Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
File:                     uxmjOYHjSyrlBYbjBIxmOixrhYY.mft (raw, json)
Hash identifier:          9wKYMf+xwK7uJU4gY7uDJJpbjs5IbFkzer2QKZekH8s=
Subject key identifier:   91:D3:05:AD:94:AA:F0:1F:D8:50:CE:8B:71:F1:43:5E:31:AB:B7:61
Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
Certificate issuer:       /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Certificate serial:       01936AB4AACD396243763B443E9C57530EDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
Manifest number:          137D
Signing time:             Tue 26 Nov 2024 23:00:45 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:45 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:45 +0000
Files and hashes:         1: 3Ttxgpmf6hIRbA0VimcZ_OJYIfA.roa (hash: +zH1GPthwkhsobewlBeYY7Dc/mFaYbK5Q5Ulu1khlSM=)
                          2: uxmjOYHjSyrlBYbjBIxmOixrhYY.crl (hash: F993AdihJZb8X4hJZiLTxLiO+F/sdQBXGhQEtCKrPYg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:aa:cd:39:62:43:76:3b:44:3e:9c:57:53:0e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
        Validity
            Not Before: Nov 26 23:00:45 2024 GMT
            Not After : Nov 27 23:00:45 2024 GMT
        Subject: CN=91d305ad94aaf01fd850ce8b71f1435e31abb761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2b:bb:8c:81:23:29:ae:48:74:50:aa:d3:53:
                    b3:c8:e9:5f:da:bd:65:47:86:06:2d:b8:04:35:4c:
                    89:22:34:63:ae:3d:9f:b4:87:32:3c:d3:48:1e:a8:
                    21:4f:a0:83:83:c3:44:35:9b:4f:36:94:35:a3:04:
                    92:0a:ce:89:be:a0:c3:41:d0:76:2f:39:00:b2:cf:
                    92:bf:6e:29:fd:0b:8c:de:10:7e:89:8c:e6:f2:17:
                    eb:28:65:2e:0f:0f:90:12:18:f7:8c:15:15:8b:1d:
                    ee:d6:cf:b6:93:7a:7a:98:fb:58:ef:8c:de:89:75:
                    e9:3c:80:14:1f:22:e0:20:35:6b:f2:f2:27:0d:bb:
                    92:aa:92:12:03:22:5c:fe:39:ea:86:a7:e0:de:5b:
                    3a:0f:91:74:de:ef:51:aa:b0:75:e0:e5:14:75:82:
                    d4:b3:f4:ce:9c:81:10:89:40:ad:8d:bc:14:30:c3:
                    3a:92:0d:49:39:9a:99:42:d0:43:4a:6e:02:46:75:
                    c4:ea:80:3c:c2:60:c4:6c:09:aa:96:22:7a:19:a0:
                    05:e5:ed:9b:2a:06:f8:d0:f9:66:c7:1d:10:f9:b7:
                    e2:c4:0a:24:09:4f:ec:af:6a:e5:86:2e:0c:e8:95:
                    8a:96:3e:08:fe:a7:55:73:d3:c7:32:11:45:2d:32:
                    67:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D3:05:AD:94:AA:F0:1F:D8:50:CE:8B:71:F1:43:5E:31:AB:B7:61
            X509v3 Authority Key Identifier:
                keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a7:23:1e:6c:25:fe:9f:3a:a1:6b:8e:c2:ee:ed:4d:cf:2e:
         23:f7:a5:fb:12:27:97:06:2d:6e:4c:f0:a9:54:fa:b2:f2:f4:
         14:4e:cc:d0:80:a3:32:d7:19:35:d5:d8:e3:3d:79:38:58:7b:
         cd:9c:80:5b:da:14:12:69:78:b2:16:18:21:20:a2:b3:9d:0c:
         94:7b:48:83:3a:91:ff:77:d3:8d:c9:3c:a2:bc:b1:59:b9:96:
         9c:1c:d6:d5:bd:1a:39:7e:0f:79:99:34:9a:14:8e:96:6d:27:
         70:33:78:5e:08:1f:97:a0:10:15:21:61:73:e2:db:72:af:80:
         bc:6c:82:af:ca:d9:df:72:29:56:b7:de:b2:36:e4:ff:d9:4a:
         eb:a7:2c:52:63:21:cf:13:26:34:84:d6:fc:7c:aa:a6:07:23:
         bb:a7:ab:99:93:d0:5c:3a:6a:9c:01:b8:1f:cc:8e:53:3b:80:
         55:8e:9f:57:e8:4d:db:1a:83:8d:95:c4:fb:9d:02:ea:03:bf:
         19:4d:b3:70:bc:9a:b3:02:e8:7c:4d:18:ec:79:8e:a6:72:9d:
         66:33:5a:ac:81:d7:2b:b0:16:98:40:a4:3d:26:e0:05:5e:bf:
         02:d1:f6:6b:ae:28:a7:7c:27:b7:ec:2e:78:d6:5f:fc:66:bd:
         ac:b2:02:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:01:28 2024 by rpki-client on console-fra.rpki-client.org