Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
File:                     UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json)
Hash identifier:          WZSeW7UyC+8EQz6WlzWpJ4bOjIqlW/7c7UYYGW56JEs=
Subject key identifier:   D9:84:A1:15:AD:CF:5B:CB:20:F9:3A:4C:AA:17:4C:FC:57:D6:B4:EE
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Certificate issuer:       /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial:       019355ACFE2780FBEA52F09C40EB2271B7D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
Manifest number:          04E9
Signing time:             Fri 22 Nov 2024 21:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:20 +0000
Files and hashes:         1: 88rIdR3WD5LTJxbtFscLFLdSKMg.roa (hash: cTg6E7XxoscC8lxsOTsgmOE5ihQfypYzK7ccZmlb1sU=)
                          2: DFf5N4eR-Sp0PVShYeEAvYoUQeA.roa (hash: +2AUaYD6NQ8cJUZUKmoXPPWae2+gQsufz1Pdu0/B1vQ=)
                          3: GL9NWXNQZ0rAoGBb5t0QcBoyzlk.roa (hash: 3owhJETbKxdHMSTNQ17e2xjJd4IgXu7uk+QOPTDeH/w=)
                          4: QP7kcUW0liLdCQGmC7ax3wPvlI4.roa (hash: i1weearkZ0GQKE67NYF+HHFJTFVV2vtdTcj3n7Bu0F4=)
                          5: TUfnGtq8mTQ96RDFRQ6moMMoT_w.roa (hash: o6/MtcGaQt4D8zZXJcfUrJFM80jmKHqtuuVNU8URzcw=)
                          6: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: nY1EJgX8RhHgER41ekvDvqKV7NkrNjdr+D17oivkIFw=)
                          7: eKt0UjFUyXpV5kJM5_Xw5rPSEbo.roa (hash: 2NaqYTxrbw8oPAI+BMBzQHODXg3JpDEf3BIRWrzhTQg=)
                          8: lRKO1_-GDSpvUMMPeWX_MaC3FWU.roa (hash: Oza4aef/HMo2FnfFsyroXgchMp4RCUO0vLYi9F7omMQ=)
                          9: oWh13R0F6SiWew9yZxD1QnMt0cI.roa (hash: Eh0eIAvxGIo1+sut3ODEw8SEHMcMaQCbE2pc7sq/oOo=)
                          10: op052EwSdQJYCzo0GIgfp_oJb0c.roa (hash: XFwoZxm2V1IOIT/ZJlELYiDftm+ELjQPleGHxgS1zA8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ac:fe:27:80:fb:ea:52:f0:9c:40:eb:22:71:b7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
        Validity
            Not Before: Nov 22 21:00:20 2024 GMT
            Not After : Nov 23 21:00:20 2024 GMT
        Subject: CN=d984a115adcf5bcb20f93a4caa174cfc57d6b4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:af:41:87:9c:fe:fe:7e:53:07:a8:c7:4c:08:
                    96:33:2b:33:cb:b2:be:98:06:aa:7c:40:15:81:5e:
                    11:1a:ff:99:7b:2b:e5:00:1d:c5:82:cd:39:d3:f9:
                    ef:cb:04:80:90:11:2a:84:f7:1a:1e:be:30:0b:c8:
                    35:5d:65:d2:6a:a5:f5:55:8e:ce:a9:34:9f:13:2a:
                    82:41:50:48:f9:e4:df:b2:21:c8:7b:ea:84:06:f7:
                    6c:82:85:1e:16:46:42:f7:e5:69:ab:b7:07:21:be:
                    b2:ab:1f:46:51:8f:8f:a5:fd:03:c1:f9:86:2e:c8:
                    6b:5e:e3:00:ab:f5:bc:e7:3b:87:a3:d3:de:83:eb:
                    25:5d:4f:30:63:1b:92:e5:46:7d:49:3d:39:dd:09:
                    4f:f0:92:61:b9:0c:bf:db:75:00:90:dc:a6:a4:85:
                    8a:cd:15:bf:4b:9e:de:be:53:7f:3d:47:f9:4d:39:
                    51:b5:6f:5a:79:ad:a7:f0:1f:77:9c:9a:d8:5d:9f:
                    da:2e:6b:d2:80:63:7a:81:d3:64:82:90:5d:f0:0d:
                    2e:a4:58:d3:85:f3:4c:e1:37:05:23:f5:c2:a9:ff:
                    66:ae:1f:6d:7e:16:15:7b:c3:f8:4a:a9:62:a7:7f:
                    d4:9d:0e:6b:0b:f6:01:4a:d6:97:c4:f8:a3:4b:05:
                    78:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:84:A1:15:AD:CF:5B:CB:20:F9:3A:4C:AA:17:4C:FC:57:D6:B4:EE
            X509v3 Authority Key Identifier:
                keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d2:6c:04:26:ae:24:30:bb:68:f3:c5:5e:15:09:63:02:01:
         f4:d7:cd:65:f9:91:be:14:11:f5:1f:14:f9:12:52:12:ea:dc:
         10:4f:07:bd:2b:d1:2a:a0:25:2e:46:f0:de:dd:22:76:c8:85:
         f8:66:ec:7a:d4:6b:5d:9e:b4:87:33:94:7e:52:9a:0a:ca:3c:
         16:ac:88:b7:42:fc:2b:ed:6d:4e:1b:da:4f:5e:fd:0f:2c:ab:
         a5:03:1b:c1:d8:55:30:82:11:65:82:66:d6:48:f8:89:89:b3:
         62:23:e1:9c:b4:13:0b:16:48:d1:af:c4:7a:6c:43:28:4b:e2:
         90:ec:f4:07:7a:86:e6:d4:f7:f9:b1:11:7e:68:0c:8c:43:47:
         f3:2c:9d:34:43:f7:c3:e0:41:dd:89:42:46:62:79:09:a2:25:
         1d:e0:73:40:9c:80:6e:2d:a1:c4:e9:71:a1:25:27:87:2c:a0:
         fd:7f:ee:39:10:68:72:2e:6a:fe:dd:21:30:36:71:86:ca:0b:
         a3:fb:d9:cb:93:91:b1:48:1a:b1:db:e2:fa:9f:4a:2e:28:e3:
         e5:20:e7:4e:2b:d8:59:97:45:95:d2:b6:bf:64:f6:74:6a:13:
         9c:05:92:1c:7e:af:ea:25:4d:ef:6b:e7:cc:a8:66:27:fa:2c:
         e0:be:74:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:23:37 2024 by rpki-client on console-ams.rpki-client.org