Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          BaUtkIkQgbGiLHsSGKu1eU1ygt59ILb5NZ60FzOElGI=
Subject key identifier:   98:E6:8E:64:D4:D7:6B:9E:FD:74:9A:5B:CE:2D:78:05:BB:8B:D2:29
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       01921173E659A676120C45700CE0720BC963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          12D5
Signing time:             Fri 20 Sep 2024 22:01:01 +0000
Manifest this update:     Fri 20 Sep 2024 22:01:01 +0000
Manifest next update:     Sat 21 Sep 2024 22:01:01 +0000
Files and hashes:         1: 1ActLPzZicpaF_0IR7mBotb_i04.roa (hash: vZVyNtiZOu71p/ff+vnh11HCu5Vyn4RwJStD2eGCUvY=)
                          2: TcwX_t27N_BVevZECQ_QkBqY5pU.roa (hash: k33ulawqG3qBVrGjR8aXVRiDuYWM/nfc9YF34MwruL4=)
                          3: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: qi2jFNXd4T/EC8MgJoGyosMtBn1lLYBhhAtu5kvIp4A=)
                          4: VvfuXcpNt4bArJU6AbkiKy3N1Jc.roa (hash: OreoKoDR2y3XnZyGcJnpXrZ1kxD4q79L3fE63mPccAU=)
                          5: r9Zupp64oU8MkLKHNui7Jf41FPA.roa (hash: xTX6807kufHuDG2Q8aPKWohJJYBwF4XSfqltGHtqXNE=)
                          6: yXCEzQhMrAdgnUXOFM_IrzLe9-I.roa (hash: YEBEg4hk/xLVwdZWmSIadn6TP9VAiKS+6HZQgBzBdkE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:11:73:e6:59:a6:76:12:0c:45:70:0c:e0:72:0b:c9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: Sep 20 22:01:01 2024 GMT
            Not After : Sep 21 22:01:01 2024 GMT
        Subject: CN=98e68e64d4d76b9efd749a5bce2d7805bb8bd229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:3b:08:67:85:8e:0c:50:80:c0:d6:f1:5f:
                    f4:2a:8f:6b:8e:6a:bc:de:84:2d:f8:6d:0f:20:e9:
                    30:49:24:e9:19:99:9b:2d:9d:46:35:5f:ee:71:ed:
                    ab:f0:0c:3b:81:4d:fb:f4:35:df:68:62:b2:cb:75:
                    3b:91:d6:8e:54:bf:9d:00:e2:bb:cc:1c:ca:cf:5d:
                    b3:30:96:3c:4c:8c:d3:31:a7:ec:1f:dc:65:84:ae:
                    14:47:cf:da:48:ff:67:98:94:ff:f7:fa:ff:39:77:
                    4d:13:b2:6c:21:38:30:d9:a7:6c:07:9f:32:fd:17:
                    3e:e1:ce:d3:19:3f:6d:7e:c3:b3:be:b5:6f:66:43:
                    ed:54:0f:07:af:b8:b1:6e:d6:d2:85:1c:b7:d9:09:
                    09:08:c1:86:94:e3:2f:da:53:91:e0:cc:5e:d6:9e:
                    4c:65:9c:df:76:2f:d3:5c:65:97:93:3f:25:cf:6e:
                    05:66:12:ac:8e:71:b0:91:b9:52:bd:23:94:91:c7:
                    34:d8:8d:75:53:95:a0:ca:1c:77:1d:4b:11:6f:2a:
                    92:82:10:4f:5e:e6:55:5c:00:a3:40:b5:06:3b:15:
                    a1:80:9d:54:94:08:d5:ad:c3:64:57:7c:f9:46:82:
                    a9:7c:b3:02:1a:ce:37:55:e7:2e:29:bd:13:18:d4:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E6:8E:64:D4:D7:6B:9E:FD:74:9A:5B:CE:2D:78:05:BB:8B:D2:29
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e9:93:3f:e0:eb:c1:44:d2:f1:b0:a3:ad:26:ac:97:18:ca:
         94:9e:cc:53:29:2c:50:08:22:58:4e:83:43:c2:5a:41:e7:75:
         e3:3f:5f:f4:08:b8:f2:5c:4b:91:b6:7d:d3:6b:dc:67:52:ea:
         b6:a0:93:5c:54:8d:ce:e5:99:50:33:91:83:88:58:4c:ff:11:
         54:5c:f9:37:2e:98:f0:9d:eb:2d:d9:e6:81:e1:b2:b4:18:49:
         6f:fd:0b:ab:e7:47:b8:d5:09:1c:86:c6:f6:26:08:7b:51:c9:
         6e:44:06:2a:7b:db:c9:82:ce:52:ac:e7:fd:c5:89:7e:22:65:
         97:5e:2c:dd:e1:f2:28:c9:72:31:ad:2c:e6:12:fb:d2:73:26:
         06:ac:dd:00:99:9b:d7:54:81:b4:f9:c0:2e:ad:dd:b5:dd:98:
         23:76:0e:a2:94:b9:71:95:67:5f:99:b6:29:70:2b:d1:b1:22:
         24:7f:ae:ed:09:42:df:4d:b7:b6:ab:7e:b4:92:90:1d:e2:48:
         fa:de:15:2f:75:e4:6f:a5:b9:ce:c3:db:c3:29:d2:c7:14:97:
         7a:10:8a:d9:85:dd:37:1f:ad:a8:32:fc:2c:6a:b8:9c:2c:9f:
         3f:12:83:36:b5:18:51:36:5b:22:06:35:41:02:5e:cb:9b:d5:
         6f:5f:c4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:45:10 2024 by rpki-client on console-ams.rpki-client.org