Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File:                     um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier:          qGD4YPqLtNxDRdYiNVDSb55pe0A8RAiK+a20raNoGmc=
Subject key identifier:   4B:CB:F9:6B:A9:6D:06:BD:C5:B8:B9:87:90:44:6C:43:5F:D8:24:50
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer:       /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial:       0193553F9C0F47C67A6A8EBE8A43A7434391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 19:00:52 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:52 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:52 +0000
Files and hashes:         1: 7GEspiBDgmHKDoem39KIHLIIX5w.roa (hash: 0CHV6SnDiIvhGHqWJxuLybfY6S/HkhdyTfiY9jh++kQ=)
                          2: YsIKKcQIXmIoXyl8vOWaDE_xxeA.roa (hash: qgkYMj2sFvQRggdNnQgLEzFYS5pHjRkaL+n31ULvnWY=)
                          3: fIbGyZQ6UyPgNHVxzVi_wKTTDbw.roa (hash: L+2wB0rKgSw7WT2Tg1ak15+R12/V9eSRZ/WH8vEgBuA=)
                          4: pIDshd1xsYohOiIlt10CowJmsig.roa (hash: Y+KvzWuo1DMh7tbrui4oA7Lw0IEPLQ6tLCPFLYP9mZM=)
                          5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: PES8wIgULp4I/xHWPlVH45oMn4ODZZQ4nZquPKbZQ8k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:9c:0f:47:c6:7a:6a:8e:be:8a:43:a7:43:43:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
        Validity
            Not Before: Nov 22 19:00:52 2024 GMT
            Not After : Nov 23 19:00:52 2024 GMT
        Subject: CN=4bcbf96ba96d06bdc5b8b98790446c435fd82450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3f:54:cb:f5:fc:7f:e5:37:4c:99:91:d1:ec:
                    bd:4e:28:92:04:dc:c7:21:07:1e:5a:b9:64:2b:7a:
                    20:81:de:d4:c5:17:bc:df:91:7e:44:6e:9f:73:fb:
                    6c:35:e3:80:e9:4c:4f:ae:32:43:e3:62:58:2b:4f:
                    33:56:9e:4b:b2:be:94:bd:ee:10:7e:41:16:73:45:
                    ba:c5:db:ec:58:f5:78:75:20:95:3c:94:ae:12:57:
                    89:59:d1:e0:4d:82:8d:3b:6f:df:80:4c:8e:52:e9:
                    82:b1:05:5e:ab:1d:78:42:27:4c:79:ea:87:a6:63:
                    fd:93:d0:99:89:70:25:87:40:6b:cb:29:3a:de:82:
                    00:e5:62:d6:2a:92:fe:3b:8c:4d:f0:2e:34:52:f2:
                    b7:0d:46:1e:f4:75:3d:eb:ac:5c:39:a8:37:4d:d7:
                    20:42:53:17:ed:2c:53:48:10:16:9d:1d:e0:1d:c1:
                    c1:2b:9c:79:f1:66:42:95:35:a5:e5:63:79:40:48:
                    11:43:82:e5:23:9a:99:e3:8e:0a:c8:f1:5c:30:2e:
                    1e:31:97:7e:5c:93:1d:07:bd:f9:67:96:0f:cd:2b:
                    82:2b:23:b6:06:d0:2d:a6:7b:87:86:d5:b7:b4:09:
                    48:b9:47:57:2d:dd:0d:d9:f2:c5:40:87:2f:d5:01:
                    5c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CB:F9:6B:A9:6D:06:BD:C5:B8:B9:87:90:44:6C:43:5F:D8:24:50
            X509v3 Authority Key Identifier:
                keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:69:c1:e7:c5:e1:40:df:22:98:30:ff:9e:c2:4f:e9:7b:7e:
         a9:6e:db:72:61:24:e4:7f:ad:08:b9:65:f1:54:d7:62:81:92:
         da:ae:39:c8:ab:44:0c:16:da:16:34:36:86:81:31:b1:bf:1b:
         82:79:86:67:85:39:a6:44:90:c6:a8:3a:f5:67:08:0f:50:65:
         91:87:ab:ed:90:68:81:fa:54:30:79:0d:37:ed:da:d6:81:ac:
         c3:35:c8:88:c7:f9:51:45:03:5a:98:d0:9c:4a:34:51:b6:6a:
         51:b5:25:81:72:83:d4:c6:b3:77:a6:65:23:e5:b6:67:63:88:
         98:a8:1e:b0:cb:fb:81:0d:c4:5a:86:22:91:f6:0b:b6:a4:6c:
         25:28:48:19:37:1a:f4:d0:25:b3:17:25:30:7c:c8:25:e8:6d:
         21:2a:8e:d9:b9:d0:37:b3:cc:70:64:54:70:3d:8d:02:b8:29:
         09:c7:7b:53:4c:fb:be:52:85:58:64:d8:1c:c9:d4:51:0d:28:
         18:28:3c:62:2e:39:ad:0e:bc:29:52:78:84:7e:91:3c:c4:2f:
         12:19:45:86:56:30:28:a8:e4:2c:d2:06:76:59:a5:9b:79:96:
         4e:2e:d2:e4:e6:e4:e3:bd:b5:0f:a5:6f:61:e7:94:5d:85:4d:
         d1:84:08:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:32 2024 by rpki-client on console-fra.rpki-client.org