Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft
File:                     U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft (raw, json)
Hash identifier:          i+a8OatfVDCqMkCmpOJQYc5KCBeL8WILUJAJMafaZzI=
Subject key identifier:   25:E5:9F:F4:CC:AC:5E:91:36:97:EC:92:9F:C2:4C:C8:B4:98:E8:D9
Authority key identifier: 53:E3:2C:5F:89:5F:B1:2E:6D:67:4E:0B:16:F6:EE:E5:E5:12:64:5D
Certificate issuer:       /CN=53e32c5f895fb12e6d674e0b16f6eee5e512645d
Certificate serial:       019239CB2C2FBB88ED683FFA229CEBF9EEDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-MsX4lfsS5tZ04LFvbu5eUSZF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft
Manifest number:          0B6F
Signing time:             Sat 28 Sep 2024 18:01:09 +0000
Manifest this update:     Sat 28 Sep 2024 18:01:09 +0000
Manifest next update:     Sun 29 Sep 2024 18:01:09 +0000
Files and hashes:         1: U-MsX4lfsS5tZ04LFvbu5eUSZF0.crl (hash: SdOe7/ig9R6dN4dXoDnlA5WlvhiE+4HzAOcg2FzBzQc=)
                          2: rjO50r1Csox_w7pK9XK7tB7EqyM.roa (hash: zHD2y9uOJnLf8w7zTh8Y9g5t7nEQZo/6vfJBDwey0q0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U-MsX4lfsS5tZ04LFvbu5eUSZF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:cb:2c:2f:bb:88:ed:68:3f:fa:22:9c:eb:f9:ee:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e32c5f895fb12e6d674e0b16f6eee5e512645d
        Validity
            Not Before: Sep 28 18:01:09 2024 GMT
            Not After : Sep 29 18:01:09 2024 GMT
        Subject: CN=25e59ff4ccac5e913697ec929fc24cc8b498e8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a3:c2:df:14:17:de:1e:90:a1:ce:ed:23:b8:
                    2e:dc:a8:b3:12:d3:ed:c8:3c:7e:d1:db:1c:0d:f9:
                    0f:ac:f4:14:4d:45:8d:7e:ce:3e:9e:7c:b0:17:98:
                    31:f0:e4:1c:ed:db:ad:d9:04:32:79:99:9c:73:46:
                    37:bd:b6:73:2c:13:9f:28:a2:a5:8e:3b:84:a7:88:
                    24:e4:c1:86:14:49:f7:f3:cb:57:b8:f1:57:16:ea:
                    6a:41:37:9a:b5:cf:32:57:d0:c5:63:45:48:69:aa:
                    52:cf:bd:6f:1f:0b:39:e2:15:1a:1c:34:c1:8a:1f:
                    56:22:d3:2d:ac:94:c4:61:5e:be:04:1e:b5:1d:d9:
                    ea:e0:dd:d5:e0:9f:f9:fd:71:a4:46:ab:67:9c:c2:
                    25:e3:d8:c5:a3:17:6a:ad:5a:69:f1:ef:8b:84:a8:
                    79:bb:39:2c:75:cd:45:86:64:3d:14:52:d2:22:11:
                    2b:d7:de:d2:11:78:4b:33:41:c6:c2:2e:21:e2:62:
                    82:16:a8:11:97:8e:7d:ea:ff:10:c9:77:39:77:2f:
                    c6:46:0c:cc:21:aa:97:13:2a:da:24:4f:33:8e:53:
                    5b:0b:ed:a5:a5:6d:d5:dc:10:64:c5:77:c6:36:65:
                    6d:5b:e0:2a:3b:e0:43:d1:0d:34:40:5b:86:6b:2f:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E5:9F:F4:CC:AC:5E:91:36:97:EC:92:9F:C2:4C:C8:B4:98:E8:D9
            X509v3 Authority Key Identifier:
                keyid:53:E3:2C:5F:89:5F:B1:2E:6D:67:4E:0B:16:F6:EE:E5:E5:12:64:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-MsX4lfsS5tZ04LFvbu5eUSZF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:11:08:3f:ef:54:74:61:78:e2:7d:d4:3c:d2:57:59:44:fe:
         3d:40:68:58:3d:1d:a5:37:87:c0:b9:f1:ec:a4:a6:d5:ab:c4:
         f8:0e:79:f9:a0:d5:3d:b8:9c:62:8b:08:de:2d:5d:cd:ac:b1:
         04:2f:1a:be:16:fe:e2:ad:14:14:f2:f2:e7:4d:0a:ad:d0:0b:
         00:9f:a1:f3:38:df:3b:20:0b:5f:ac:d1:85:76:59:79:f6:95:
         65:6c:10:af:94:68:94:3c:84:aa:b5:93:1d:cb:0a:ca:e3:15:
         7d:31:2c:8d:d3:74:bd:c6:32:67:e6:ba:22:0f:94:f7:38:8b:
         58:79:ee:cb:03:1a:27:a0:fa:ce:61:08:4d:c1:64:de:d4:e8:
         61:e1:6d:6c:5a:35:78:55:e1:b0:9a:a0:58:f9:d8:06:15:87:
         d3:4b:65:63:3a:bb:b0:7b:3f:ed:a2:b2:30:49:0b:79:42:7d:
         a4:cb:31:89:7b:58:20:7c:88:7e:28:40:5c:5a:b1:5d:d0:be:
         78:ed:47:e9:f4:ce:23:0a:03:0e:60:c2:f2:cd:61:ea:1b:ae:
         c4:b9:56:26:d3:bf:f2:96:d9:51:cc:50:62:10:48:b8:26:75:
         19:b5:bc:c2:c3:a0:95:e6:97:ce:f1:5d:24:8e:94:65:2d:14:
         97:87:f8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:14:00 2024 by rpki-client on console-fra.rpki-client.org