Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
File:                     uef3G89S7W0Ft-s7dB7HkG533Mo.mft (raw, json)
Hash identifier:          wo32T+lmUUnf5xnSpMNNwd3T8CGsrni3diqJjA0Bv5U=
Subject key identifier:   94:17:4F:74:1B:48:6A:4B:43:B5:F4:88:73:EC:2E:40:E5:3A:0C:BA
Authority key identifier: B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA
Certificate issuer:       /CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
Certificate serial:       019368C5D1783C09712028565C63D4EDD3E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 14:00:14 +0000
Manifest this update:     Tue 26 Nov 2024 14:00:14 +0000
Manifest next update:     Wed 27 Nov 2024 14:00:14 +0000
Files and hashes:         1: is7aFOli9Wim5VcHFEn4TbrS1_g.roa (hash: ui6owyMSkHDH0EUm/X0xHmb8XgPXHDLPHJseePad/NY=)
                          2: uef3G89S7W0Ft-s7dB7HkG533Mo.crl (hash: NnCHt5w6YBlbp22CX7cMUJ+zDO+8oi4ogzmkPrKtD5g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:c5:d1:78:3c:09:71:20:28:56:5c:63:d4:ed:d3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
        Validity
            Not Before: Nov 26 14:00:14 2024 GMT
            Not After : Nov 27 14:00:14 2024 GMT
        Subject: CN=94174f741b486a4b43b5f48873ec2e40e53a0cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:71:db:13:f6:b5:2d:1e:97:e7:5c:4b:5f:5c:
                    99:6a:19:18:9f:60:c1:7b:fe:ed:fb:5e:ea:89:45:
                    24:9c:af:de:47:06:de:b3:c4:f9:d0:42:01:d5:2c:
                    65:02:68:07:3f:19:83:08:2c:85:7c:e2:8f:dd:ae:
                    e8:f2:97:62:30:c9:9e:3d:20:b9:87:49:f0:4c:9f:
                    25:04:ae:9d:39:63:74:10:3b:91:d3:ce:81:63:23:
                    cd:7d:2e:26:9f:27:7b:c0:f1:e9:43:a4:f1:cb:78:
                    fa:c1:f7:38:cc:9b:39:04:31:92:06:28:80:6e:df:
                    b9:5a:d0:2a:6a:fd:0e:5f:42:83:7c:a7:dd:e2:9f:
                    ff:85:69:78:e8:43:2c:08:ad:e2:2f:78:da:f5:c1:
                    a8:e0:01:f8:4e:43:5e:22:a6:34:35:5b:d3:a7:57:
                    27:2b:41:eb:97:c2:7f:7d:26:5d:1f:05:9b:0a:36:
                    f8:81:12:c6:aa:f2:5b:3e:96:04:5b:ee:53:a2:06:
                    7e:e7:94:11:86:29:88:2d:80:bf:0d:e9:f3:d5:d1:
                    f3:34:6b:f5:21:00:76:56:5d:1d:f3:58:1f:18:1d:
                    36:11:83:86:d7:e1:3b:06:63:31:2b:90:51:c9:35:
                    90:64:90:8d:37:33:c4:9e:98:9b:a8:d1:18:19:66:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:4F:74:1B:48:6A:4B:43:B5:F4:88:73:EC:2E:40:E5:3A:0C:BA
            X509v3 Authority Key Identifier:
                keyid:B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:70:a6:99:73:3d:b0:01:a9:e1:b9:c8:ab:40:b2:e6:61:19:
         21:d8:43:47:20:8d:e6:33:dc:51:ba:a9:e9:b5:c1:e6:04:dd:
         48:48:59:60:0b:43:fb:25:14:9c:40:ad:f3:83:ec:75:e4:ac:
         6b:43:81:dd:73:a5:74:c8:87:5e:a0:f8:fb:bc:2a:8a:85:2b:
         6d:f0:1f:58:71:d5:ae:36:4b:1f:82:ae:94:a3:c6:72:ba:61:
         fd:9f:6f:77:50:69:12:98:b7:a3:61:d2:e2:ab:5b:23:a0:53:
         e5:8b:3f:ce:40:d2:59:da:79:69:1a:f9:23:af:eb:6c:b9:26:
         07:92:af:f6:90:47:1d:75:3c:b5:21:d4:ba:fe:f9:8f:1d:01:
         91:99:58:40:02:d2:1d:ce:2f:52:b7:2d:17:ff:66:eb:40:85:
         2b:cf:35:1a:8d:b7:98:2d:5c:2c:ac:9a:12:da:95:27:5e:11:
         49:0a:31:a7:8d:05:7b:ed:da:5a:23:01:57:31:16:83:4a:b8:
         62:98:98:5a:e2:78:ad:52:a2:a4:9c:8f:00:d1:d7:0b:02:a8:
         d3:8f:3b:58:2c:11:46:1f:14:92:0d:11:0a:34:e6:8f:d6:cd:
         84:8e:54:20:67:80:87:44:2f:d3:5f:17:55:b6:2a:18:d5:2e:
         f6:62:2d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:36:28 2024 by rpki-client on console-fra.rpki-client.org