Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File:                     U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier:          CCTP/YPu9UB5yr8WyO1aCMixMIXxBlZ0rPuOUCVZbhY=
Subject key identifier:   D1:73:77:CF:0C:34:17:E5:26:A1:53:D1:F9:93:10:DD:95:B2:B0:8D
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer:       /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial:       019350F464D36E18979DA8D9F36901400460
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number:          0BA1
Signing time:             Thu 21 Nov 2024 23:00:14 +0000
Manifest this update:     Thu 21 Nov 2024 23:00:14 +0000
Manifest next update:     Fri 22 Nov 2024 23:00:14 +0000
Files and hashes:         1: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: 7hDNTGy2RbAHfQhzSdpJwnBDZdU+l0wMytJJpgYOPK8=)
                          2: UPRGjZp7r-Trx1VtxCWb4_GYSXQ.roa (hash: zTMCntn9K7TnO5RQp+jUm5Q2J8lZDYuJ8diNFgjPr6A=)
                          3: _BGpGzmDIm7YEve92BwjZ_sIyZA.roa (hash: PE+GVyKpzzR5kCksI0o08q10NkHGpfOiIfsmFswX9+0=)
                          4: lVv-L4FsgMAxeCwUBS2D7vNfjzM.roa (hash: x5qnzZUlpsCUUFFyW/b6XwWTDuJZbv4rZIvu0WWTimo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:f4:64:d3:6e:18:97:9d:a8:d9:f3:69:01:40:04:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
        Validity
            Not Before: Nov 21 23:00:14 2024 GMT
            Not After : Nov 22 23:00:14 2024 GMT
        Subject: CN=d17377cf0c3417e526a153d1f99310dd95b2b08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:7c:5b:8d:c9:52:6e:08:cf:c3:cd:7e:ec:
                    37:2f:bd:1f:b8:82:14:11:87:19:41:dc:e7:21:5e:
                    f8:d8:1a:fd:b8:36:67:4d:f3:de:17:68:08:07:c5:
                    32:70:73:ab:f0:ab:3c:9a:82:2e:a2:86:13:3f:01:
                    78:66:32:0b:dd:16:90:40:37:8c:3c:57:29:a7:7b:
                    f1:b7:45:52:eb:c5:b4:37:1f:dc:f7:52:01:ce:eb:
                    40:db:02:ee:5a:e1:76:5f:ba:0e:ff:09:61:ba:1a:
                    ed:3f:16:e4:4f:18:54:13:ba:61:5e:bb:77:40:2d:
                    c2:f8:de:91:57:64:9f:85:f0:4f:e4:e4:47:9f:95:
                    4f:96:74:93:8b:91:7a:42:2b:13:6b:b1:c3:72:80:
                    e1:9d:37:81:56:57:34:d8:d9:9f:08:47:5b:69:b3:
                    25:d2:65:0c:6f:a6:6b:06:e9:e5:51:24:d5:5b:77:
                    59:0d:05:ea:1a:87:66:69:14:a7:29:6b:1a:fd:17:
                    c6:13:14:fa:fa:de:7e:ae:73:9a:72:2a:25:96:11:
                    e5:51:53:5e:fe:d7:2e:86:25:34:af:e6:18:3d:f1:
                    23:32:e0:3e:ae:f1:ed:cb:f1:87:6e:ef:da:76:8f:
                    8c:23:c8:3c:20:64:31:4d:98:c8:3a:63:fc:92:bf:
                    06:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:73:77:CF:0C:34:17:E5:26:A1:53:D1:F9:93:10:DD:95:B2:B0:8D
            X509v3 Authority Key Identifier:
                keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6f:27:b0:3e:23:21:88:d3:15:1a:6f:b7:cb:5c:b8:d6:01:
         6b:3f:3a:3d:8f:ba:1e:79:8b:c1:d8:fc:ed:40:d8:6d:ab:35:
         97:b8:6f:e8:d0:cd:8d:87:c6:5d:3f:6d:e8:30:ef:8e:aa:5e:
         a2:5a:79:27:8f:10:a7:a2:c8:ea:ba:8d:05:74:fa:23:4d:47:
         25:bb:0c:d3:54:70:53:d6:09:c9:50:44:05:a7:48:06:1d:81:
         b2:66:ee:1b:8e:70:97:bd:c8:08:02:31:87:33:13:be:fd:b3:
         1b:c3:95:95:0a:49:96:89:bd:de:3c:65:2a:87:7a:05:e6:87:
         89:b3:dd:62:80:df:ff:21:93:2e:fb:cd:9e:31:38:5a:a4:04:
         87:25:7d:77:5f:41:e1:c1:32:14:d0:49:61:15:fb:c3:39:6d:
         82:e3:49:ec:20:42:ee:a0:4a:fe:7e:6b:a8:2a:20:1b:c9:ec:
         7c:65:fe:0d:c7:10:06:c2:66:28:92:0d:e8:80:62:ca:05:10:
         9e:bf:8f:f1:2f:ce:cf:13:4c:52:f6:38:d0:0e:b5:f0:58:d0:
         38:19:a1:0c:38:3b:dd:a3:cb:a1:16:2f:ab:11:55:45:2f:48:
         12:6c:d9:ba:33:6b:e6:6e:23:bf:91:60:86:77:7d:3b:f2:2c:
         38:1c:c7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:31:34 2024 by rpki-client on console-fra.rpki-client.org