Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
File:                     ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft (raw, json)
Hash identifier:          bGgVUvs2a2XtpgHmM0TAKqS/embcbvRFdkNEFjJuyGU=
Subject key identifier:   9D:03:C1:4F:B3:63:90:3C:76:EF:61:4B:00:5A:82:F5:54:B0:E3:ED
Authority key identifier: B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97
Certificate issuer:       /CN=b9e273c8ba0b0afb205d00b3170e69b816743397
Certificate serial:       01935689E26DD3E9F14F385EB9EE7D53FDF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
Manifest number:          105D
Signing time:             Sat 23 Nov 2024 01:01:37 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:37 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:37 +0000
Files and hashes:         1: Qhr9yxPRQxlKYDLQ7R1De7w83HI.roa (hash: DidXDEqxqcsPVP6QuXn1cIWDDkhP0+mi6RjKxxpS1IY=)
                          2: ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl (hash: GuegT8bmyWSBitoDJQoulAcXrEBpV8aP5/s9Lx0T0is=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:e2:6d:d3:e9:f1:4f:38:5e:b9:ee:7d:53:fd:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e273c8ba0b0afb205d00b3170e69b816743397
        Validity
            Not Before: Nov 23 01:01:37 2024 GMT
            Not After : Nov 24 01:01:37 2024 GMT
        Subject: CN=9d03c14fb363903c76ef614b005a82f554b0e3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:de:a9:1d:cb:d8:45:76:70:4c:bf:bf:c6:
                    6c:41:8b:72:ca:08:ec:20:a2:25:24:3f:9e:4e:7e:
                    40:82:00:65:2d:01:0d:1a:42:56:d7:bb:9f:16:ec:
                    32:20:ea:57:66:33:d8:3a:9f:90:4d:5a:d6:b0:96:
                    42:66:a6:31:88:e8:de:24:b0:d0:c8:34:6b:43:4b:
                    dc:b7:ad:fb:e2:7d:41:7d:54:79:fa:ea:83:1f:88:
                    93:b0:8b:61:48:7d:0e:77:01:64:87:66:dc:10:2e:
                    c8:50:9c:10:a2:44:23:63:e4:5d:c5:92:36:82:bc:
                    b3:69:90:40:ef:31:b1:b2:f5:a4:24:8a:94:ad:cc:
                    29:85:15:61:db:d8:4f:d6:59:3b:f3:54:65:e0:63:
                    d1:9a:a9:b9:6c:56:9c:40:d4:9e:69:b1:68:7c:80:
                    a7:54:a8:76:bc:e6:86:3e:05:f9:ad:5f:4b:e9:f5:
                    bc:8b:18:9d:67:5c:73:f2:9f:12:4f:df:ed:a6:ff:
                    d0:0a:90:9b:a0:ce:5c:97:55:28:f7:f8:b6:41:99:
                    88:9d:2e:a4:b7:ee:8a:3b:64:bd:9b:19:64:11:28:
                    33:7b:01:c0:1f:37:83:03:c2:6e:b6:37:04:72:79:
                    8a:7b:23:e2:24:fc:64:c1:af:77:14:d9:0a:a1:90:
                    99:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:03:C1:4F:B3:63:90:3C:76:EF:61:4B:00:5A:82:F5:54:B0:E3:ED
            X509v3 Authority Key Identifier:
                keyid:B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:dc:25:d8:d7:3b:85:ed:a5:29:a8:ce:54:c1:9c:fd:39:be:
         f2:36:89:1a:80:50:9f:a5:07:c0:10:94:b6:01:b8:8e:ac:0a:
         cd:22:7e:12:e2:67:16:fc:57:66:19:1e:1f:24:af:3e:8c:16:
         81:34:fd:90:f2:f8:00:05:53:4c:fe:38:ea:0a:6b:ec:a1:42:
         58:4a:b8:fb:b0:1d:14:cc:5a:30:fa:d4:82:58:f1:00:2b:f9:
         ef:e7:fe:86:c5:c7:1f:c1:de:c8:b8:fb:bd:8e:17:25:3f:29:
         ac:84:7b:5c:cf:df:a2:c6:02:67:e3:ff:b0:ea:a7:e0:fd:3e:
         f5:b8:89:1f:24:77:ce:99:b0:4f:2a:b5:bd:11:28:d9:9f:f7:
         d0:d4:f2:71:ba:3e:72:23:65:ef:c3:1f:19:97:b0:a4:dd:b7:
         00:2e:f1:4c:83:3d:59:b7:37:75:28:5b:ad:9e:d0:ce:bf:e5:
         fe:24:81:a6:4c:5c:ff:25:55:19:2e:32:4b:ac:78:85:b4:c4:
         d7:f0:fa:b8:3f:4e:85:a9:a7:0d:03:31:f4:ab:4e:d3:6c:e5:
         4c:3b:b4:c9:97:88:29:5f:02:fc:c9:d7:18:4f:ac:76:51:eb:
         61:c4:00:ca:35:7b:ff:67:41:4e:f7:8d:37:8e:7f:bd:b2:75:
         38:6d:c4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:02 2024 by rpki-client on console-ams.rpki-client.org