Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          buPa/RWZF5PrpEiYiEfEhtuU1WsGrS2VOx0pwJv0dtQ=
Subject key identifier:   A9:08:CE:57:9B:E7:8E:FF:2A:B8:89:DF:F5:01:91:52:88:92:1F:DA
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       0193520786AE93D3121535256E9DBB189D3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          137B
Signing time:             Fri 22 Nov 2024 04:00:45 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:45 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:45 +0000
Files and hashes:         1: 1ActLPzZicpaF_0IR7mBotb_i04.roa (hash: vZVyNtiZOu71p/ff+vnh11HCu5Vyn4RwJStD2eGCUvY=)
                          2: TcwX_t27N_BVevZECQ_QkBqY5pU.roa (hash: k33ulawqG3qBVrGjR8aXVRiDuYWM/nfc9YF34MwruL4=)
                          3: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: OEqHDv43C8k2ju8YEalQ9cUFcZaaBOoT1CL9hcGt8i8=)
                          4: VvfuXcpNt4bArJU6AbkiKy3N1Jc.roa (hash: OreoKoDR2y3XnZyGcJnpXrZ1kxD4q79L3fE63mPccAU=)
                          5: r9Zupp64oU8MkLKHNui7Jf41FPA.roa (hash: xTX6807kufHuDG2Q8aPKWohJJYBwF4XSfqltGHtqXNE=)
                          6: yXCEzQhMrAdgnUXOFM_IrzLe9-I.roa (hash: YEBEg4hk/xLVwdZWmSIadn6TP9VAiKS+6HZQgBzBdkE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:86:ae:93:d3:12:15:35:25:6e:9d:bb:18:9d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: Nov 22 04:00:45 2024 GMT
            Not After : Nov 23 04:00:45 2024 GMT
        Subject: CN=a908ce579be78eff2ab889dff501915288921fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ec:a5:73:65:92:2a:bb:39:d9:8a:82:b8:8e:
                    51:c5:6c:f6:4a:58:da:93:51:cf:a3:b9:5e:04:c3:
                    ba:fc:e1:ef:60:d2:92:6c:0a:9d:d9:01:22:43:be:
                    f6:4d:06:89:84:37:51:1b:a2:cb:89:db:66:02:89:
                    dc:fa:4e:39:da:59:c1:76:d8:44:e5:5b:02:9a:00:
                    64:5a:21:c5:95:04:64:5d:c2:14:9d:32:eb:ba:b9:
                    5e:ab:15:7f:e7:18:e0:cf:46:bc:c2:1f:70:24:c9:
                    c2:68:3c:d7:21:7d:d2:82:ae:80:ed:4c:c8:50:eb:
                    69:54:0c:20:cf:43:6e:b9:81:08:01:6d:b2:34:22:
                    03:b2:d3:87:0d:fd:55:3f:86:b6:b8:7a:08:9b:e5:
                    6f:32:f3:eb:aa:54:77:9f:e3:51:b1:a4:f3:d7:6d:
                    47:1c:09:cf:91:94:a3:50:8b:fe:a1:44:f7:a8:c8:
                    ea:8f:22:85:f4:30:13:f9:37:aa:25:49:09:0f:93:
                    ac:11:a2:cd:9d:9e:c6:02:85:88:a8:4f:97:18:bc:
                    ba:d4:c7:a7:a4:3a:8e:fa:a1:87:8a:c3:c7:a3:64:
                    c5:78:df:3f:6c:da:a0:4e:a0:03:9e:0f:81:66:d1:
                    a8:cb:54:88:ce:16:51:f3:41:1c:65:2d:a1:a5:34:
                    5e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:08:CE:57:9B:E7:8E:FF:2A:B8:89:DF:F5:01:91:52:88:92:1F:DA
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:6e:bd:c1:7c:63:b1:a3:5e:d7:13:c8:39:8b:c4:3c:10:6d:
         78:cf:39:64:8e:49:5f:ef:fb:2a:44:f4:fc:2a:71:58:c2:5d:
         9d:51:0c:d2:e9:95:67:9a:30:8a:f1:9d:66:83:8b:18:0f:9b:
         f2:c6:7b:97:76:05:51:a2:3e:e1:51:f3:75:92:72:59:30:1f:
         ec:77:57:b1:e6:60:12:3b:c5:71:18:65:3f:36:ff:95:82:a1:
         d3:b8:3b:55:b6:c8:92:8b:53:01:26:a3:29:86:3d:d2:82:65:
         52:bd:3b:68:06:f1:a1:5b:dd:77:74:0c:aa:14:5e:7c:2f:8f:
         61:1f:38:fd:48:4a:04:6c:a2:d0:12:f2:eb:11:13:07:df:07:
         28:14:9e:b0:01:4b:df:e3:97:c2:12:e8:a6:f4:b4:0c:56:e6:
         86:d4:41:71:b8:ed:35:d7:06:8a:7d:fa:ba:d4:03:fc:3e:2a:
         41:fa:ce:a0:82:f7:64:30:5f:4f:4f:63:6f:fa:c1:14:64:8f:
         e3:cb:c7:7b:e7:6e:20:39:39:37:5b:62:b5:4c:4f:5b:f8:a7:
         f4:54:3a:ab:bb:c6:30:32:8f:59:47:ec:83:dc:40:0b:64:28:
         d9:90:7b:ce:60:57:a4:f1:93:35:69:e0:7b:78:7a:6e:88:5e:
         85:31:7f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:55 2024 by rpki-client on console-fra.rpki-client.org