Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
File:                     uxmjOYHjSyrlBYbjBIxmOixrhYY.mft (raw, json)
Hash identifier:          t+YCUwJlGJe4UnBe26lQLqDc9xP+uZ7tynIjuuP/o2w=
Subject key identifier:   07:10:82:2D:9A:76:AA:B3:D2:4C:3A:C9:95:B3:63:5B:6C:73:54:B9
Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
Certificate issuer:       /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Certificate serial:       01923994206E2CF76EAAD76C7FC060EE9E7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
Manifest number:          12DF
Signing time:             Sat 28 Sep 2024 17:01:01 +0000
Manifest this update:     Sat 28 Sep 2024 17:01:01 +0000
Manifest next update:     Sun 29 Sep 2024 17:01:01 +0000
Files and hashes:         1: 3Ttxgpmf6hIRbA0VimcZ_OJYIfA.roa (hash: +zH1GPthwkhsobewlBeYY7Dc/mFaYbK5Q5Ulu1khlSM=)
                          2: uxmjOYHjSyrlBYbjBIxmOixrhYY.crl (hash: aXYItxmnwwWwiPmD1BEYAlaVcGLDa1FtwOKiWxEhgfg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:94:20:6e:2c:f7:6e:aa:d7:6c:7f:c0:60:ee:9e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
        Validity
            Not Before: Sep 28 17:01:01 2024 GMT
            Not After : Sep 29 17:01:01 2024 GMT
        Subject: CN=0710822d9a76aab3d24c3ac995b3635b6c7354b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:ec:f9:da:39:b6:6a:ab:9a:6e:a3:d4:78:
                    be:09:69:13:d5:68:36:db:be:09:5e:f3:df:76:55:
                    35:d5:91:41:61:02:3e:2d:c5:85:7c:fd:ec:ca:4a:
                    a4:a8:d1:eb:0c:47:73:13:82:7e:0a:a1:e0:9a:17:
                    9b:8a:e1:cb:b2:24:38:5e:16:a8:b7:19:a0:b2:7c:
                    d8:3e:20:3b:6a:47:c7:a3:04:d7:c9:a9:10:87:05:
                    d6:ee:a7:4f:97:72:99:a7:6a:89:1c:d5:0e:3e:fc:
                    1a:bb:a8:8f:80:0b:2d:65:e3:3e:d2:f6:33:96:70:
                    9b:28:b1:bd:95:85:dd:b7:dc:af:fe:2b:f1:39:06:
                    07:cc:67:b5:c9:26:08:cd:20:17:41:03:37:25:f5:
                    00:23:63:ed:17:64:fe:42:82:65:c9:d1:70:5f:ae:
                    d6:56:f4:af:98:27:4e:49:8b:94:f5:a2:3c:58:44:
                    07:87:17:47:a2:1a:55:28:13:e9:c0:ef:bd:d9:b1:
                    e3:20:f4:85:d5:19:9d:8c:86:d5:a6:6a:91:41:8f:
                    d2:f3:46:c3:74:ed:b4:61:a3:8c:ff:25:d2:de:67:
                    0f:94:64:6c:c4:9e:62:cf:62:01:5f:6b:50:f4:cd:
                    9f:a2:6f:86:16:b8:b0:37:99:c5:1b:a2:59:ad:4e:
                    1e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:10:82:2D:9A:76:AA:B3:D2:4C:3A:C9:95:B3:63:5B:6C:73:54:B9
            X509v3 Authority Key Identifier:
                keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:09:f3:44:2a:b2:bb:c0:b2:f0:03:3a:62:7f:bf:02:7c:63:
         60:10:cb:3c:06:9f:cf:6e:bd:dd:75:be:98:22:3d:cf:78:a6:
         dc:bf:71:16:60:7c:35:8a:9e:84:52:3e:6f:a5:81:83:4f:70:
         52:cc:44:7a:d0:c9:d8:8d:5b:80:52:31:1e:5d:bc:6e:58:c3:
         f0:1f:ea:19:50:be:3a:ed:a2:36:55:c5:2f:da:d4:c3:e3:35:
         b3:dc:bf:d8:5e:d5:32:eb:e3:8b:fa:22:a0:1e:38:bd:d7:be:
         a9:00:29:84:67:7d:b1:9d:2c:22:67:ab:83:0a:44:ce:83:01:
         8d:d6:5d:04:2b:50:f1:c9:71:b0:5a:00:15:2c:b0:4a:ee:6e:
         8d:7d:d9:69:41:d7:a9:b2:36:ad:d4:f5:17:eb:08:db:a2:b6:
         de:27:0b:53:ba:41:53:e5:f3:c4:0b:1a:57:d6:87:28:ee:40:
         1c:d4:62:e1:5a:f6:ac:77:67:5e:8d:6f:f0:9d:11:db:30:ef:
         a9:f8:f9:88:c9:50:5e:48:8c:ed:80:f2:83:d3:56:03:c2:20:
         2e:09:a8:ab:fb:df:7d:22:dd:d9:8d:04:42:fa:85:87:fa:80:
         dc:61:cb:d1:46:53:69:c7:3b:29:d1:86:0b:5d:01:43:c3:f9:
         51:47:73:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:24:43 2024 by rpki-client on console-ams.rpki-client.org