Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File:                     rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier:          +FLkveBKZz/pKx6Roy/nc6rTHhyBhcGCXnYQqqWLY8M=
Subject key identifier:   66:CD:FB:06:AE:37:93:13:1C:38:97:53:F3:4E:1A:D0:26:1E:32:00
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer:       /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial:       01936745ABD6D7B04A1FA7D507611FB762AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number:          1252
Signing time:             Tue 26 Nov 2024 07:00:39 +0000
Manifest this update:     Tue 26 Nov 2024 07:00:39 +0000
Manifest next update:     Wed 27 Nov 2024 07:00:39 +0000
Files and hashes:         1: EIB_jtuk4g5VJUYhEdc4eNLhp3U.roa (hash: 0JtpSJHLxsFEGUzohUqsyCJAGwxORpPoqd2m+J181nA=)
                          2: K7tKAbOgQzV7HiZkjMNavvtXrM0.roa (hash: 6QHmAUmp871o0AoG8EuyoKlKQAgJKvCDNN9Rgs+eyos=)
                          3: mBMlHPxXW6uZp0Ukz9_Swem0Gn0.roa (hash: T7b22UQ4uqhnLDmV+wY+yk8P7DR3G4McgEHOFnnPb7c=)
                          4: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: Kio26UY3U2dakJKEgVT15NofzquG8zJIAzlIHMAg/9E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:45:ab:d6:d7:b0:4a:1f:a7:d5:07:61:1f:b7:62:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
        Validity
            Not Before: Nov 26 07:00:39 2024 GMT
            Not After : Nov 27 07:00:39 2024 GMT
        Subject: CN=66cdfb06ae3793131c389753f34e1ad0261e3200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:5a:8f:59:ab:3f:f4:7c:92:75:37:0f:6e:
                    4f:13:1e:8a:32:3e:1b:44:79:b4:4e:3a:ec:85:c2:
                    23:ce:88:26:dd:a9:7c:c8:cc:89:9c:25:38:ea:6e:
                    00:33:b3:6c:06:76:24:71:c4:4d:85:c7:61:31:0b:
                    50:c7:30:e7:68:0d:4b:ee:22:d5:8a:97:1b:c7:4b:
                    3e:76:a6:a1:32:1c:2d:b3:b8:85:fd:58:be:02:7b:
                    d3:0c:a5:92:35:be:9d:8a:8d:78:c1:4b:bb:c4:2c:
                    2d:10:a9:a8:40:55:c3:4f:15:2e:d5:bd:3f:4d:38:
                    1f:2b:9a:fd:05:63:b6:5f:d1:61:d7:c8:56:a6:bc:
                    41:5d:4e:17:18:9b:ab:b2:6f:a5:bf:36:17:dc:88:
                    1d:fb:1f:29:e4:43:a6:59:97:a4:df:50:c6:46:86:
                    b5:f2:48:be:68:37:77:87:df:1f:28:8e:1a:c1:fb:
                    66:a2:4e:68:13:5b:3d:9b:87:d9:04:58:e6:2e:4e:
                    5e:75:16:2d:4f:5e:71:eb:02:86:93:d7:de:4f:11:
                    9a:64:e0:a7:6e:fb:6e:53:6d:4b:e4:c2:17:a6:56:
                    60:4d:1b:87:bf:6c:17:36:04:40:fb:55:64:6a:98:
                    e0:2c:28:7a:29:b4:72:f0:84:c7:10:72:a0:2d:11:
                    39:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CD:FB:06:AE:37:93:13:1C:38:97:53:F3:4E:1A:D0:26:1E:32:00
            X509v3 Authority Key Identifier:
                keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:44:14:da:f5:e1:8a:4b:e2:f8:d6:88:58:19:4d:2f:c9:43:
         f2:ca:18:ae:75:72:f3:69:64:67:32:83:a4:85:5a:7c:26:85:
         1f:ad:c6:0a:10:99:53:ad:f3:7f:ca:5d:c9:e8:c2:fb:1a:09:
         04:06:63:68:b5:de:44:77:8b:9b:0a:40:85:2f:b2:60:b9:14:
         0a:d3:11:f4:a5:5b:f4:00:06:fd:30:ba:35:5d:55:27:8b:58:
         0c:f6:5c:20:49:90:7d:89:05:45:70:b0:07:42:08:b3:46:71:
         80:67:62:3f:a0:c4:d6:0e:16:0a:df:64:f4:50:9c:51:09:45:
         a6:ea:68:a4:83:9b:e1:14:c9:0d:db:8c:b2:15:5e:42:31:70:
         ea:4b:e1:a2:d4:4c:ce:26:4e:ca:26:1d:79:56:28:4e:54:63:
         5b:91:cf:b5:16:8d:8e:d6:2f:71:ac:df:93:7b:3a:dd:e6:4e:
         dc:80:0a:b3:b1:78:fd:e6:32:eb:ad:40:d7:fa:1e:53:89:b3:
         36:24:32:00:c9:d6:de:1d:ad:f1:94:97:5c:5c:02:02:96:09:
         90:75:22:62:80:46:64:4c:a8:28:09:4e:15:13:cf:67:bf:4f:
         07:bf:fe:54:23:c8:40:7d:e4:3d:92:a0:4a:3e:e5:61:52:e9:
         2f:6d:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 13:26:00 2024 by rpki-client on console-fra.rpki-client.org