Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
File:                     Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft (raw, json)
Hash identifier:          EO7qth7OuRVIzAMB2Vwtyp3l75kGtLASVounZeW8w8o=
Subject key identifier:   CC:11:BF:AE:7E:DF:BF:6C:C2:30:B7:A6:96:93:78:69:C2:60:90:16
Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
Certificate issuer:       /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Certificate serial:       019355087400F79E761E14B6979317FDE4D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
Manifest number:          0388
Signing time:             Fri 22 Nov 2024 18:00:37 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:37 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:37 +0000
Files and hashes:         1: HXjIPSd3XBDCGIPD6BTinMvx9co.roa (hash: Gn+J0vPDPUhvJU64yf0JrTDe5w0I8PvHvEqP+c1WRDw=)
                          2: Q1UZ7iVHx2mlyWFnnu7LIP5rDfU.roa (hash: OdQCClIfzJnFc5xyOBfv2izpWLcoccc3Ad6LzOpfmSI=)
                          3: Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl (hash: X/YVXKK0kImMgIhWAjdDonUcz98Vnt3E0Y6CNjYWvwI=)
                          4: X5CVYKU5y3R-c4-8PTCs4TEOV9I.roa (hash: d9DXL0qRsXrlxAwRRyyrsHDLTBtH9g/jlTkcSake+nc=)
                          5: pXvrgSb9yYfl9m__EJG7vDpPM3Q.roa (hash: 0JaHhYOUVuAUBmcLhnOpiqONgvXppwFwxFM6tCwzA+Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:74:00:f7:9e:76:1e:14:b6:97:93:17:fd:e4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
        Validity
            Not Before: Nov 22 18:00:37 2024 GMT
            Not After : Nov 23 18:00:37 2024 GMT
        Subject: CN=cc11bfae7edfbf6cc230b7a696937869c2609016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:27:9a:16:8b:ea:75:9d:ea:b8:3b:bb:39:
                    fe:42:55:32:9d:29:62:a8:4b:84:b0:95:db:ae:ba:
                    b5:40:63:db:50:60:fd:24:b2:29:11:ac:aa:b1:ab:
                    a2:91:31:80:6f:3b:db:81:d4:63:be:ef:ca:da:65:
                    d7:a9:25:d5:7d:45:ce:26:83:cc:83:70:6d:35:18:
                    9e:63:01:c9:fe:54:37:94:46:b0:92:17:87:f5:68:
                    7f:f6:a7:f7:b6:e5:35:ad:fd:fe:41:3e:5c:01:19:
                    04:af:5d:7b:62:48:d1:ea:57:82:99:fe:42:d1:ab:
                    99:2e:78:f7:43:e8:4a:1e:c5:5e:c4:85:58:5a:f0:
                    b4:d0:a5:04:20:86:f2:54:c3:00:36:b1:f4:ed:56:
                    11:4f:53:58:54:9f:93:05:85:a6:74:0b:01:d9:cc:
                    fa:2c:40:ef:73:34:ae:ee:39:b7:8f:f8:e6:cd:d2:
                    ad:ec:d6:b0:65:44:cf:0b:72:e4:a0:bc:3f:64:18:
                    b1:2c:9b:e3:eb:58:65:fd:ca:4a:85:3c:42:3c:c8:
                    33:37:da:e0:65:13:23:f6:79:f4:87:19:68:f9:36:
                    57:c5:ef:30:66:b0:98:01:9c:2e:43:66:a9:75:ae:
                    c3:0c:93:94:f3:17:3a:28:bd:40:df:22:16:b9:1a:
                    cb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:11:BF:AE:7E:DF:BF:6C:C2:30:B7:A6:96:93:78:69:C2:60:90:16
            X509v3 Authority Key Identifier:
                keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:39:47:a8:64:cb:f5:22:75:39:67:17:37:f7:e1:69:be:fc:
         e6:a3:d9:07:04:46:bc:cf:dc:d5:3c:39:56:f7:54:97:43:45:
         ec:fc:4b:06:af:11:b7:9f:5b:77:ac:6f:b2:dd:fe:50:e0:93:
         dd:bc:be:da:15:df:91:97:ef:0f:75:8d:00:3a:56:39:62:1d:
         c1:84:e7:16:bb:a1:cf:23:47:5f:b8:bf:1d:04:b3:4e:32:0a:
         44:ba:d0:b6:6b:46:86:e3:7b:41:e6:dd:bc:97:08:85:e6:a3:
         c5:57:b0:bc:dd:e3:74:1a:a8:53:ee:57:7f:4c:69:e0:9f:04:
         a8:b8:4f:e8:8f:cc:bb:e9:1f:7e:6b:3f:ca:0e:60:59:17:81:
         01:bd:29:c7:a4:4c:29:31:f8:5d:6c:d6:5c:4e:80:ce:8b:9d:
         e1:8f:2b:a5:4e:1a:c8:38:32:fc:53:0b:93:d9:5c:b9:38:be:
         3e:d8:bd:e8:b7:ce:37:84:0b:ee:e8:da:18:1b:e5:b0:96:ce:
         35:15:4c:27:20:34:d3:f3:55:bc:09:9c:eb:40:49:b1:49:47:
         3b:a2:be:36:34:03:57:42:08:33:ef:2a:c4:55:17:f0:a8:a8:
         6e:0b:42:21:af:df:d2:27:af:a1:30:20:32:3b:a8:a2:53:05:
         66:c8:ce:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:36:09 2024 by rpki-client on console-fra.rpki-client.org