Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
File:                     UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft (raw, json)
Hash identifier:          dif5RdY7v8AyCE3kwR6seK65RB8RHbx5EQ5Rm719nro=
Subject key identifier:   9D:8D:8B:44:A1:0D:7B:DA:62:1D:F5:4A:F1:8C:C1:36:2F:26:4F:6D
Authority key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
Certificate issuer:       /CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Certificate serial:       019356F6B224B5AB542393583AB7793D9542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 03:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:28 +0000
Files and hashes:         1: UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl (hash: A+/zSbUHNMCINlBkoajsIuBKln1FRa3bxTddbEI+PoE=)
                          2: gn0pW4yvQSC2tqur9J6XWhniWN8.roa (hash: I4siKf/0Syjrm4QRMFKResE5U/AU4oPV0qrVMl7zWFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:b2:24:b5:ab:54:23:93:58:3a:b7:79:3d:95:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
        Validity
            Not Before: Nov 23 03:00:28 2024 GMT
            Not After : Nov 24 03:00:28 2024 GMT
        Subject: CN=9d8d8b44a10d7bda621df54af18cc1362f264f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:21:dc:44:2a:c3:90:28:42:23:8a:d9:57:1a:
                    cc:86:46:04:58:08:0a:01:62:50:d2:ae:d1:dc:cd:
                    07:8a:23:6b:ee:5f:dd:ab:1c:1f:cb:99:7a:84:38:
                    88:9e:5e:82:3b:b1:a3:b0:28:c6:02:3e:ff:23:98:
                    12:db:c6:8e:6f:77:60:5e:2e:0a:74:35:61:4c:ae:
                    51:e8:a7:55:e1:0f:11:a6:62:1f:18:bd:bc:31:ec:
                    8e:d4:cc:35:5d:20:65:82:93:57:47:70:0e:80:c5:
                    95:79:09:be:ed:e9:90:51:81:3a:16:cc:d7:d8:ac:
                    b7:f5:2b:31:21:4b:12:40:64:cb:14:ec:32:e1:89:
                    06:03:f5:d5:42:16:e9:a4:49:0f:d0:c7:a6:5e:37:
                    6e:3a:38:59:6f:63:ff:de:e7:00:59:78:63:03:a7:
                    b2:1d:94:fb:a9:0e:c4:d2:91:2e:fb:2c:28:2f:0a:
                    98:82:b1:10:40:b8:11:62:0c:fd:71:bd:2d:c2:91:
                    ab:00:ce:27:f0:b1:b8:c1:2d:51:cc:64:eb:e9:01:
                    6f:5f:58:9c:4c:8f:6c:e1:fb:c8:49:e6:f2:6d:03:
                    2f:1a:27:ae:c5:d4:ea:71:7a:de:3a:fe:4b:fd:0e:
                    0f:ce:c4:34:93:0b:ba:8b:f6:89:0b:be:01:c5:d8:
                    a8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8D:8B:44:A1:0D:7B:DA:62:1D:F5:4A:F1:8C:C1:36:2F:26:4F:6D
            X509v3 Authority Key Identifier:
                keyid:51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ba:51:54:82:f5:35:8f:bc:48:01:fe:d1:16:0c:02:22:bd:
         98:81:23:9e:56:85:e3:b8:67:d8:6b:5f:74:7b:5e:26:76:e7:
         77:df:b9:73:84:48:fe:4f:45:e2:eb:2e:05:5e:bf:94:37:93:
         38:36:ce:5c:0a:c8:02:92:50:1a:ff:74:72:a7:39:5f:97:d4:
         d0:6e:48:d7:69:3b:d0:9f:83:2e:27:c3:78:f5:bb:9b:77:06:
         03:a5:b6:84:b1:d2:b6:ff:7e:b2:07:b5:a5:c5:64:41:6d:03:
         f8:db:94:39:91:5d:8b:35:b3:e5:71:93:19:dd:6d:c4:54:5d:
         97:da:39:f5:65:46:74:57:18:e0:c2:6b:6b:99:08:f6:55:99:
         30:cd:87:42:fa:3f:fb:77:b9:23:9e:31:d6:de:25:8f:b6:6d:
         ca:74:28:02:76:39:b2:73:da:09:c2:19:ac:92:58:a2:69:c4:
         78:97:c7:36:83:5c:a6:34:b0:9d:bd:28:9b:0a:67:9a:fa:e4:
         0e:5a:fb:bf:cd:23:26:9d:83:6c:75:2a:05:4f:2f:5f:36:3e:
         72:75:3e:e2:31:f0:03:27:a8:bc:d5:a2:2e:f1:37:85:c8:39:
         86:3c:dc:5f:48:a7:56:20:fb:14:08:ac:fd:57:8d:89:0e:a0:
         87:c7:cc:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9rIktatUI5NYOrd5PZVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjJjZjc0OWFmNjk2NzA3OGMwNGJkMGM3MGI1MTQxZjRl
NWE2MGEwHhcNMjQxMTIzMDMwMDI4WhcNMjQxMTI0MDMwMDI4WjAzMTEwLwYDVQQD
Eyg5ZDhkOGI0NGExMGQ3YmRhNjIxZGY1NGFmMThjYzEzNjJmMjY0ZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/iHcRCrDkChCI4rZVxrMhkYEWAgK
AWJQ0q7R3M0HiiNr7l/dqxwfy5l6hDiInl6CO7GjsCjGAj7/I5gS28aOb3dgXi4K
dDVhTK5R6KdV4Q8RpmIfGL28MeyO1Mw1XSBlgpNXR3AOgMWVeQm+7emQUYE6FszX
2Ky39SsxIUsSQGTLFOwy4YkGA/XVQhbppEkP0MemXjduOjhZb2P/3ucAWXhjA6ey
HZT7qQ7E0pEu+ywoLwqYgrEQQLgRYgz9cb0twpGrAM4n8LG4wS1RzGTr6QFvX1ic
TI9s4fvISebybQMvGieuxdTqcXreOv5L/Q4PzsQ0kwu6i/aJC74BxdioqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2Ni0ShDXvaYh31SvGMwTYvJk9tMB8GA1UdIwQY
MBaAFFGyz3Sa9pZweMBL0McLUUH05aYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80NGFhMTctMmQzNi00OWMzLWJhNGYt
Y2QxNGZlMmQ5NTcxLzEvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80NGFhMTctMmQzNi00OWMzLWJhNGYtY2QxNGZlMmQ5NTcx
LzEvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbpRVIL1
NY+8SAH+0RYMAiK9mIEjnlaF47hn2GtfdHteJnbnd9+5c4RI/k9F4usuBV6/lDeT
ODbOXArIApJQGv90cqc5X5fU0G5I12k70J+DLifDePW7m3cGA6W2hLHStv9+sge1
pcVkQW0D+NuUOZFdizWz5XGTGd1txFRdl9o59WVGdFcY4MJra5kI9lWZMM2HQvo/
+3e5I54x1t4lj7ZtynQoAnY5snPaCcIZrJJYomnEeJfHNoNcpjSwnb0omwpnmvrk
Dlr7v80jJp2DbHUqBU8vXzY+cnU+4jHwAyeovNWiLvE3hcg5hjzcX0inViD7FAis
/VeNiQ6gh8fMVg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:11:21 2024 by rpki-client on console-fra.rpki-client.org