Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
File:                     Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft (raw, json)
Hash identifier:          f2VDYnRbl7K8mP1Kc4CsHTuHntYh8Wgmc6DVDsGHA+A=
Subject key identifier:   D5:C4:DD:E1:2F:87:48:6C:3D:A8:59:0D:A0:D2:C0:23:6C:AC:F7:30
Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
Certificate issuer:       /CN=531f247d4bc70214606d07d659319ec3f3479706
Certificate serial:       0193535100137A539729E6F3B1B3C9FEFA38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 10:00:37 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:37 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:37 +0000
Files and hashes:         1: Fe-_sT07oH0DI0cqrvDrNj_3RLc.roa (hash: u2w2gRNI0xfHoIqeh3NdHoDSYl1y47RJDS9APwxrMZ0=)
                          2: Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl (hash: KvCzoo/cW1sk0s1LwZcIoUL7itiQ2zKj2cgbPvkNGwg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:51:00:13:7a:53:97:29:e6:f3:b1:b3:c9:fe:fa:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706
        Validity
            Not Before: Nov 22 10:00:37 2024 GMT
            Not After : Nov 23 10:00:37 2024 GMT
        Subject: CN=d5c4dde12f87486c3da8590da0d2c0236cacf730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:86:1c:8c:59:4d:c9:42:a0:7b:05:48:f4:
                    fe:c3:57:23:65:42:a0:85:b9:ee:a7:78:67:74:b5:
                    27:a0:30:35:ff:56:ec:b9:a9:be:19:28:ab:16:b0:
                    05:48:ca:a8:27:ed:6b:bb:87:b2:71:b1:58:78:a5:
                    7a:f6:85:4d:26:59:0a:09:c1:cc:76:67:c3:a4:19:
                    cb:db:cd:08:b3:2e:4d:57:18:ed:79:93:d0:0d:0d:
                    cf:28:b4:41:53:97:c8:de:e9:0e:b2:cc:c0:24:4a:
                    55:e4:ee:b1:fa:63:fc:3e:63:00:f5:99:29:50:92:
                    09:c3:77:d5:54:92:26:d5:9f:03:ce:e8:bb:59:0d:
                    19:dd:81:26:ff:b9:41:48:72:5c:e5:23:c6:31:bf:
                    de:a4:b1:9c:06:b1:32:59:e3:56:b7:45:eb:33:71:
                    34:84:af:cb:73:07:16:91:49:8e:bc:37:8c:7d:0d:
                    bb:06:34:8b:7b:23:7d:c3:21:a0:9b:da:89:d9:33:
                    68:8e:05:b3:40:c1:a9:00:15:42:0e:31:dd:3b:bd:
                    50:ff:35:64:04:01:df:b2:b8:ac:8c:72:46:e1:5c:
                    11:d0:70:71:7d:d7:3b:6d:f3:bf:11:08:2f:7e:f1:
                    56:ee:a7:c3:7e:c4:5f:19:1a:d5:05:12:53:17:4c:
                    f9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C4:DD:E1:2F:87:48:6C:3D:A8:59:0D:A0:D2:C0:23:6C:AC:F7:30
            X509v3 Authority Key Identifier:
                keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:90:61:90:63:80:19:d3:43:23:ba:7f:13:7a:86:e8:cd:73:
         20:0b:f2:f7:d7:79:a8:c0:1a:b2:67:ba:d1:a9:6f:3d:5f:55:
         e6:06:c9:01:cc:e6:fc:a5:69:1f:0e:c7:39:ed:90:3c:ac:d3:
         91:71:87:df:61:66:e9:a9:c6:ec:74:f9:56:9f:e2:c7:d8:ad:
         b3:cc:27:fe:ae:ee:c1:7f:97:ea:b0:ee:17:4c:35:35:a5:ce:
         0a:3b:e1:c3:16:cb:2c:14:95:39:d6:20:9f:d7:61:72:5d:c9:
         3f:12:46:bd:10:0b:5f:1d:7f:21:46:b1:29:b6:28:76:1d:34:
         b1:03:b1:55:29:a1:d6:f5:4a:b3:05:97:a8:2f:4b:c1:50:a1:
         02:84:fa:f7:fc:2f:9d:0e:a6:21:34:99:23:30:b7:85:01:da:
         98:dc:95:f5:44:e7:47:fa:6f:e5:b7:87:fa:33:cd:e3:74:02:
         a0:ed:69:89:01:36:2a:9b:d7:fd:19:c4:5e:d8:26:78:5e:7a:
         42:a5:e9:aa:d4:6a:1b:6f:84:3c:de:bc:11:fc:49:2e:52:ff:
         dd:6c:9b:b4:0f:6d:23:c9:d7:25:ba:a8:cf:14:0b:05:e1:a9:
         55:e8:bd:b7:6a:c0:72:a9:6f:1f:95:22:b0:4d:bc:95:cb:66:
         ff:fc:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:45:56 2024 by rpki-client on console-fra.rpki-client.org