Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
File:                     uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json)
Hash identifier:          tYvVFlyoCauvC9vagbbTMdUfspZZZOLoOx7NMJ7UCas=
Subject key identifier:   65:7C:ED:8C:06:50:3D:15:69:DE:A2:CF:5D:78:59:A0:0C:62:10:40
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Certificate issuer:       /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial:       01936BC77C0AD8173C69346C80012D25B7A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
Manifest number:          0FAF
Signing time:             Wed 27 Nov 2024 04:00:55 +0000
Manifest this update:     Wed 27 Nov 2024 04:00:55 +0000
Manifest next update:     Thu 28 Nov 2024 04:00:55 +0000
Files and hashes:         1: ig7AY-Z9jmnBBmZqQmOqaP0RI8A.roa (hash: 0OWHjwebazEMmwY/CRC0QnsWyEjP2Yk7aIWvEXccSQY=)
                          2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: W3WZMAfbKq2XSeWc6D0QUlxJuXKViFDpTTo8zyPF1OY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c7:7c:0a:d8:17:3c:69:34:6c:80:01:2d:25:b7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
        Validity
            Not Before: Nov 27 04:00:55 2024 GMT
            Not After : Nov 28 04:00:55 2024 GMT
        Subject: CN=657ced8c06503d1569dea2cf5d7859a00c621040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:bd:05:f1:a1:ce:95:43:47:dd:66:32:90:
                    d1:32:11:21:df:8f:a7:fc:21:fa:39:b0:d4:df:37:
                    12:48:46:e3:ca:82:e4:2f:5e:24:e0:3b:35:f8:14:
                    56:ce:0f:f2:cd:a7:55:e2:a2:de:87:60:e4:c1:80:
                    e3:86:ac:5b:4d:fa:2b:4c:cc:27:23:98:01:a8:66:
                    38:b3:7d:59:8f:60:4d:eb:99:ef:cd:29:46:86:4b:
                    1f:25:59:77:4c:9e:89:90:70:01:78:c4:aa:58:2b:
                    d9:1a:5c:0c:ee:5b:be:0d:2b:4c:77:e0:cd:cc:ce:
                    da:92:6e:21:63:6f:bb:f5:3c:3d:12:b4:ce:aa:2d:
                    c6:ea:b2:c9:5a:9a:0b:2a:75:44:e2:45:82:54:f5:
                    28:ff:66:25:0d:8b:89:6b:40:cb:3f:4c:a5:9f:f1:
                    74:b0:10:e2:79:7a:d0:1e:5a:63:c4:7c:36:9b:ba:
                    e3:de:5d:7e:ea:1b:d2:b7:d0:88:5b:a3:66:c5:4a:
                    a2:c8:ec:2f:21:3c:9e:9b:7c:64:39:24:8d:c1:9b:
                    21:51:09:0d:0a:f5:d8:a5:79:a4:27:e1:2f:92:4d:
                    50:ec:27:de:10:a0:3d:12:01:bb:d5:28:b9:f3:1f:
                    27:d8:a6:14:4c:8b:14:8a:4b:52:25:07:07:03:12:
                    8d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7C:ED:8C:06:50:3D:15:69:DE:A2:CF:5D:78:59:A0:0C:62:10:40
            X509v3 Authority Key Identifier:
                keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:0e:28:f6:22:df:f0:a2:38:87:d9:bb:23:26:77:63:86:16:
         fa:c4:cc:95:81:56:c4:e4:58:25:a1:a9:e1:af:02:a9:de:44:
         d6:44:25:34:5a:91:b9:aa:06:1d:86:0a:9b:aa:d1:d9:29:1a:
         2d:34:b8:d6:11:63:5b:97:7f:31:78:9e:4c:a5:de:fc:07:ca:
         e7:81:ee:71:ed:78:da:dc:ff:00:3a:89:5d:aa:43:1e:81:f0:
         5c:62:53:c8:d4:38:60:c3:cc:a9:e8:99:71:d4:0a:fe:82:5f:
         63:7c:e1:fd:5e:75:93:a5:88:d0:60:a9:0a:e6:7d:3b:94:87:
         16:49:59:34:a9:15:6f:83:6b:bf:ab:16:60:da:93:7f:47:43:
         94:ee:5f:59:8c:8b:45:47:4a:79:67:58:7c:fd:4c:68:29:8d:
         02:75:5d:72:23:c7:04:cd:03:0e:70:cc:5b:33:23:6d:8e:12:
         86:ba:b7:ea:fb:cd:84:1b:cf:d4:8c:d1:6a:89:26:2c:19:ca:
         11:8a:0a:3b:f9:a4:4a:ef:27:b6:07:a6:e6:f2:2b:10:b4:bf:
         0b:cf:d1:32:37:a2:9f:54:d7:31:94:aa:b9:40:87:18:71:5e:
         dc:dc:a9:7a:1b:78:5f:57:28:a3:61:f6:ac:5b:b9:f3:db:7e:
         d5:28:cf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 10:39:53 2024 by rpki-client on console-fra.rpki-client.org