Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
File:                     Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft (raw, json)
Hash identifier:          dg1tVeuT/t1RAwsKT9I0phX5gezjlUPY9XbzCB1n4lA=
Subject key identifier:   82:38:0C:21:92:6E:26:6A:33:3A:3D:C9:1A:F1:E8:56:63:84:21:5C
Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
Certificate issuer:       /CN=521d2c07c28ac7b726a825d3693afe2397209de6
Certificate serial:       019367ECCBDA1F7104DCC6FB57C76EC81A94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 10:03:11 +0000
Manifest this update:     Tue 26 Nov 2024 10:03:11 +0000
Manifest next update:     Wed 27 Nov 2024 10:03:11 +0000
Files and hashes:         1: 1vl-uBnqK9x4Sb8bYwZrjeYThtU.roa (hash: bSnTJ9rl8OrPVbhRr70uQ85wpC/fVsXyzCLGy/fCGn0=)
                          2: Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl (hash: Dt9WVsExKfTW9VeX85yPof2jSTlytWdZ7o0TAQr/HxI=)
                          3: o3kEcEQUg-JsD1DdmuOumtjiDvU.roa (hash: VSzC23+dHl5rOdFSO7mP6g+Hxe3tglvR/TJf4hxkrdU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ec:cb:da:1f:71:04:dc:c6:fb:57:c7:6e:c8:1a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6
        Validity
            Not Before: Nov 26 10:03:11 2024 GMT
            Not After : Nov 27 10:03:11 2024 GMT
        Subject: CN=82380c21926e266a333a3dc91af1e8566384215c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:60:d7:f5:d0:b3:36:7e:bb:6e:91:77:0d:
                    5a:dc:00:1a:3e:b2:54:27:8b:6d:c6:b0:86:38:55:
                    29:c3:0c:7c:27:9b:34:fc:5e:38:27:f6:ff:40:79:
                    70:93:43:9a:cc:5d:ac:5e:18:c5:ae:59:61:94:34:
                    fc:96:e8:0a:c1:8c:18:19:31:d3:84:f5:e1:4b:39:
                    9a:8c:43:a1:bb:27:31:43:fd:3a:25:63:a5:e5:c8:
                    1a:cd:11:1d:4b:e5:67:e2:65:97:15:c7:11:78:c1:
                    a3:94:c5:91:8b:d6:d4:ca:89:b8:c1:72:e8:de:e1:
                    43:24:d9:79:da:af:23:eb:5d:58:69:f6:4b:8f:32:
                    33:24:ba:af:f4:40:76:64:9d:2e:c2:58:2a:d7:03:
                    b0:e2:65:6f:d0:63:e1:71:37:47:9a:ed:c1:65:ae:
                    00:7e:04:1c:9d:16:3e:c2:11:5b:eb:e0:57:be:59:
                    64:50:65:e5:f0:fd:9f:74:48:61:ba:6f:01:54:f1:
                    6e:5f:49:8e:00:06:2d:ec:87:ec:b4:73:92:ba:fe:
                    a4:43:c4:74:2c:40:f7:97:69:02:8b:2f:43:9e:88:
                    2a:9b:33:95:a1:5a:ae:37:07:d1:5a:b2:d1:6e:66:
                    27:94:18:48:02:c2:29:90:98:fc:90:b8:51:32:1a:
                    a9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:38:0C:21:92:6E:26:6A:33:3A:3D:C9:1A:F1:E8:56:63:84:21:5C
            X509v3 Authority Key Identifier:
                keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:04:e1:6f:ed:7f:6c:c2:a3:ea:1a:42:9e:b6:57:76:d6:b4:
         8e:d1:93:3d:4f:f8:ed:82:da:0f:07:de:1e:ce:e7:1e:a5:c5:
         41:2d:b7:c1:28:49:a6:36:b3:d8:c1:52:b2:05:2c:d7:59:0c:
         f9:b4:c1:da:48:2f:86:df:fb:74:e8:cd:d9:67:af:b8:cb:c0:
         e6:fb:27:49:f7:5c:6d:8e:eb:0c:77:bf:54:e9:78:fd:45:54:
         a4:95:4f:9d:16:24:e0:ff:e8:44:77:3c:10:21:1a:ae:e1:8f:
         79:b4:c9:dc:5a:cc:05:96:20:cc:fa:66:46:f3:86:40:d3:57:
         b7:e1:b2:be:c4:c4:65:a0:6f:18:04:7f:c1:84:3c:8e:69:0d:
         6b:10:66:3b:82:d4:a3:c7:3c:5f:be:5c:00:20:52:80:f9:21:
         27:bb:9e:ba:2f:5e:f5:d0:1a:d3:48:a0:0a:46:d5:b1:8d:72:
         2c:0f:b1:83:5f:d6:b7:f2:0f:94:68:03:51:07:50:b2:6a:fc:
         c8:cb:1b:5d:da:3c:82:5d:53:a0:9a:1c:b7:fa:9f:e3:6e:87:
         a2:a6:07:9d:da:a3:97:0e:6e:65:f6:c3:d3:60:c5:f6:c7:1e:
         49:08:b8:d0:c1:26:b7:a8:9d:f5:b2:6a:f8:a1:df:5e:cb:d3:
         f5:a8:09:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:34:43 2024 by rpki-client on console-ams.rpki-client.org