Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
File:                     U6d_390Uwt8Vjr_C5s_ConmmSME.mft (raw, json)
Hash identifier:          g9PBBkih51cYxYXD451e31+yxth4MRuKbFF0onk6U6M=
Subject key identifier:   03:13:6D:ED:92:AF:C4:C4:94:13:33:E3:27:43:32:D2:21:C1:E8:C7
Authority key identifier: 53:A7:7F:DF:DD:14:C2:DF:15:8E:BF:C2:E6:CF:C2:A2:79:A6:48:C1
Certificate issuer:       /CN=53a77fdfdd14c2df158ebfc2e6cfc2a279a648c1
Certificate serial:       0194C42C072CA629C2D13C14E225137B9904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
Manifest number:          0E3A
Signing time:             Sun 02 Feb 2025 01:00:07 +0000
Manifest this update:     Sun 02 Feb 2025 01:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 01:00:07 +0000
Files and hashes:         1: U6d_390Uwt8Vjr_C5s_ConmmSME.crl (hash: rQWl3Lf4pTq6DE4BYLzitcOmrKsVx/HbBNcs5loDw2E=)
                          2: ft6CTpjoPnOeyjCN03A4i61UZDg.roa (hash: zYsIQY88cCP6BOjXx6qQRS0WljzFQPd13/XtjsSjWVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:2c:07:2c:a6:29:c2:d1:3c:14:e2:25:13:7b:99:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a77fdfdd14c2df158ebfc2e6cfc2a279a648c1
        Validity
            Not Before: Feb  2 01:00:07 2025 GMT
            Not After : Feb  3 01:00:07 2025 GMT
        Subject: CN=03136ded92afc4c4941333e3274332d221c1e8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:d9:ed:e3:ae:61:01:4b:4d:f4:e5:5f:21:
                    87:44:73:1c:08:f4:92:ba:a4:5e:88:db:f6:d1:fd:
                    0e:59:8e:01:ac:fd:7f:72:14:53:43:43:c5:45:38:
                    ad:73:f5:05:29:00:7a:6f:5f:7d:15:dd:3e:7e:07:
                    93:43:d3:4d:dd:ea:83:24:26:34:0f:a6:53:69:48:
                    29:65:8b:d8:7a:ca:38:60:22:cc:11:75:ce:4d:3a:
                    ac:3b:4f:fc:be:b9:d0:d6:01:28:5a:a9:72:a3:02:
                    81:50:40:fc:89:7f:92:c5:6a:f5:3b:6c:3f:1f:b1:
                    bd:fd:06:b8:88:3e:98:82:7b:d0:ce:12:2d:f7:df:
                    f4:8d:dc:a9:83:90:4f:4f:4b:d6:98:73:d6:89:87:
                    08:f0:a0:f1:cd:69:fd:c4:fb:43:53:4c:6f:22:44:
                    47:a9:c6:0d:25:66:1d:aa:7e:df:bf:99:48:63:fb:
                    61:03:e2:97:66:a8:48:dd:4f:88:17:ef:40:50:a5:
                    05:d8:18:c8:dd:22:fb:77:b3:c8:b8:df:dc:44:67:
                    0f:0b:b7:fd:77:00:8a:f3:f2:96:92:94:56:1f:16:
                    1d:50:5f:4c:9c:c2:7a:29:8d:13:1f:c8:d7:aa:86:
                    38:ef:93:7f:d4:e8:06:a4:02:28:80:fc:51:32:41:
                    23:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:13:6D:ED:92:AF:C4:C4:94:13:33:E3:27:43:32:D2:21:C1:E8:C7
            X509v3 Authority Key Identifier:
                keyid:53:A7:7F:DF:DD:14:C2:DF:15:8E:BF:C2:E6:CF:C2:A2:79:A6:48:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d8:8a:dd:3c:b7:73:4c:71:9d:ec:f9:1d:a0:a7:9c:59:00:
         75:00:61:c5:b6:55:7c:f6:7f:4a:b3:6d:f0:e5:7f:28:ad:b5:
         41:3c:13:7f:e4:a8:65:31:4b:05:36:a0:73:dd:d7:a6:84:c1:
         4b:a6:d9:aa:78:63:3b:0b:71:42:11:d8:77:bf:5f:5d:1c:1d:
         ee:47:fd:d8:63:5e:7f:12:78:e5:7d:cd:9e:34:66:52:9f:42:
         f5:3a:9f:65:d1:48:b4:97:b4:c1:bd:2f:61:ba:32:ed:17:c1:
         3c:3b:7a:ec:00:20:35:6f:44:e7:3e:23:cc:2b:aa:1a:c4:4a:
         e1:30:21:b2:23:69:cd:0f:c6:69:cf:94:b1:df:84:21:fc:fe:
         49:f6:bd:89:97:a2:f6:f8:d9:7f:e1:41:06:95:a4:ff:40:a6:
         cd:c2:67:71:bb:b1:1d:cc:f8:e5:68:5a:77:86:0c:a9:3c:d5:
         33:0f:c1:cc:ed:4c:b4:4f:75:1d:3b:e3:40:5c:bb:e9:8c:a4:
         29:e4:42:bb:9b:ba:67:86:8f:86:ee:e9:4f:fa:2f:74:bd:d7:
         21:62:17:55:76:66:de:54:b3:0c:51:65:d9:8d:cc:1e:6f:c1:
         c4:3a:a6:96:46:8e:c5:e0:b4:f8:d3:57:70:ae:9b:05:f8:d4:
         54:99:1f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:39 2025 by rpki-client