Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File:                     U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier:          tAogQi0VeIfLyy3i1Z9MyKuooMvMvWpLMRpZR6Fd+DY=
Subject key identifier:   1A:98:B0:17:3F:C9:C9:50:96:42:94:4E:75:61:26:48:C8:1B:0D:8B
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer:       /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial:       0193557699B5B9DFB5FA0B2DD870B5351ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 20:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:56 +0000
Files and hashes:         1: JPADrC7Y6Jxr3EOms000peLIR70.roa (hash: QqxDv0v13YU3Dy+Xuq6GmUB48lTvlEldUefBAEIfQDw=)
                          2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: jIfDJqAyiL2LG42QHEm9V/3RFfTmqVp/OGdzoRHTLEU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:99:b5:b9:df:b5:fa:0b:2d:d8:70:b5:35:1e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
        Validity
            Not Before: Nov 22 20:00:56 2024 GMT
            Not After : Nov 23 20:00:56 2024 GMT
        Subject: CN=1a98b0173fc9c9509642944e75612648c81b0d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:83:92:01:69:e3:5d:ea:59:25:a8:4c:de:22:
                    2c:bd:64:64:c5:29:b5:5a:ef:59:9d:4c:62:40:67:
                    64:54:19:d3:88:23:7b:35:9e:e7:84:13:6b:3e:cc:
                    d8:e2:59:77:f4:a6:90:4d:b6:48:5a:b4:36:8a:80:
                    f5:b2:09:7d:13:05:1a:cf:3f:2a:2d:2f:75:d7:b4:
                    c6:f7:cf:d0:6a:c4:31:1c:8e:8d:a1:d0:7f:e2:70:
                    e9:21:1f:3a:02:a4:d9:c2:aa:a0:e9:6f:c1:a5:d6:
                    7c:6a:31:6d:01:ae:5e:eb:f8:72:10:a1:4e:3a:b5:
                    98:6d:33:a4:1f:b5:ef:ca:34:76:0d:c2:98:e3:44:
                    a1:10:b1:30:61:c3:f9:2f:a3:a3:7b:65:a9:a2:5e:
                    cf:fb:24:bf:84:c9:e1:7a:1b:83:a6:8d:5d:9b:a9:
                    6e:f3:38:b9:ae:1f:b7:c8:f1:31:f4:f9:20:cc:49:
                    20:3a:4e:f9:b9:32:63:6b:46:73:d1:71:8e:0d:05:
                    41:99:fe:0c:21:ad:71:9c:ee:cf:ee:4d:ae:b3:2d:
                    18:8f:81:e9:31:0d:e7:54:da:68:16:d9:38:e6:e6:
                    4e:de:8f:67:ec:1a:38:35:50:4a:3a:b7:9d:26:69:
                    dc:ab:60:07:aa:fc:cd:fc:73:14:e3:5a:32:5e:7e:
                    8b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:98:B0:17:3F:C9:C9:50:96:42:94:4E:75:61:26:48:C8:1B:0D:8B
            X509v3 Authority Key Identifier:
                keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:13:7f:ac:3e:f3:28:ac:f0:12:22:7e:a8:94:d1:94:90:5e:
         3b:98:0c:e7:96:9d:e6:04:46:c1:8c:25:5e:de:c0:4c:c0:23:
         15:6e:cb:42:d3:cc:29:d1:11:21:74:19:5a:4a:fb:11:86:85:
         e9:84:15:1b:86:01:c7:71:21:e4:5c:2c:bc:b1:9b:63:09:3b:
         92:d0:39:01:fa:29:91:3a:f1:a7:0a:42:af:97:35:5e:81:7f:
         6c:c1:0c:e7:14:34:46:24:56:f6:20:5d:89:75:81:87:9f:dd:
         83:dd:c4:e5:2c:97:d5:7d:a8:c9:e1:f5:34:e3:e7:f2:05:c5:
         71:dc:fa:84:79:cf:bd:b8:d6:61:33:87:f6:01:e9:5a:1b:cc:
         07:4c:ae:67:a8:98:10:e9:41:30:4d:ef:85:0c:40:d0:a2:66:
         8d:73:6e:aa:12:62:49:15:1d:fe:09:70:5c:b1:aa:f3:fa:5d:
         32:23:38:f5:a7:fe:47:22:0a:86:e8:c6:e9:bb:37:e0:bf:b1:
         a0:97:d8:68:87:11:72:9c:c7:42:7b:0f:44:b7:c7:6e:8a:db:
         4e:3a:51:8b:dc:0e:8b:82:ed:b2:65:ad:41:1b:75:17:5a:83:
         2d:eb:33:ed:04:68:0a:e2:85:15:c2:96:93:9b:57:43:b5:3c:
         a6:9a:e0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:14:37 2024 by rpki-client on console-fra.rpki-client.org