:12:9a:de:9a:5d:c7:74:22:
                    b1:92:74:26:66:8c:62:b2:b4:01:9a:2b:ca:62:22:
                    22:fe:a3:d1:d1:fc:42:23:fc:87:a4:1d:02:bf:8f:
                    5e:2a:45:8d:8b:98:d0:6d:c1:69:3e:2a:95:71:0d:
                    78:2f:c3:b7:69:e5:d4:aa:12:0a:8f:21:74:55:c4:
                    85:d0:b2:3f:72:d3:d7:12:a2:d8:16:70:7a:8b:f2:
                    3b:f4:0f:59:f1:59:ba:f9:66:d2:35:f5:17:7c:82:
                    87:ef:2d:9e:ae:9e:7f:b0:48:21:51:c2:65:d1:c2:
                    4e:3f:6f:7c:72:d5:bd:7c:ac:d2:7c:74:a8:42:d0:
                    66:5f:5f:38:ea:ae:fb:e5:5a:3f:81:dd:d4:6b:36:
                    b9:eb:85:fc:d5:4c:0d:96:93:9c:34:ec:d6:cb:8b:
                    7d:23:06:ab:17:a4:b7:72:38:bd:9b:df:1f:1a:1d:
                    09:a9:df:12:8a:28:90:3a:bb:90:51:4f:30:58:71:
                    62:3b:75:21:3c:06:eb:84:20:82:01:59:f4:3f:32:
                    03:59:6c:36:3b:54:37:a5:d0:ff:4c:33:ef:58:39:
                    88:84:f9:1f:21:23:e8:55:ea:73:f8:c9:df:4b:d3:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:62:6C:0E:DE:38:CF:37:29:BF:CA:FD:25:D6:06:36:92:00:66:15
            X509v3 Authority Key Identifier:
                keyid:BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ac:5d:a9:d1:2c:17:23:4a:38:38:ac:bb:20:a7:16:4f:bc:
         d9:06:7e:d0:26:2b:3d:60:51:55:75:53:1b:9c:f3:4f:14:5b:
         a1:90:1a:c7:63:53:89:36:5a:ff:3c:8f:7a:80:6d:f0:0a:0f:
         35:41:6a:3a:20:c7:17:10:00:86:7c:c0:b3:30:b7:3b:49:d5:
         86:b3:43:c3:3f:f6:ad:7f:ca:fb:66:d4:ca:4e:b0:db:3b:9b:
         9c:66:94:2b:9c:86:8b:04:84:fb:00:fd:96:fb:b9:91:1d:95:
         5f:75:7f:3b:be:7d:1e:05:e6:5a:e5:c0:ea:36:e1:70:93:46:
         47:ba:d2:b7:3a:1e:b9:c4:8b:0f:8a:da:66:bc:98:a2:a0:43:
         f0:d3:76:d6:58:60:eb:e5:a6:26:85:0b:9e:f0:ff:d6:ef:fa:
         64:4d:71:51:ee:7f:a2:ca:2a:57:d3:a3:bc:b9:74:5d:f6:cf:
         36:a4:3f:a9:9c:ca:06:ed:ee:67:ab:55:22:4f:fb:a6:0c:0f:
         4f:e8:3a:a8:fc:66:97:be:03:5b:20:f0:f0:62:8f:0a:a6:4b:
         49:db:c5:87:a3:76:8f:8e:cc:b7:d7:02:ef:37:b7:fb:b8:65:
         f9:fe:20:cc:3c:70:ae:b5:4f:d8:bf:dc:42:1f:a4:bc:2b:ba:
         b9:e6:bf:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 11:39:30 2024 by rpki-client on console-ams.rpki-client.org