Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File:                     UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier:          LOcowgU0j74utyMBSksbDIqHWuGH7xeo781+7aysfU8=
Subject key identifier:   77:7B:42:6E:E2:E3:16:51:13:B1:79:A8:49:0D:37:CC:7F:BA:43:DF
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer:       /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial:       01936B226DF40E8A0935D500743E9EC956F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number:          137A
Signing time:             Wed 27 Nov 2024 01:00:38 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:38 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:38 +0000
Files and hashes:         1: OFbw4SrYaM6691_TpICzZ3Dumyw.roa (hash: dGHkY7xddS5edkaumz54VM1yrJOENswrz+8Ta+n5WYU=)
                          2: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: r4xDpMqVoEKRD5e+gj7wjawQa9vZBzljsVHs/JxZvxs=)
                          3: tjZFTLEPYDGQ2iSEazkmBtl0Lms.roa (hash: 0bESaKk5KKoU18DKaJUO174K4XV590RxAqSNW6nnrDY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:6d:f4:0e:8a:09:35:d5:00:74:3e:9e:c9:56:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
        Validity
            Not Before: Nov 27 01:00:38 2024 GMT
            Not After : Nov 28 01:00:38 2024 GMT
        Subject: CN=777b426ee2e3165113b179a8490d37cc7fba43df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e3:0a:f1:d4:fc:6c:ea:f6:12:a0:bd:72:c0:
                    97:a1:4e:4e:91:75:73:dc:b3:25:02:cf:37:94:84:
                    bc:cc:ac:53:88:cc:76:09:51:54:4f:6b:f3:25:9a:
                    c1:52:5e:09:b5:15:0a:9f:e3:70:bd:4e:ba:3d:94:
                    fe:f4:ef:29:20:7c:1c:ef:19:ee:4a:c5:b2:0d:0e:
                    c5:c5:a6:5a:9f:0d:2b:5a:ab:63:8e:7d:2f:6c:d3:
                    30:fe:17:16:0d:93:f2:80:7f:52:41:34:fe:8a:41:
                    66:08:e6:51:74:f5:73:f5:2d:49:1f:e9:c7:41:63:
                    e2:d5:ee:f8:20:80:9b:39:07:1e:cf:79:cd:65:08:
                    a9:a6:f1:ef:cd:1f:5e:b2:91:14:65:e9:2b:55:04:
                    da:99:5b:71:bb:e0:ac:ed:6f:be:ef:97:32:ad:c1:
                    49:87:70:e4:51:86:b1:d7:89:53:ea:f1:86:6f:fc:
                    2f:c0:86:d0:ec:32:26:6e:f2:0b:ca:60:89:0f:4d:
                    7f:9f:d8:63:f1:1f:bd:eb:b7:2d:f1:3d:41:c5:c8:
                    55:f5:55:89:38:fc:13:d5:91:7b:27:a3:e5:e7:ca:
                    35:2d:e3:d5:fe:3d:5e:2f:8b:81:ef:b0:e6:47:e6:
                    37:88:88:71:ed:d5:d3:87:7e:7f:82:fb:05:81:0f:
                    0b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7B:42:6E:E2:E3:16:51:13:B1:79:A8:49:0D:37:CC:7F:BA:43:DF
            X509v3 Authority Key Identifier:
                keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:51:ae:7a:4a:b4:09:47:76:07:4e:4d:b4:bb:a3:ff:94:b6:
         dc:0f:6b:4a:e1:82:9e:ec:e0:38:a4:73:b9:51:2e:30:4c:82:
         19:07:00:96:cc:5d:11:6b:e1:a5:b9:98:c9:30:0f:88:7b:d8:
         1c:d8:08:aa:ae:05:dd:59:46:07:af:ae:f9:98:f6:87:b4:18:
         c9:38:9e:20:8d:6f:78:ff:31:37:2d:c5:32:cd:eb:10:ba:fc:
         a8:6f:a7:4a:40:e9:21:af:42:21:9f:0c:6c:9e:2f:2c:7c:d7:
         00:6d:89:08:7e:70:e4:7c:68:8a:f4:6d:b6:4b:f2:46:6f:2a:
         54:8a:15:db:df:f9:e8:67:e6:01:73:a5:3e:67:b6:f4:8a:b4:
         02:2e:57:ec:10:18:02:8c:d1:6f:9a:10:25:1e:b1:6c:be:99:
         ac:fe:34:bc:4b:31:5d:62:44:95:5b:14:1d:ad:c8:07:69:02:
         dc:fa:72:84:e4:6a:b8:00:a1:66:a2:1d:84:b1:c4:43:d5:bc:
         47:ab:92:03:3a:16:c6:d4:ea:97:8f:3f:d8:dc:cf:ca:c5:f3:
         56:b2:46:7b:55:24:c4:3c:15:62:52:79:63:eb:5d:bb:69:03:
         0c:54:b1:e7:bd:b3:98:80:ec:f6:99:82:05:4d:c3:05:f1:d5:
         0f:43:ed:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:53:13 2024 by rpki-client on console-fra.rpki-client.org