Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
File:                     UaLCwG3bhGaaiamfuHVglRNMh2Y.mft (raw, json)
Hash identifier:          76ZNtWESa5lV9Tj0cE3jWTXq/gUAykY7kUqbl5dv84Q=
Subject key identifier:   2D:92:66:80:B2:8B:96:A5:08:91:E0:37:56:A9:74:D8:BC:02:A3:1B
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Certificate issuer:       /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial:       01936AB4BCABCFB3332DBB24C2E0F3090755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
Manifest number:          01D6
Signing time:             Tue 26 Nov 2024 23:00:49 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:49 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:49 +0000
Files and hashes:         1: UaLCwG3bhGaaiamfuHVglRNMh2Y.crl (hash: OGtFOSmNSsYPTGZRsOIr4lVL1sCTy8jyzGMrE8LFfoc=)
                          2: dFAKweD9dViC2qkneovHavg2-Qs.roa (hash: zfgCkOEo2ewcM1vCpH9uh/303z5dYEa5d8f8fA4SPFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:bc:ab:cf:b3:33:2d:bb:24:c2:e0:f3:09:07:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
        Validity
            Not Before: Nov 26 23:00:49 2024 GMT
            Not After : Nov 27 23:00:49 2024 GMT
        Subject: CN=2d926680b28b96a50891e03756a974d8bc02a31b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:15:ee:bf:23:9f:1a:df:3a:48:54:45:1c:09:
                    01:6c:65:43:2c:97:a9:29:41:c9:ec:84:2e:68:4a:
                    ba:6e:45:01:eb:70:88:92:cd:dc:13:45:d6:7c:a0:
                    35:5a:ba:cc:9b:8f:91:e5:85:d2:d7:2f:e1:39:e0:
                    72:48:8c:b5:4c:c1:41:4b:ae:ad:ca:4e:0f:ff:3b:
                    8d:c8:1a:44:f9:18:cd:75:e3:70:fb:1f:45:4f:2f:
                    b0:04:38:cc:76:78:c8:07:eb:b1:3c:07:fc:22:ea:
                    d9:01:84:a4:5e:f1:5d:28:86:17:c4:ad:8d:b5:2d:
                    0b:f4:d1:e1:2e:f6:c2:58:58:3a:28:14:c4:c4:e8:
                    61:a9:66:14:ff:5c:67:3a:a3:82:24:fc:13:20:e3:
                    d8:61:3c:3c:6f:d3:40:3a:bb:1e:38:d5:c8:b4:b2:
                    af:68:2a:d9:e9:45:6f:63:ce:77:cf:18:50:07:04:
                    fa:57:36:10:b8:77:77:55:f5:eb:a7:c0:70:7b:72:
                    6d:71:10:c0:ef:16:60:36:c7:cd:a2:78:76:4f:e7:
                    24:20:11:8a:c1:ef:56:5c:93:d7:e9:7c:a5:54:cc:
                    1f:9e:f1:29:23:b6:42:48:1b:cc:11:7e:d6:64:4a:
                    0b:4e:83:eb:9f:03:92:26:de:fa:93:f3:71:15:f0:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:92:66:80:B2:8B:96:A5:08:91:E0:37:56:A9:74:D8:BC:02:A3:1B
            X509v3 Authority Key Identifier:
                keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:bc:f1:70:e3:00:b9:78:9d:46:b6:2b:b1:f0:c0:22:e0:c3:
         de:ac:00:6e:57:75:31:23:9b:f4:29:56:32:70:31:e5:b3:28:
         63:7f:03:75:91:c0:59:12:f6:34:91:92:bb:b4:99:a0:f5:e4:
         15:3e:70:cc:b6:98:c1:86:8f:4f:a6:b8:2e:b1:f7:3f:68:dc:
         c1:7c:97:71:f8:a9:83:f7:02:e0:5c:b6:a4:8a:38:03:ba:14:
         2e:96:d1:9f:00:08:63:95:32:cc:46:e2:fa:9a:75:44:e0:f4:
         25:80:21:fb:17:0e:ef:e3:a1:d9:08:a5:ae:98:43:76:37:a5:
         71:e4:a1:d1:99:ca:4c:ae:cd:d3:f5:39:ff:c3:01:3c:f8:f7:
         17:a6:f9:54:dd:69:ea:07:90:c9:56:88:06:c8:28:c3:8d:0b:
         2f:61:82:ce:7a:93:63:16:26:1a:9e:ca:c7:c6:bf:45:c0:47:
         d7:9e:62:46:ce:65:45:e9:e8:f1:96:d7:68:c5:f0:64:7e:1b:
         81:24:ee:a4:0e:c8:d5:ea:d9:1c:65:8c:fd:0c:6d:99:60:7c:
         43:5f:80:c8:97:43:b1:89:8a:e1:ef:0b:f8:05:60:90:07:c8:
         ce:8e:f9:9a:9f:44:05:e5:82:14:66:3a:2d:2f:7f:54:9a:82:
         2f:0b:28:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:45 2024 by rpki-client on console-fra.rpki-client.org