Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
File:                     uNJRxL_VJtoGLUzir1a25G6SURc.mft (raw, json)
Hash identifier:          lQzHWv1eUYEKvKeV3Gn7aV4RIqK1QrHCKP+08jUXwVw=
Subject key identifier:   F0:96:33:5D:58:3D:7F:B6:D7:78:D3:88:DC:66:57:DC:51:98:0E:4A
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Certificate issuer:       /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial:       019351D0484B2EE2BC7A91013BAD39B521F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 03:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:24 +0000
Files and hashes:         1: 2B_1g_OKbYC4rH7yh_nmXu9-Np4.roa (hash: jRmudV35iXS7u+QLYHxaStVUT/8rSgW+tGQm269CQiU=)
                          2: KpOrQyrZ9e-dFElidWd2sFeLIGQ.roa (hash: T2DbKuWPhPJAOmBJM0KoKN5Yt5qv20DKMC3t7NGbVI4=)
                          3: Yc36-tpgWIx3ErpaWflPmoCjrdo.roa (hash: 83TISA5agrnDpTYhItJVqDHNq0EnMTIbvGPkGCpfuQQ=)
                          4: j3zdRvhYtHlZWJgeKwuTzi0QxUo.roa (hash: gJVgWJu+5WrnZnO7c/srjqqS1kejydFZewi90QP//Gc=)
                          5: uNJRxL_VJtoGLUzir1a25G6SURc.crl (hash: D059/1nB5dBN50U36LVbRaJzb+4BuNYbMo7Yxckl2T8=)
                          6: wl2DfVzzQ5xRy-5N1yM5kvgypco.roa (hash: UoTSTqR/Xa7RbVUV7HsDrRCogTWRdt/FiES9SJocXWU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:48:4b:2e:e2:bc:7a:91:01:3b:ad:39:b5:21:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
        Validity
            Not Before: Nov 22 03:00:24 2024 GMT
            Not After : Nov 23 03:00:24 2024 GMT
        Subject: CN=f096335d583d7fb6d778d388dc6657dc51980e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:48:7f:0b:a1:7e:a6:93:26:8a:7c:24:78:d2:
                    47:56:08:56:59:4b:0d:9f:23:c9:23:c3:29:35:ea:
                    a5:17:b0:9d:69:b6:46:05:98:82:c1:21:b3:48:19:
                    1a:51:5f:5a:38:f5:e0:d1:9f:68:e4:f7:43:c8:bc:
                    6d:81:de:61:bd:8f:0e:af:68:fa:04:04:e7:8b:01:
                    4d:ec:32:dc:0d:be:d3:59:93:29:26:0d:ea:f7:0b:
                    da:9b:eb:79:79:d2:de:60:98:77:3f:61:bc:a1:ce:
                    67:49:c6:c7:45:f0:5b:98:29:0d:90:e7:f0:cf:73:
                    4f:7b:c7:21:94:91:c2:44:97:4d:2e:58:12:79:18:
                    da:56:c3:22:1f:5e:f3:3c:b5:56:3f:03:51:ed:ff:
                    1f:91:7f:1f:34:5f:20:65:34:e0:66:49:fb:5c:a3:
                    07:01:1d:22:43:7a:3f:9e:d4:df:d6:9d:e1:1c:7d:
                    7c:51:0f:d1:c2:f3:d5:5f:cc:ba:29:cd:fa:af:f0:
                    a4:be:99:4c:cc:ed:ce:6d:25:3f:a0:0d:b2:7c:68:
                    20:b1:67:d1:d0:8f:15:c2:0d:16:c5:fa:86:c3:92:
                    f9:b6:86:7d:84:9d:d3:38:63:0a:fd:ee:12:f2:a1:
                    b6:25:21:bf:ee:7f:bd:a4:c1:ee:7c:df:e6:67:62:
                    a3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:96:33:5D:58:3D:7F:B6:D7:78:D3:88:DC:66:57:DC:51:98:0E:4A
            X509v3 Authority Key Identifier:
                keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f1:50:1c:22:ce:a5:b2:36:25:e0:8a:81:ca:f1:ce:d9:19:
         e3:ac:d0:8e:aa:78:fb:5a:75:f7:9c:ec:8a:6e:e0:6e:07:08:
         a0:14:c7:96:dd:6e:d6:6c:ec:e6:bc:1c:c8:50:d7:16:d1:a7:
         c8:b6:a8:72:d5:76:ab:e2:2d:22:ba:83:41:81:92:3c:cd:ba:
         fe:ba:92:3d:f2:c3:bf:fe:22:f1:ec:42:60:36:33:7a:c1:09:
         df:a3:32:9a:b5:75:15:45:7e:66:d9:e7:e7:ce:5c:7c:bf:3f:
         20:4b:f4:a6:43:7d:99:01:cd:bb:dc:12:e7:99:7d:f0:af:f2:
         1c:03:cd:cf:d2:14:4d:90:df:84:ea:f0:38:c6:1f:7b:f2:16:
         87:bc:1f:a5:9a:4c:bd:dd:28:42:99:49:9d:ea:63:3b:35:68:
         8a:65:21:07:6d:dd:dd:6e:6f:f8:a0:4f:e6:72:4f:06:a2:18:
         29:18:8d:be:bd:82:f9:3f:4a:81:05:bb:60:f4:25:41:ec:51:
         d9:36:85:c4:28:d8:a7:c9:2b:4b:a7:14:1c:f4:13:b9:96:d1:
         18:22:2b:11:f8:90:ca:aa:ae:bf:9c:a9:a0:da:cf:2d:f8:7e:
         b7:39:ea:03:8b:0f:b8:3e:50:6c:43:68:01:cf:6d:ab:40:5c:
         22:81:2f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:54:22 2024 by rpki-client on console-ams.rpki-client.org