Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File:                     uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier:          orj1zs97zVqfiF88xcrNuWs9HXyBQ/yGWA1Jhl6dcP4=
Subject key identifier:   C6:E0:FD:91:32:C3:46:1C:87:E6:F3:ED:1E:A6:33:28:10:99:2B:08
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer:       /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial:       01935387E2BAB4B9E17E55DD998232170C33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number:          015A
Signing time:             Fri 22 Nov 2024 11:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 11:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 11:00:34 +0000
Files and hashes:         1: PTkkSYzfweR_ck6bcq9eq6VkPuE.roa (hash: JTzJNRwnKAQgC5pMWvNgvs48p3R0igxleAErDYFN55Q=)
                          2: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: NrZe0d7Wo/+7qxAZWnJuNx8EHXcBV2LhjK15+nQ3rJM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:87:e2:ba:b4:b9:e1:7e:55:dd:99:82:32:17:0c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
        Validity
            Not Before: Nov 22 11:00:34 2024 GMT
            Not After : Nov 23 11:00:34 2024 GMT
        Subject: CN=c6e0fd9132c3461c87e6f3ed1ea6332810992b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:35:f7:2a:99:c6:d4:85:d3:e0:62:99:46:31:
                    81:ae:c3:67:42:30:00:a2:f5:7c:15:8a:89:08:d1:
                    01:62:77:49:b1:18:c5:aa:a1:3e:18:70:1b:1b:f4:
                    89:38:04:ae:63:df:14:e6:56:be:03:ce:a4:ba:14:
                    cd:9f:66:b0:3a:12:b0:35:fc:f5:d6:4f:73:a4:54:
                    25:a8:7b:eb:20:4f:75:5e:9b:b3:74:bd:dd:44:39:
                    9a:fe:a9:3e:ea:65:e6:85:65:44:81:1b:72:aa:d9:
                    97:a5:85:5c:79:eb:de:80:92:4e:46:12:c3:65:2f:
                    85:91:77:02:1d:17:27:b5:83:00:31:0d:fb:31:6d:
                    fd:1b:82:b4:37:c6:7a:23:f7:b1:82:03:28:92:b4:
                    e3:88:7e:d1:f3:bc:ea:2b:ea:65:74:5b:0a:94:3d:
                    3c:4e:58:c7:16:ab:53:41:2c:e5:36:34:2b:a4:ec:
                    68:0b:a6:bc:3e:ec:92:94:1c:05:b3:6b:a6:bb:b6:
                    5d:10:1d:1d:0f:7d:04:12:02:4d:39:0e:62:a4:5a:
                    d2:d1:64:b7:f2:8a:88:5b:98:07:2e:68:f7:89:4c:
                    3e:fa:ba:da:48:e2:75:bc:53:a9:54:16:f1:37:f2:
                    fb:48:28:48:f4:d5:0f:32:f2:2d:1f:33:7c:bd:4e:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E0:FD:91:32:C3:46:1C:87:E6:F3:ED:1E:A6:33:28:10:99:2B:08
            X509v3 Authority Key Identifier:
                keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c2:58:1c:87:14:71:66:58:b0:65:a9:07:8d:8e:fb:0a:ad:
         a6:11:f2:8f:8e:61:c3:01:b6:f3:fe:b5:9b:d6:f4:cc:ef:e6:
         72:63:70:e9:06:e1:9f:6f:1a:fc:61:fa:88:a9:4b:5f:e1:b2:
         17:91:ed:b3:a3:70:8b:85:d8:64:5f:90:6c:75:23:45:30:26:
         0b:2f:27:40:bd:47:26:91:70:94:da:2a:ed:62:ad:97:7f:4f:
         36:58:6b:db:63:ae:54:0c:15:69:24:04:fc:3c:a2:09:cc:50:
         b9:7c:94:4b:05:e1:ea:79:41:e7:48:ec:2c:9b:7e:44:d0:9e:
         ce:74:fd:63:84:94:61:cf:2e:a8:d7:66:7f:42:be:95:17:4b:
         d4:d9:97:aa:0d:07:76:4c:32:a7:b1:20:30:3f:24:7b:26:4d:
         9c:da:5b:0f:73:fa:d8:45:11:26:d2:e2:31:fd:c2:31:0c:82:
         05:12:64:a3:92:94:04:8d:4c:ca:4d:1d:ff:0d:58:70:30:38:
         58:0f:c6:96:67:60:83:cf:56:bd:18:b1:1a:71:80:8a:ce:5a:
         8e:55:04:77:b2:43:9c:03:0e:88:19:bc:cb:8a:7b:2e:e1:4b:
         56:66:08:e3:99:2f:9b:97:84:5e:e8:98:58:69:a4:0f:73:82:
         84:5b:21:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:26 2024 by rpki-client on console-fra.rpki-client.org