Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File:                     UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier:          UKCz7Z8bs4Tdv9aAtwxIItAaT5nuUz+Qa09v2umB208=
Subject key identifier:   56:75:C0:44:43:29:07:BF:95:27:3E:4C:4C:44:15:1A:91:2B:D2:51
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer:       /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial:       0193553F5CAEC6F6B83155F24FA695095380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number:          0C93
Signing time:             Fri 22 Nov 2024 19:00:35 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:35 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:35 +0000
Files and hashes:         1: FQmKLrRh1xWGq99sk5mfIseij2s.roa (hash: Oi/8jHC45BwVXwxeBJpwZwg1yWMJRbdhIOWzzn6vjqg=)
                          2: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: jmV2lJXfBEbF1OIcO64Np1Ipe2tTlkehYpVlp6NnhVo=)
                          3: V1aCGoWzwn4nTK42ETnXtzL7i-A.roa (hash: 3lupH59htxN/pB5SqWUWGO+Mhosr1PWd7GPvuOqI1EY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:5c:ae:c6:f6:b8:31:55:f2:4f:a6:95:09:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
        Validity
            Not Before: Nov 22 19:00:35 2024 GMT
            Not After : Nov 23 19:00:35 2024 GMT
        Subject: CN=5675c044432907bf95273e4c4c44151a912bd251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:96:a2:e4:09:84:ff:7b:50:11:38:bf:47:68:
                    86:c1:f8:75:99:d3:e4:e1:04:58:c9:48:b0:00:42:
                    7f:77:fb:aa:55:68:50:3b:92:d1:1c:62:7e:16:2e:
                    02:fa:5c:3e:95:09:22:f3:cf:72:47:ab:d3:bc:7e:
                    44:02:75:e1:7c:15:a5:bd:8b:d1:d5:85:a9:fa:e0:
                    01:0f:f3:3e:72:84:8d:39:98:30:d7:cc:17:ec:a4:
                    7a:ae:b8:79:fd:f9:eb:4a:5a:f3:35:98:4d:83:8a:
                    0d:26:0f:3d:af:c3:6a:2d:19:ce:19:03:4f:2a:53:
                    20:bc:cf:51:2c:65:87:9a:ce:fa:06:85:14:0d:b8:
                    42:a3:a8:02:95:bb:42:5d:55:7e:1b:84:4b:3b:3e:
                    e3:f8:14:42:50:ae:46:ae:89:8a:b9:be:81:e8:67:
                    cc:83:cc:e8:bd:52:95:b4:8b:78:0e:88:f9:b4:ab:
                    40:ef:4c:c4:ed:94:76:30:38:ab:a3:db:25:34:39:
                    93:6f:99:fa:64:68:0d:be:ae:ea:7a:29:ae:8f:b7:
                    13:31:45:11:a6:be:c8:c6:80:37:bf:d1:48:8d:f4:
                    ac:54:51:a2:ca:d2:fe:32:a1:5b:cc:04:35:95:41:
                    81:1f:ff:52:f8:9b:08:eb:c5:3b:d3:5d:17:ea:58:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:75:C0:44:43:29:07:BF:95:27:3E:4C:4C:44:15:1A:91:2B:D2:51
            X509v3 Authority Key Identifier:
                keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:13:9e:b5:cf:c0:34:63:b8:90:15:ba:65:42:e2:4f:52:14:
         5f:e6:5e:87:2c:97:88:e8:8a:b5:bc:1a:45:da:37:43:52:94:
         eb:4d:f7:05:e0:e0:62:d6:f9:d3:fd:16:f5:8d:14:0a:bd:53:
         68:63:96:b7:2f:20:2f:b8:7b:72:f6:65:26:a5:32:dc:5d:82:
         15:57:bf:7e:e5:53:f1:e4:d7:28:31:b9:46:e5:f7:a4:4a:0f:
         ab:30:d6:c1:fe:71:c8:a0:c3:b5:6a:a6:7d:f2:a2:a0:38:53:
         85:bd:cb:8c:38:91:2d:2f:b7:d9:6b:47:6f:2b:92:95:38:5d:
         f1:44:9d:d5:8c:72:4a:2a:0f:13:01:51:5f:43:c9:fa:21:a1:
         11:02:35:27:83:85:9b:eb:90:2a:d9:39:e8:ec:48:0e:23:67:
         84:2a:04:28:4b:91:f7:fd:c4:a4:50:93:ce:74:ea:a3:c8:26:
         ef:bb:98:a4:04:a3:4f:c1:2b:d0:65:d1:62:60:78:da:80:04:
         b9:6d:fa:df:89:4b:75:df:8d:a9:15:a7:e2:8d:45:b7:3f:3a:
         97:e0:c9:36:91:ac:6a:14:32:59:87:c8:74:bd:62:13:3b:70:
         06:4b:4b:76:3b:85:22:5b:f8:a1:cc:79:ed:5d:cf:ac:8c:17:
         7e:fb:c2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:23:33 2024 by rpki-client on console-ams.rpki-client.org