Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
File:                     UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft (raw, json)
Hash identifier:          SkBSo/hZDqc4XKrWnAGxbFFUfH2c7Q1VCVPbvG8121g=
Subject key identifier:   9A:93:9B:1E:73:AE:8A:03:6F:94:E3:A4:AE:A3:B2:71:16:92:31:C8
Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Certificate issuer:       /CN=52056867e4d2885e99b549ed6fb786330adf8f44
Certificate serial:       019352ADA0E78127E05B3E9A8C9B578370E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 07:02:10 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:10 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:10 +0000
Files and hashes:         1: 0BDdrw6Ls4SRAf7nIM9fvgIBYS8.roa (hash: 4szWFJlhTqr1aSEYB54L1zx6Lwny5jShMQRfaNckYLg=)
                          2: 2WsiQVAxKQIirSeHQ8GVjm41QMU.roa (hash: MjHy4JfxjBuP4hNrbJi1F4h9oi7ekilj0Yq9fLT/O0I=)
                          3: UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl (hash: O3pcQzPP+0E4AdzUm7Al9rVjurHGTKNxsT1hSVfUFMo=)
                          4: ePcIel9stzApZz3zfoeew2cbdlE.roa (hash: k00GztQjBM47x2S5DjXb8G8lXzsGUkzb9sKq5y5H1XY=)
                          5: lU8Q3JMjMZygGJgbpwEkiCw3XsA.roa (hash: D2bUK2Syd+eAaAarnF7E2e/Lew6DoKqSGy2fFX2BbeI=)
                          6: qkPUpv7EfEa1hjo6XLc5ctcVzzQ.roa (hash: dYy2Lk7HPK9Qpo+/Lqr3ZkTjKF3m9HvL3gnPpmZ5lzA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:a0:e7:81:27:e0:5b:3e:9a:8c:9b:57:83:70:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44
        Validity
            Not Before: Nov 22 07:02:10 2024 GMT
            Not After : Nov 23 07:02:10 2024 GMT
        Subject: CN=9a939b1e73ae8a036f94e3a4aea3b271169231c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:77:3a:cf:4e:35:8f:86:44:c6:1c:ba:24:
                    8c:ad:0c:45:f8:22:00:a2:d8:c6:87:e9:41:bf:75:
                    57:66:d5:3b:08:bb:46:aa:c1:90:87:12:55:da:38:
                    c2:27:7e:8e:94:5a:24:dd:0e:6c:78:25:54:e2:c6:
                    42:b9:16:75:34:06:01:29:f4:6a:98:01:82:e1:1a:
                    18:ee:b1:76:47:5e:ec:99:19:a8:60:8a:2d:6c:56:
                    c2:ae:7e:77:00:95:c5:36:60:b4:b9:f3:f9:66:6e:
                    a0:f7:f9:d2:c2:eb:25:9d:f4:6b:f1:28:ef:16:b8:
                    29:6b:89:c1:40:f5:25:f8:dc:19:02:63:cd:f7:1a:
                    a8:ac:88:0b:42:8b:24:f9:c0:03:55:a1:c0:fa:70:
                    0d:93:ba:37:ca:18:3d:26:8c:68:0a:90:d0:17:e5:
                    fb:48:b0:c2:c7:4f:0e:6d:5a:26:07:26:5e:bf:bd:
                    e2:a7:45:ae:a1:73:ee:f9:02:90:03:f6:04:11:e6:
                    35:e1:cd:0f:99:9a:da:12:e8:a5:8c:5d:9d:6c:45:
                    e5:42:67:46:45:bb:2e:0d:73:18:5a:df:37:62:0b:
                    2e:a2:8e:da:2a:1e:31:b0:13:84:9c:e1:72:f4:d1:
                    a2:f8:1d:6c:94:4a:aa:d1:28:b4:cc:ec:18:76:9b:
                    25:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:93:9B:1E:73:AE:8A:03:6F:94:E3:A4:AE:A3:B2:71:16:92:31:C8
            X509v3 Authority Key Identifier:
                keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:56:51:12:b3:b4:d4:be:7c:1d:55:2d:c7:19:9f:a8:da:ac:
         64:ca:e5:09:78:1a:2e:2d:62:fa:b9:b9:73:26:fa:43:15:0e:
         5c:f9:a9:69:00:f8:79:d4:2a:ff:8e:c5:6a:6c:c2:7f:3a:c0:
         d1:41:6b:26:89:2b:8d:7a:9f:4a:f3:94:84:03:8d:ac:e9:fb:
         42:c7:08:69:7b:62:42:ed:f1:cf:92:02:22:88:89:cd:1d:28:
         2c:17:8e:bd:ba:b3:b5:c5:d2:64:df:81:d1:e1:bb:6f:de:eb:
         c0:46:4b:8a:90:74:f4:2e:53:ab:17:ed:e2:2e:95:64:40:0d:
         9b:71:84:40:ff:df:73:f8:35:1c:4a:d7:66:1c:f8:aa:ab:1f:
         03:5b:10:7e:26:92:f6:85:8a:59:40:ae:ec:57:d0:3a:df:da:
         24:ad:af:64:f1:7e:f2:d4:55:d5:d4:a2:ae:0e:f0:5d:3c:f0:
         b8:b6:a1:f8:3e:df:f9:1b:8f:58:60:a6:a1:89:d0:5a:98:0c:
         65:7f:97:8d:4b:c3:97:5b:3e:91:57:56:c0:f1:6a:1b:9b:6e:
         fe:24:50:6d:2a:ce:b1:14:b6:86:08:65:5f:ef:a8:0f:83:d4:
         89:9a:af:e3:f8:a1:5c:01:72:76:f3:6b:c5:02:37:1a:66:00:
         3d:82:66:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:08:20 2024 by rpki-client on console-ams.rpki-client.org