Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
File:                     uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft (raw, json)
Hash identifier:          WL4HKaBKRXQW7BhY+qqVwlt8c10lIid6UJ7l7Letoec=
Subject key identifier:   1E:2C:4F:2F:24:29:DA:E5:4C:53:25:13:57:BC:0C:28:C5:CD:E1:15
Authority key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
Certificate issuer:       /CN=b8d14227473e4b75c877274cf6c050f25c57721f
Certificate serial:       01936B2281AD3AE89E1BA28C8AA4844EAB76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
Manifest number:          137C
Signing time:             Wed 27 Nov 2024 01:00:43 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:43 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:43 +0000
Files and hashes:         1: 5BzaG0HAsP-GMvTVVTxzCuT_TFw.roa (hash: 0HgW7Jy3bV5O044SKUIhgk5kuEwxGNfelVsToZgkoUc=)
                          2: uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl (hash: OVOfWCFW8Q5T8qnZVT9wGKID53Q0A4PcWjHrTWHUFGg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:81:ad:3a:e8:9e:1b:a2:8c:8a:a4:84:4e:ab:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d14227473e4b75c877274cf6c050f25c57721f
        Validity
            Not Before: Nov 27 01:00:43 2024 GMT
            Not After : Nov 28 01:00:43 2024 GMT
        Subject: CN=1e2c4f2f2429dae54c53251357bc0c28c5cde115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:e3:c5:76:2c:04:35:2f:a1:a8:6f:ad:71:
                    7d:42:23:fd:b5:96:95:dc:7a:e8:d1:34:7f:3f:5d:
                    ea:bc:4e:ce:2a:85:4b:8d:b8:61:4c:36:a1:f3:19:
                    da:17:b1:28:62:29:3e:06:be:14:59:e9:6c:76:d6:
                    6f:87:a5:ec:10:fa:82:ea:00:e4:7b:0f:0d:89:f4:
                    47:08:ca:eb:7e:31:e0:4a:88:2d:04:52:6e:31:eb:
                    cc:b4:06:42:fe:f5:b0:38:9f:3f:5d:a6:45:48:72:
                    aa:07:e7:b0:68:59:4c:cc:49:fa:81:1b:aa:29:c2:
                    c2:74:a0:71:fa:6d:03:3d:3a:2b:0b:80:42:d2:a7:
                    b6:69:a5:55:8e:69:8e:f8:3b:2a:52:28:0e:aa:ec:
                    c0:91:f9:a7:05:f8:7a:d5:47:36:7a:22:36:1e:5e:
                    2e:42:d3:8d:b5:10:c0:ac:bf:cf:6b:29:86:ad:08:
                    8e:3f:11:a4:cc:a6:c1:0f:57:f9:d9:07:fa:9b:c1:
                    78:a5:2d:ab:44:13:88:1f:24:52:1c:75:ab:7b:64:
                    9c:c6:6c:86:22:a8:0a:5f:79:66:7a:29:b0:48:e4:
                    42:77:cb:17:4f:dc:ed:0f:fe:37:76:45:f0:12:25:
                    63:6b:fb:54:00:e6:5b:a3:f1:37:e2:4d:1f:57:2c:
                    9b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2C:4F:2F:24:29:DA:E5:4C:53:25:13:57:BC:0C:28:C5:CD:E1:15
            X509v3 Authority Key Identifier:
                keyid:B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ef:87:ab:53:5b:f7:2e:14:88:f3:07:2c:40:e5:05:54:4e:
         61:73:45:de:9b:54:1a:31:47:9a:e0:3d:c6:2e:86:d1:30:aa:
         17:a7:08:54:95:a3:c0:e6:86:81:78:59:05:bd:7d:d1:ff:c9:
         7e:ab:c4:ed:63:56:81:bd:a3:6a:80:d6:71:df:04:a0:3f:16:
         15:8f:d0:2a:9a:52:2b:11:2c:e6:1d:aa:8c:43:79:99:68:2f:
         8f:11:7d:87:ea:6f:95:fd:71:17:fe:02:66:34:f0:a5:ba:26:
         13:99:13:0e:29:56:3c:22:f4:80:44:7f:eb:eb:32:c7:7b:fe:
         d6:4d:31:03:d8:66:f4:8b:24:15:f7:7e:07:fe:b0:33:10:99:
         87:d1:07:bc:9d:a8:68:a0:99:2b:5e:e9:99:b8:c7:71:dd:fd:
         c5:0d:48:93:0d:61:a2:02:ce:ed:ec:bb:06:2d:a0:28:5b:77:
         0c:1f:0a:11:db:40:fa:bf:cb:14:5a:38:12:bf:43:85:ff:c3:
         17:f1:f9:75:2f:53:3a:22:c5:1b:15:a5:01:e2:96:fb:4a:c8:
         5f:80:3e:5c:90:9f:ec:47:53:68:f1:33:e4:a5:20:40:6a:b2:
         9c:d1:33:a6:38:c7:e5:39:2a:87:10:2f:b9:b2:bc:f0:7e:e6:
         cf:2b:f0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:52:51 2024 by rpki-client on console-fra.rpki-client.org