Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
File:                     uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json)
Hash identifier:          p6k1ca+SBTarDxBLruFC/96rJLpajfdVkXari2glaqU=
Subject key identifier:   07:B2:FC:71:8C:EF:82:BF:87:21:94:29:1C:35:67:8D:7C:57:31:D4
Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
Certificate issuer:       /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Certificate serial:       019369D9D8D6931AA4383834E3BC373A1DD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
Manifest number:          0ADC
Signing time:             Tue 26 Nov 2024 19:01:44 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:44 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:44 +0000
Files and hashes:         1: V226l57bjqpSEo7ifV6ysOLg3WQ.roa (hash: AuaXOpmsz83FQFV8/n8Gk0gR41mDYf3HcGcPCJpSakU=)
                          2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: qKbFcUID3EpRmiWgjQMAP83/ifNTEevQu/RzQIynrXM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:d8:d6:93:1a:a4:38:38:34:e3:bc:37:3a:1d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
        Validity
            Not Before: Nov 26 19:01:44 2024 GMT
            Not After : Nov 27 19:01:44 2024 GMT
        Subject: CN=07b2fc718cef82bf872194291c35678d7c5731d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:3e:36:5f:99:9e:8c:e2:77:df:f0:64:69:
                    8a:02:26:1c:47:5e:50:02:b6:61:3a:be:ff:cc:1f:
                    b9:72:59:8d:13:36:57:ef:06:e1:64:f7:24:b1:a8:
                    83:57:4d:cd:03:a4:9b:50:c4:c0:fc:0f:b0:28:ba:
                    01:a3:c0:c8:1a:f0:e4:a6:b4:7e:12:a4:0d:4d:e2:
                    2a:e8:c1:f6:ee:e6:b0:d5:4d:c2:26:fe:13:9e:e5:
                    9d:07:92:9f:32:2a:4f:cd:0e:04:dc:4f:93:8c:3d:
                    98:4f:63:5d:46:1c:57:48:84:49:51:df:11:20:1c:
                    0a:eb:03:be:08:3b:07:74:14:31:8c:a4:9c:57:d1:
                    80:16:a9:d9:e6:4d:02:f8:d1:d9:90:de:05:1c:90:
                    18:0c:36:4f:23:10:71:19:38:c5:a3:5b:0b:76:e8:
                    d5:1f:36:03:cf:55:eb:f1:23:99:ce:ef:fc:3b:b4:
                    71:27:4f:e6:9d:9d:04:91:32:bc:8f:09:9f:17:c4:
                    d6:57:ab:b6:ae:ae:c8:4d:7b:66:bb:90:c5:1e:da:
                    69:7e:7c:23:c1:21:72:62:76:a1:6d:ff:62:bf:9f:
                    14:2e:23:cc:76:5a:02:bb:68:3e:32:55:4f:78:25:
                    8a:45:42:fb:11:b3:ec:cb:5b:6a:8b:3d:5f:65:64:
                    c3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B2:FC:71:8C:EF:82:BF:87:21:94:29:1C:35:67:8D:7C:57:31:D4
            X509v3 Authority Key Identifier:
                keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6c:fd:7b:8a:12:e0:d7:80:49:24:91:62:b8:a3:3a:bb:00:
         4a:56:fa:96:4c:5d:08:a5:a5:1a:3b:8c:6d:28:1e:6d:ba:da:
         d5:ea:34:63:b8:d3:13:e3:f1:03:af:6f:cf:d8:e5:68:db:bc:
         04:fe:fb:cc:0a:a8:f7:18:44:e5:82:b0:6e:2c:09:16:55:4a:
         3d:e3:2f:88:7d:d5:45:cc:d9:c4:d1:04:57:07:ef:13:64:ae:
         23:c0:db:30:c0:05:64:8d:62:97:ab:a1:c9:53:40:f9:34:57:
         66:7d:47:fb:e8:d5:e9:0f:6d:6f:10:6a:18:6d:d8:78:45:26:
         fc:9a:02:d2:49:c8:c9:58:12:9d:28:a5:e5:c8:fe:2f:b8:26:
         59:e5:7e:e1:fa:d6:53:98:6c:73:0d:45:e6:f7:25:3a:5b:45:
         22:c0:bd:76:98:ba:fe:4d:66:67:3d:24:ec:d7:65:b2:f6:59:
         34:bf:37:9c:94:31:ac:29:5e:21:64:94:2b:dc:f2:c8:ab:98:
         8f:75:d3:05:6f:f3:34:b1:50:d8:da:78:4f:5d:0a:27:23:fc:
         ef:81:49:1b:86:cc:44:30:39:7e:a5:5b:93:2b:fb:50:7b:25:
         9c:d3:36:96:ba:b9:2a:ac:d1:e5:a7:e1:5c:d6:07:c4:34:9c:
         2d:06:24:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:57:20 2024 by rpki-client on console-fra.rpki-client.org