Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
File:                     uTYoo2ME473CH4U7s_rUPkhhpcU.mft (raw, json)
Hash identifier:          nfSUK5RLVu3+K78eUxSJZXQYiKQbW0Yf6JjRxZMXeoI=
Subject key identifier:   A4:16:9B:CE:4F:D5:EC:78:8D:89:B3:C5:D2:FA:C8:59:49:49:CD:35
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Certificate issuer:       /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial:       01936B222CA7950CE575A3EE5E0B5EE383E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
Manifest number:          06F0
Signing time:             Wed 27 Nov 2024 01:00:21 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:21 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:21 +0000
Files and hashes:         1: PgIyGFUqN3u5cPT2ixbaKvZIFjo.roa (hash: 6q6Xl2C6F5i7bViRHMadZyP1G/8DAfGxobFvva/KrC0=)
                          2: uTYoo2ME473CH4U7s_rUPkhhpcU.crl (hash: Ej1opLVzhV8cwZ7nIBsWfcqUJ0X3FehOlRxam8/yRHg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:2c:a7:95:0c:e5:75:a3:ee:5e:0b:5e:e3:83:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
        Validity
            Not Before: Nov 27 01:00:21 2024 GMT
            Not After : Nov 28 01:00:21 2024 GMT
        Subject: CN=a4169bce4fd5ec788d89b3c5d2fac8594949cd35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:1a:09:af:56:49:67:8e:d9:9a:16:f5:9f:
                    8a:01:db:81:8c:44:a1:ae:5c:d1:be:24:d7:6e:bd:
                    52:b9:d6:30:80:ac:4f:53:8c:50:73:31:b2:fc:90:
                    92:61:1d:7f:ba:21:d9:20:ec:c5:54:a0:31:a0:58:
                    80:1b:c4:5a:82:62:96:ef:f4:17:28:6d:fe:0d:5e:
                    70:a3:08:51:f5:28:3f:df:6c:bf:42:28:db:9d:bb:
                    79:c1:dc:7f:f4:1e:9c:d4:21:f6:88:f6:c0:48:92:
                    9a:de:04:69:a9:41:5d:72:a2:07:b2:67:61:35:04:
                    c5:9f:c1:15:4b:a2:0e:2c:06:23:5c:5e:e6:58:19:
                    06:9c:ec:c8:60:d9:3e:19:ea:35:98:90:b1:58:66:
                    d9:ef:2c:24:da:ed:0f:1f:e8:a4:fb:a0:53:38:5c:
                    3f:61:a3:d5:e9:01:bd:8a:6f:c6:86:72:5e:2b:34:
                    83:7a:0c:90:b1:c8:1e:1b:ee:a7:0f:04:a4:bc:8a:
                    59:0f:03:d1:a6:a7:bf:c1:a8:4e:5a:1a:07:3d:51:
                    ea:23:c5:b4:2a:00:84:4a:e5:1f:09:01:1a:63:50:
                    aa:8e:8e:90:96:bf:7e:3c:21:a8:ed:e2:09:99:84:
                    09:62:6b:40:4e:95:d9:73:e6:91:79:25:cb:77:32:
                    a0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:16:9B:CE:4F:D5:EC:78:8D:89:B3:C5:D2:FA:C8:59:49:49:CD:35
            X509v3 Authority Key Identifier:
                keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2a:6c:07:87:41:ae:f0:d4:fb:85:e5:6f:32:12:61:4f:9a:
         6b:05:d9:f7:57:45:08:ce:a9:f6:11:03:5f:23:fb:83:66:1c:
         28:40:b7:08:f1:06:58:2e:16:7d:65:2d:10:4d:32:26:be:ef:
         3c:dd:06:2e:92:f9:4f:85:33:87:29:92:4f:ef:01:49:29:5d:
         48:4b:4a:6d:f2:a9:90:61:85:12:0f:86:df:b3:98:7c:c4:16:
         c6:7a:89:2d:86:57:b4:3f:d2:07:84:60:07:75:d8:40:69:51:
         05:f9:e0:aa:4f:8c:e2:cf:83:9d:84:ae:3d:4a:95:15:a9:d4:
         bb:91:89:a2:1b:f0:4d:ae:67:eb:62:9d:74:1d:e2:91:2f:d6:
         5b:18:ef:bc:b4:2b:f9:65:bd:b1:1a:76:49:ad:4e:e6:8c:40:
         bd:32:23:c8:74:98:b4:7a:f2:f3:a1:f3:4b:39:b5:a4:76:89:
         62:db:45:5f:c9:b9:e0:c2:b6:ba:6a:ab:46:2d:25:1f:b6:10:
         17:aa:5b:58:69:9c:92:c4:78:e8:08:49:64:6b:b2:39:38:ec:
         23:f7:42:eb:48:ac:07:47:31:0a:7d:76:1c:f1:d3:c5:91:a6:
         d4:c1:6a:a1:8a:7b:bf:95:b8:8c:6d:89:51:c6:46:9c:b7:a1:
         80:20:d0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:49:03 2024 by rpki-client on console-fra.rpki-client.org