Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
File:                     UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft (raw, json)
Hash identifier:          hNNOp1iF70OMfntdB89v181C3m6PyUYBsz00SgNGb7s=
Subject key identifier:   21:52:49:02:B1:1A:5A:33:2E:F9:3E:8C:15:4D:84:47:F3:EF:C3:0D
Authority key identifier: 51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E
Certificate issuer:       /CN=5140b5cb5986084126f68d6032316d3b1b57696e
Certificate serial:       019369D9B87726833A1B674C45488ACA449F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
Manifest number:          1380
Signing time:             Tue 26 Nov 2024 19:01:36 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:36 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:36 +0000
Files and hashes:         1: 94cfjsncEYMro-gpPSWrT6jEKy8.roa (hash: H5m3RmJwOJ0El5psvPJoG6FCZeHDE9GQ2TwkZQz7RWU=)
                          2: UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl (hash: 0zgCRCgXt3tm3WOX7thORKqwBnC4SgyowVbXGfjMKoY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:b8:77:26:83:3a:1b:67:4c:45:48:8a:ca:44:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5140b5cb5986084126f68d6032316d3b1b57696e
        Validity
            Not Before: Nov 26 19:01:36 2024 GMT
            Not After : Nov 27 19:01:36 2024 GMT
        Subject: CN=21524902b11a5a332ef93e8c154d8447f3efc30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fe:64:87:f1:db:e0:3e:6b:1f:5b:5f:fe:f7:
                    de:a2:34:9d:a7:08:fc:68:76:34:23:90:9c:80:7d:
                    bc:8b:c8:59:be:8a:c2:a1:6a:af:a1:d5:8a:59:ef:
                    7d:46:4c:35:61:66:dc:e5:34:e7:b8:79:27:cf:79:
                    8a:87:62:3f:85:c1:be:27:33:8c:52:ea:c3:2b:d1:
                    16:f0:55:2d:1d:fd:f7:47:7b:b8:e8:fa:93:cc:48:
                    cf:24:9d:fe:a1:31:03:49:2b:bb:23:84:04:f7:19:
                    d3:7d:ea:1c:ba:ac:77:fd:45:cd:58:05:60:1a:f9:
                    eb:86:66:16:fc:38:25:9a:7f:20:62:3f:72:15:00:
                    35:61:32:04:2d:92:4d:84:83:39:f6:44:39:49:26:
                    3e:f6:ec:0c:2c:fa:5c:3c:db:43:da:e0:a1:cd:9a:
                    84:0f:f2:bb:e1:8f:81:c8:3b:bc:c7:48:74:be:3d:
                    6b:25:51:d2:27:ee:d0:27:92:a7:82:73:8d:bc:02:
                    d1:53:3e:45:9a:17:55:2e:f0:3c:42:3b:64:6a:ce:
                    18:a1:de:46:52:6b:04:08:82:cf:4e:bf:da:96:9c:
                    bb:59:f9:80:9e:25:af:d8:ab:04:e9:97:9d:53:20:
                    f6:00:3b:2e:19:a4:d3:d7:52:dc:c2:11:22:d0:03:
                    b8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:52:49:02:B1:1A:5A:33:2E:F9:3E:8C:15:4D:84:47:F3:EF:C3:0D
            X509v3 Authority Key Identifier:
                keyid:51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:35:a6:90:6a:5c:e7:97:46:95:b9:45:b4:11:8c:ed:75:42:
         ca:a2:d9:a6:71:27:53:48:53:2f:a8:c6:b9:b5:87:3c:14:1d:
         99:e7:43:be:1d:61:ca:1b:20:fd:6c:5e:dc:d1:a2:1c:6b:33:
         de:60:2e:f7:ed:b5:10:fb:80:9a:db:3a:7d:c4:e6:d5:c0:76:
         17:ce:82:89:86:77:ce:70:58:af:0e:cb:3e:dc:8f:dc:84:97:
         12:50:ee:4b:56:30:73:26:f6:1a:7c:6b:ba:86:84:40:55:d2:
         29:4b:f5:4b:a8:8a:4b:ef:e7:5c:47:f6:ac:50:07:ea:ef:a1:
         4b:e9:4f:5d:32:a5:1d:05:5a:67:3d:73:03:dc:41:1d:ac:9d:
         49:10:e2:0e:0c:ce:fd:fd:f9:f6:8c:e6:06:33:20:a3:8f:a6:
         65:3d:5a:7b:22:b5:d1:c2:73:66:46:70:47:5d:d4:74:21:7c:
         10:21:65:b1:56:c3:f9:c5:1c:25:9d:69:f9:1f:87:3b:b4:5e:
         37:a9:d5:26:27:75:ad:5d:7b:95:11:c7:74:35:c8:9e:59:09:
         52:4e:42:b7:46:b7:a9:0a:ca:cf:5a:3b:fa:09:9a:17:c5:76:
         d1:93:54:c5:ea:f0:03:70:b0:35:c7:cd:d1:9d:6a:33:71:cb:
         ec:21:4f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:32 2024 by rpki-client on console-ams.rpki-client.org