Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
File:                     UhqgJHWNjRBOEXnFUDmBZjav4pg.mft (raw, json)
Hash identifier:          6hjX286pf45VaAyXBBeUBYG26k+4R8QI42f9J7WzQzA=
Subject key identifier:   27:46:15:F9:1D:8D:FC:27:32:A0:43:4B:FB:7C:60:85:D3:E0:9F:27
Authority key identifier: 52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98
Certificate issuer:       /CN=521aa024758d8d104e1179c55039816636afe298
Certificate serial:       019356894A5A27D7CF6A716C48D9AFC28B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 01:00:58 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:58 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:58 +0000
Files and hashes:         1: OObYj1MtfaUxU3Kx1PSrToHfdOs.roa (hash: xc1o0NnB8rfuCRz3Pu2CSMvYQuuHgNHu+pfsV0k5a5g=)
                          2: UhqgJHWNjRBOEXnFUDmBZjav4pg.crl (hash: rLJYMnHY0Udf6I4QVFO5sRazqQsrm1rVrpZvpoCeFew=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:4a:5a:27:d7:cf:6a:71:6c:48:d9:af:c2:8b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521aa024758d8d104e1179c55039816636afe298
        Validity
            Not Before: Nov 23 01:00:58 2024 GMT
            Not After : Nov 24 01:00:58 2024 GMT
        Subject: CN=274615f91d8dfc2732a0434bfb7c6085d3e09f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:f9:11:57:81:ee:27:a9:32:c5:c9:2c:2c:
                    18:0c:c6:80:f2:4e:8c:ce:42:83:03:16:4d:57:43:
                    d6:65:49:08:c8:aa:ed:15:81:6c:12:15:2b:df:28:
                    a2:9c:a0:01:03:64:1d:fa:86:08:f4:bd:7c:4a:fd:
                    a2:e2:48:9e:d8:c0:84:82:1a:04:ed:62:c8:d1:3e:
                    9a:b0:03:4c:a6:b2:c3:b3:6c:33:84:a3:c6:08:28:
                    30:d3:3a:0e:d6:de:74:ac:65:55:af:2a:6f:7b:cd:
                    26:36:6b:d5:63:2b:e9:22:61:7f:1a:27:a8:5f:ce:
                    73:d9:04:f8:46:02:5f:94:42:4e:5c:42:a5:d9:2b:
                    df:5e:29:40:92:7c:b8:9c:08:5d:cc:01:de:d2:38:
                    39:72:08:b2:95:e6:06:9c:2d:a5:5c:8a:1a:3b:8a:
                    69:d0:d3:fc:b8:59:cf:31:24:a0:d3:20:df:d7:d8:
                    51:c1:13:7b:d8:86:c8:9f:d9:49:63:4c:fd:a9:e6:
                    6e:19:78:bf:e4:10:c4:c9:ac:b9:a2:ff:ae:5b:9f:
                    c9:a3:27:e4:49:0a:d1:e9:e2:e9:d5:ec:2b:1b:6a:
                    22:83:49:ba:7e:3f:a7:9a:6d:85:08:e8:ea:de:05:
                    0a:13:60:1e:ee:cc:f8:44:e5:74:f6:f2:c1:9a:2c:
                    2a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:46:15:F9:1D:8D:FC:27:32:A0:43:4B:FB:7C:60:85:D3:E0:9F:27
            X509v3 Authority Key Identifier:
                keyid:52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:17:c3:0e:48:7e:fd:09:7e:0f:a6:2a:d3:3d:93:d0:ea:d0:
         5c:f6:82:c4:e9:ca:49:90:48:18:7a:c5:2d:7f:23:a8:ad:ae:
         49:ac:ce:5c:02:4e:e1:a4:71:40:61:68:b3:60:71:ff:12:bf:
         3e:45:7a:76:86:30:e4:79:19:e5:0f:dc:0c:49:90:e6:93:97:
         79:e8:27:91:63:aa:9c:95:0f:da:30:8a:e3:e9:8e:f5:69:21:
         ad:63:11:9a:62:95:da:b9:82:6f:58:38:67:27:a1:10:cb:c6:
         f2:12:a9:e8:c0:9a:01:b2:04:3d:dc:c5:fe:5b:d1:5c:72:b9:
         23:70:8d:ca:90:7a:29:02:84:36:c9:b2:db:53:50:2e:b7:d5:
         7e:dc:9d:ca:1b:3d:70:c3:66:75:85:9c:80:ef:c9:c2:90:b5:
         ab:66:53:69:16:12:bf:b6:33:e5:65:2e:4a:7c:94:29:c4:fc:
         8d:15:39:6d:7a:c3:43:1c:7e:e1:77:44:7f:fb:82:e8:29:8e:
         ee:8e:12:0f:e6:56:34:6f:a4:d1:1d:40:2b:6b:de:ca:16:56:
         17:11:64:8f:aa:2b:11:d5:63:cf:c8:0a:70:23:16:e1:bd:e6:
         50:47:5e:83:87:20:97:d9:f2:c0:31:03:c4:10:33:cb:e2:b0:
         1c:66:ad:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:26:12 2024 by rpki-client on console-fra.rpki-client.org