Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft
File:                     ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft (raw, json)
Hash identifier:          byzxFg9BeEANAa+FssOAKvGQSjxwJrPOuLxXySw98KY=
Subject key identifier:   27:66:4A:C9:6D:36:A9:A0:E2:CF:30:E4:B2:FE:76:F8:08:EB:9C:19
Authority key identifier: 50:BB:4C:78:1A:5B:39:3F:F0:7F:B4:05:E5:28:17:9F:5A:B8:77:26
Certificate issuer:       /CN=50bb4c781a5b393ff07fb405e528179f5ab87726
Certificate serial:       019356F6C398836DD8A5AE7F4BECD34BA6AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft
Manifest number:          1303
Signing time:             Sat 23 Nov 2024 03:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:32 +0000
Files and hashes:         1: RenWDpozyC5sgcprdsahUMIb1Ls.roa (hash: 89EF/ynW0vJdiNlY4AynWQ3bC255q+znq9UgZWd2R9U=)
                          2: ULtMeBpbOT_wf7QF5SgXn1q4dyY.crl (hash: kYydgHZZeqs8iCasvrB1QONwdCtWKloMQ53JvQOyjZk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:c3:98:83:6d:d8:a5:ae:7f:4b:ec:d3:4b:a6:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50bb4c781a5b393ff07fb405e528179f5ab87726
        Validity
            Not Before: Nov 23 03:00:32 2024 GMT
            Not After : Nov 24 03:00:32 2024 GMT
        Subject: CN=27664ac96d36a9a0e2cf30e4b2fe76f808eb9c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cb:5b:31:8f:40:d5:ec:60:01:0d:52:eb:75:
                    5f:b5:78:6f:2a:36:88:9d:0a:f0:2d:0e:48:52:79:
                    02:89:d4:7f:ac:54:67:39:ee:fb:06:a8:22:09:36:
                    4b:59:08:d1:82:45:51:85:57:07:f3:40:6f:de:51:
                    4e:43:0d:60:67:c1:9b:db:21:02:97:9d:0b:0d:bb:
                    e1:4f:e0:15:d6:f5:89:d3:f4:56:0a:ee:73:18:36:
                    45:a4:ec:df:4b:b5:e8:b7:51:b0:49:a3:db:b8:80:
                    a4:ab:9c:a4:d4:aa:7b:4d:7e:aa:7f:1a:68:7e:dd:
                    29:f2:c7:4a:34:da:ee:a0:8e:2f:6f:bb:f2:53:4d:
                    5e:7a:11:57:33:e5:06:6b:94:31:74:fe:09:b2:0c:
                    b8:a6:29:0a:ab:d3:ed:b8:8c:f6:8a:b4:27:80:7e:
                    6c:db:ed:eb:67:dd:d3:2a:5e:39:5d:5c:7e:9f:6d:
                    e8:b5:e4:bf:91:e7:02:bc:26:c2:df:fb:e8:4a:35:
                    68:75:24:21:15:03:f2:c9:9b:12:1f:c8:bf:77:62:
                    91:4a:64:1e:6a:a4:8e:90:2f:10:4b:b4:59:1e:80:
                    6b:c8:e0:4c:3e:22:e0:3d:d5:4d:a9:7a:fa:e9:bd:
                    c6:e7:b3:a7:51:4b:2e:06:cd:e5:3a:50:c6:45:81:
                    ae:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:66:4A:C9:6D:36:A9:A0:E2:CF:30:E4:B2:FE:76:F8:08:EB:9C:19
            X509v3 Authority Key Identifier:
                keyid:50:BB:4C:78:1A:5B:39:3F:F0:7F:B4:05:E5:28:17:9F:5A:B8:77:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c3:f3:a8:dc:5b:d9:a3:bb:d9:3a:f2:e4:64:9e:fe:66:ab:
         e6:6e:fe:8f:c4:2d:5a:49:67:87:3b:da:6b:6d:a9:ea:54:c0:
         34:1a:f8:6d:46:87:83:5f:8a:2b:24:bf:42:44:ed:e5:04:13:
         d8:dd:1b:b6:12:e4:3b:c1:5d:3d:b6:80:ff:0e:b4:a1:2a:b9:
         59:b6:9a:0e:08:39:65:80:93:b8:9c:02:14:f7:9d:67:56:20:
         fe:fd:28:d6:f0:6b:3b:37:33:10:ea:ff:e8:80:10:87:2f:bc:
         29:e1:0d:4c:12:22:dc:c1:da:f0:b9:3e:0e:28:ef:48:56:5a:
         0f:82:96:e4:5b:09:da:59:cf:18:a7:3e:6a:45:92:6f:d4:ac:
         c6:21:8b:8d:1a:bb:ed:b4:69:e0:f9:b4:6f:d5:81:ca:b7:3f:
         eb:fa:a7:74:2c:3b:09:f9:6c:fd:5c:05:2a:09:ba:9c:4d:13:
         05:07:15:b0:9a:e4:1b:a3:47:87:72:1c:81:35:ef:3f:c9:db:
         de:5c:3b:64:6a:c2:b6:f4:e6:e0:3d:da:35:90:f0:88:a5:b5:
         fa:42:b4:c2:ce:89:7a:ce:ea:68:aa:b5:66:20:1b:cb:03:eb:
         11:79:b3:1c:e9:e8:e7:a2:78:5a:d8:c5:53:81:91:c5:cc:a2:
         dc:09:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:53 2024 by rpki-client on console-ams.rpki-client.org