Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
File:                     UWGN8AbVSNHYftZBlVBmLbb8BgY.mft (raw, json)
Hash identifier:          lNL+r57jbhzOJC9sOK2nALDAFDy5fmlU3EP8A/GJkDE=
Subject key identifier:   15:3E:EB:AC:67:5E:C9:92:4B:3A:EB:72:CF:85:C1:4A:07:39:E0:AB
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Certificate issuer:       /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial:       01938B895601243666CC989424F1ABE51121
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
Manifest number:          1391
Signing time:             Tue 03 Dec 2024 08:00:53 +0000
Manifest this update:     Tue 03 Dec 2024 08:00:53 +0000
Manifest next update:     Wed 04 Dec 2024 08:00:53 +0000
Files and hashes:         1: Dkg_NuS3Gkj0fSCiyleMwbgOp7M.roa (hash: KhksMPJgygDdX9Lp9SVvkhu18/68wlAs/oxbEMJX1ro=)
                          2: LagfjgwyepZCmfKz7ICNNvxuEqs.roa (hash: Zj7rCxFnwTlSHgQNtCXMwgTD1CmSeTRb6bYx/oR25Ik=)
                          3: OtGz8FF5HQo6qokq7gQ41XKWX_4.roa (hash: 16BslYUwCyJixPVjTFka0p31iYJ63yAY4nrWI21h6NY=)
                          4: UWGN8AbVSNHYftZBlVBmLbb8BgY.crl (hash: Z0V8cSicA4uS2dwaRAaJW/qRkYCTlY4NRuALb4PYAXk=)
                          5: iB6BOtRxqmNSbPKP2m0u4BXkSHQ.roa (hash: F5EFoHRK5hrjejLFZqxEoxwj2xHQOI2Ex8G+Q+QWnOM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 08:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:89:56:01:24:36:66:cc:98:94:24:f1:ab:e5:11:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
        Validity
            Not Before: Dec  3 08:00:53 2024 GMT
            Not After : Dec  4 08:00:53 2024 GMT
        Subject: CN=153eebac675ec9924b3aeb72cf85c14a0739e0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:6d:6b:11:1a:8e:75:9c:e8:f3:a2:6f:c4:
                    89:1c:4f:d6:fe:6e:e4:11:61:ad:7f:17:56:5b:c9:
                    04:26:c0:a5:18:c2:f1:63:45:22:c1:21:96:83:7c:
                    7a:00:69:9c:3b:d8:0f:52:06:bb:6b:bc:35:45:0f:
                    b1:98:0c:19:74:37:42:aa:a6:6b:4a:c9:69:81:4a:
                    4f:9d:f7:3b:ca:83:46:86:85:81:70:d6:93:c1:e4:
                    0c:b9:67:c8:dd:c5:e6:2d:39:ce:00:60:6c:42:69:
                    df:90:fd:00:10:2a:d9:9c:75:ac:b9:52:d8:b0:7c:
                    8e:ca:cc:58:97:f8:15:47:58:4d:9e:71:67:44:04:
                    03:f5:2a:04:7a:7a:af:8c:4d:c8:8b:17:d0:6c:9c:
                    67:ca:ad:41:09:59:f5:db:5c:51:4f:20:eb:fe:51:
                    d4:09:85:ab:2e:33:22:ac:b9:06:a1:1f:27:bc:0e:
                    69:c6:bd:5d:db:c2:a1:56:40:89:43:16:0e:a3:69:
                    ca:48:94:87:bd:ac:f5:3d:b9:80:a8:85:95:61:f8:
                    5a:28:65:15:23:49:97:84:dd:45:a9:6d:20:ef:c7:
                    04:40:6b:35:10:67:9a:1b:ed:5a:0c:11:65:ca:51:
                    17:e4:64:51:d3:98:d4:62:50:21:7f:f5:af:78:e1:
                    ed:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3E:EB:AC:67:5E:C9:92:4B:3A:EB:72:CF:85:C1:4A:07:39:E0:AB
            X509v3 Authority Key Identifier:
                keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:90:eb:1e:db:f9:ff:92:9d:e9:17:38:e1:4c:93:30:e0:29:
         a1:55:e5:50:82:e6:c6:5b:cb:11:4b:7e:f6:e1:5f:13:ed:9f:
         66:e8:5e:9e:94:04:62:b9:5b:5b:06:44:66:70:35:31:59:10:
         6e:dc:9e:90:83:df:98:27:e5:a3:ba:ce:00:99:55:26:85:4e:
         f0:87:87:0d:00:59:bf:5b:95:5d:e7:8f:11:b4:88:78:fe:1f:
         5e:6f:24:e1:44:5f:8e:ef:ea:ad:e5:47:1f:45:da:c7:fd:6f:
         35:db:e3:e5:43:5d:54:0a:5a:51:3d:31:a3:cd:bd:22:5a:46:
         11:4b:16:ed:1b:eb:ef:72:bb:47:38:de:fb:73:0c:77:f9:e0:
         a5:86:a8:97:99:33:8f:26:b3:09:36:1f:41:71:3d:7b:a6:b4:
         c9:ef:21:03:3a:dd:b4:77:33:c6:a9:c4:36:e3:c9:01:47:3d:
         75:bf:9d:3c:9c:6d:ae:85:6e:6e:56:04:44:79:21:de:36:05:
         75:d7:16:c0:07:4f:8f:d6:d6:1d:b6:52:ac:dd:e0:a3:e6:68:
         eb:f9:c8:4e:db:72:3a:9b:6a:3e:81:91:5e:0e:a2:a5:9e:90:
         a3:8e:72:8b:3a:22:ac:84:43:b2:b1:84:83:be:ef:b5:c7:f2:
         db:a0:f2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:33:06 2024 by rpki-client on console-ams.rpki-client.org