Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
File:                     H_Umh1LLtSS8_ktaSXb_D4XTia8.mft (raw, json)
Hash identifier:          j0wOsJG+z+nUIFbp5tMlBuK6iKynuADLUW/sKDkiaOU=
Subject key identifier:   5A:FE:6A:31:66:39:8A:B9:A0:28:77:CB:5B:56:44:20:99:66:86:1A
Authority key identifier: 1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF
Certificate issuer:       /CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
Certificate serial:       019369D8D2E0B8F224DE5A9CBA07A740E206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
Manifest number:          0768
Signing time:             Tue 26 Nov 2024 19:00:37 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:37 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:37 +0000
Files and hashes:         1: H_Umh1LLtSS8_ktaSXb_D4XTia8.crl (hash: VsMSW+qnD5FSNetrqXp/8jGjnohpS+SSfZpe3yotin4=)
                          2: p6EiL6tuy0bstxyT0v-ieLT25EI.roa (hash: MxCsnwT6iNlDzjA56vqzOit12WoaWQ2fvp4Mlh/PwGk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:d2:e0:b8:f2:24:de:5a:9c:ba:07:a7:40:e2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
        Validity
            Not Before: Nov 26 19:00:37 2024 GMT
            Not After : Nov 27 19:00:37 2024 GMT
        Subject: CN=5afe6a3166398ab9a02877cb5b5644209966861a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0d:19:95:52:8a:8d:c6:72:1a:54:f1:6b:0f:
                    06:da:da:fe:da:0f:ab:1d:27:d3:a2:94:f7:a1:cb:
                    3b:78:0f:96:b1:a3:53:ab:1f:c9:b8:00:c1:24:9b:
                    52:e8:2c:cf:c1:4b:66:02:49:b4:12:62:15:d1:5b:
                    31:67:cd:16:fe:dc:0f:75:4c:24:2e:c9:7b:a6:b5:
                    e3:37:94:a0:84:ad:31:c9:b4:fd:2d:db:57:ed:70:
                    81:74:27:f9:8a:96:77:6b:9b:4e:5e:f7:1f:60:ce:
                    aa:62:4c:67:0b:54:e1:6b:90:bc:bd:04:e8:6b:d6:
                    38:a1:1e:b1:d8:1f:a8:2b:00:d3:4e:04:65:b5:c2:
                    7b:55:b6:65:5a:da:e7:a2:45:7b:5a:69:cc:c2:69:
                    1c:c3:b3:d6:92:1f:b6:72:37:5f:fe:c8:1e:c7:23:
                    1b:7f:b4:3a:ee:8e:56:98:69:fd:6b:b4:3d:f6:1f:
                    17:ee:ce:b4:a2:1b:5a:13:29:35:5c:bb:49:34:f8:
                    9f:66:2c:46:40:8f:53:7a:66:65:57:11:da:75:21:
                    8f:03:ed:51:e4:cc:ca:46:fc:93:b9:a5:7a:cc:8d:
                    70:e0:62:75:b7:0d:d9:64:27:b0:e9:9e:48:e9:0d:
                    d7:a7:68:50:e3:91:7f:0a:00:c1:96:96:7f:ef:a6:
                    b4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FE:6A:31:66:39:8A:B9:A0:28:77:CB:5B:56:44:20:99:66:86:1A
            X509v3 Authority Key Identifier:
                keyid:1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b5:03:7c:34:c7:9e:ed:e3:af:92:42:61:f3:eb:0f:34:42:
         0d:6f:0b:e6:2f:84:b9:92:6e:3c:2c:d0:f5:66:49:9f:72:9f:
         73:df:c4:0a:21:0c:2f:e7:ce:b2:18:2d:9e:e7:28:73:65:a4:
         5f:fb:0a:8b:0b:33:c3:66:3d:4e:dd:f1:51:77:65:6a:e8:65:
         35:dd:e1:16:58:3a:ec:91:0a:bf:b0:fc:3d:c6:31:7f:14:fe:
         10:03:a5:4d:3b:d7:00:e8:64:df:a6:2d:ff:9c:78:ca:a3:cb:
         10:38:f7:0e:a9:5f:79:68:7e:2b:6a:b3:df:0d:5b:39:c4:72:
         d0:2f:5a:dc:cd:ef:03:af:10:6e:d7:69:26:ee:f5:94:6f:9f:
         b6:4a:c0:56:a5:72:33:96:bf:3c:e0:2c:99:64:c3:12:f2:c9:
         a9:a7:5a:46:af:c0:e8:c2:0b:7d:37:09:1f:d1:2d:c8:88:37:
         ca:49:81:f5:cf:db:ad:e8:8d:ed:ec:89:07:c4:28:26:7b:76:
         57:dc:8d:cb:03:0a:5f:bc:86:0e:ce:d7:1d:fd:3e:b2:37:7b:
         9a:65:2f:89:2d:63:59:8a:7d:0e:e8:38:5c:b6:cc:d5:90:c0:
         6b:96:ae:ad:5d:49:45:28:6a:e9:6d:97:fb:87:41:7b:60:16:
         32:b8:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:16:17 2024 by rpki-client on console-ams.rpki-client.org