Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
File:                     uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft (raw, json)
Hash identifier:          oSUcb73mlow5QSJYAcs4AKx1keGhh952M2ya71+nOVI=
Subject key identifier:   73:18:0F:CB:58:A2:FC:11:46:ED:7E:00:08:0A:F3:61:22:87:6B:F1
Authority key identifier: B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44
Certificate issuer:       /CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
Certificate serial:       0193568AB5360A65D86D3EC8A2660C440FC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
Manifest number:          02CC
Signing time:             Sat 23 Nov 2024 01:02:31 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:31 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:31 +0000
Files and hashes:         1: U3BjNRSp7b_kWot0GIRWjwWBzSg.roa (hash: KVJnOCNVRE+dG6rE/DqPqZH+mLpDk6aX/eyn1xauf1k=)
                          2: uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl (hash: JQYF0OfJ/EmwStAmgWsDCK0Hv2/CCjQ8EAbM8Gpz8xs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:b5:36:0a:65:d8:6d:3e:c8:a2:66:0c:44:0f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
        Validity
            Not Before: Nov 23 01:02:31 2024 GMT
            Not After : Nov 24 01:02:31 2024 GMT
        Subject: CN=73180fcb58a2fc1146ed7e00080af36122876bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:02:5b:96:58:1a:46:f7:3d:0c:e5:5b:08:43:
                    eb:46:76:cb:cd:30:92:57:38:02:83:46:39:57:55:
                    63:32:66:d0:ea:c6:41:0a:44:66:63:ba:7a:b4:ed:
                    e6:79:30:e1:70:de:84:ad:95:a9:6a:f2:9b:1f:6c:
                    1e:cf:83:e3:51:53:36:db:8e:46:b9:e8:94:a9:90:
                    62:08:2c:72:a5:12:47:50:0e:ef:c3:7b:80:cf:09:
                    e8:0f:68:b8:d9:63:da:2c:45:bd:e9:8e:1e:a8:f2:
                    ef:d3:26:2e:9f:cd:05:03:a3:79:e4:22:66:2a:a8:
                    54:91:9c:c5:d9:37:86:82:22:90:24:23:98:c2:38:
                    a2:32:2d:cc:27:d4:45:d4:d7:70:8a:a8:81:43:52:
                    47:41:fa:22:02:cb:b9:34:78:15:6e:1f:dd:fb:94:
                    3c:e4:fc:fd:05:bb:44:b1:04:1a:04:97:ff:2a:e6:
                    dc:22:ca:b6:99:64:19:a3:93:07:15:36:69:a7:ec:
                    24:01:3c:48:0c:c7:04:85:3c:b5:96:c2:a1:7f:79:
                    f0:6e:1c:65:bf:87:4c:78:89:4b:08:96:56:80:ef:
                    c8:af:34:97:f2:63:14:91:a8:be:d3:26:fd:f2:1a:
                    79:b0:39:ec:14:0b:10:18:11:1f:eb:63:8e:c9:a8:
                    0e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:18:0F:CB:58:A2:FC:11:46:ED:7E:00:08:0A:F3:61:22:87:6B:F1
            X509v3 Authority Key Identifier:
                keyid:B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c3:c3:ac:7f:bb:04:96:77:38:6c:73:56:4b:f2:e2:a6:29:
         ce:cd:55:ce:88:a2:a2:df:73:22:f7:65:38:ac:de:1c:9c:ae:
         f7:6a:66:90:9a:84:e2:ed:81:de:61:39:26:9f:0b:80:75:08:
         71:0f:43:e0:b4:24:58:73:be:a5:3e:12:5d:1f:47:f7:2e:ec:
         65:27:83:05:cf:5c:39:66:2c:1b:86:6a:2f:b1:df:39:f0:70:
         3a:36:bb:41:0d:43:e0:14:d1:fc:fc:38:b7:ca:2b:50:14:df:
         64:93:33:a1:b8:1a:3e:00:09:1f:12:20:7a:4b:40:6f:82:e0:
         64:73:9e:61:a9:51:10:cc:3c:7d:d4:d9:8d:14:9f:d1:1d:4b:
         30:39:3c:c3:ea:f5:9d:a7:6e:3c:dc:48:d5:09:cb:99:15:e4:
         27:f6:17:1d:98:dc:93:f6:2f:8f:7e:fe:a4:26:b7:25:30:12:
         a4:8e:86:34:ff:3b:3f:d6:a3:33:fe:55:19:29:c5:8a:2f:41:
         4f:d9:ac:3b:6f:2a:50:e2:ee:e7:ec:9b:d6:ad:65:f1:c6:04:
         a3:b3:f1:b4:40:ca:c1:07:e2:f8:12:19:24:2f:f3:07:3b:0f:
         d5:52:6f:bb:af:5c:d5:1b:e2:e2:85:fd:9d:e4:75:f8:af:bf:
         51:e9:c9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:30 2024 by rpki-client on console-fra.rpki-client.org