Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File:                     u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier:          /5RGX2XEVoGONQ3E5wXHkbHUwRU4dcNblsdrtJS829k=
Subject key identifier:   EE:99:39:B7:FC:0B:B3:3D:2B:4E:D4:C3:8D:E6:38:DF:B9:2B:D6:6B
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer:       /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial:       019353F5AE287C960D7CB7A08C4AAFBD10DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number:          0537
Signing time:             Fri 22 Nov 2024 13:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 13:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 13:00:29 +0000
Files and hashes:         1: mtx7_9f-T0te0vcah8uqdxk417M.roa (hash: +eemy+sEdbGNbeEWdFc0FjZY9RO4OE5VqB/d91yBhUc=)
                          2: nrcGyBhyC8BxDbQEM0wlhv4Aswg.roa (hash: CP+K5yhvWwPwGK3G9rwzsnkq7YTP4yYD67qmsSLS6h0=)
                          3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: klS/MzVZCltrQKp587pBbJvaWtRlDzfjDTKWzse6/Wo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:f5:ae:28:7c:96:0d:7c:b7:a0:8c:4a:af:bd:10:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
        Validity
            Not Before: Nov 22 13:00:29 2024 GMT
            Not After : Nov 23 13:00:29 2024 GMT
        Subject: CN=ee9939b7fc0bb33d2b4ed4c38de638dfb92bd66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:82:92:bd:46:3e:0d:bf:68:2d:d9:3f:d8:
                    3c:5a:32:5c:48:77:df:cd:83:a2:5a:c6:cc:d6:7c:
                    d4:4e:67:07:ad:0a:e1:e8:7e:f1:24:0d:d7:45:ba:
                    a8:b6:d9:51:f7:0f:c2:8a:60:b5:2a:66:e7:85:c0:
                    f2:59:c9:a9:04:49:2b:c0:2c:80:2c:95:0f:8c:f2:
                    97:6f:1e:a6:4f:d8:d2:7a:0d:2a:11:92:4d:72:86:
                    44:28:2b:8e:2c:39:c2:66:3c:56:95:e3:cc:1d:d8:
                    70:3c:69:8c:53:4d:77:1e:e7:d3:82:a3:26:e1:0e:
                    22:6f:7c:b0:26:ac:ff:e0:bb:49:05:e5:d2:53:62:
                    6f:74:b9:f1:e1:19:1c:c9:6b:6e:bd:49:ae:bf:1b:
                    91:8f:3b:4a:35:fa:d9:bd:8c:c6:f5:99:61:12:60:
                    3f:72:7c:7b:eb:6b:99:3c:ee:d6:f7:50:50:1d:7a:
                    c4:da:e9:b0:db:9b:17:71:56:60:36:3b:5c:e3:61:
                    cf:65:f1:50:33:50:61:ae:99:05:1c:79:4a:4c:f8:
                    a5:87:4c:04:e1:bc:c0:df:99:cc:31:99:17:64:f2:
                    0c:bd:b3:54:fa:0c:ee:13:64:e3:d8:0e:1d:c7:5d:
                    35:94:e6:7a:ba:a0:2d:27:c2:27:02:10:39:55:04:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:99:39:B7:FC:0B:B3:3D:2B:4E:D4:C3:8D:E6:38:DF:B9:2B:D6:6B
            X509v3 Authority Key Identifier:
                keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:31:e9:f5:a7:39:26:b1:d3:f2:d5:a1:d0:e9:02:6b:cf:ed:
         9f:68:06:38:67:63:45:be:4b:8a:f4:18:d3:35:f9:50:32:0c:
         56:69:6b:17:69:a0:23:56:60:d1:be:9b:9f:0a:08:60:e7:fe:
         00:b7:2d:b9:a3:81:ad:64:12:bc:4e:d3:d8:4e:64:ad:8f:66:
         77:12:59:95:e6:a4:33:c4:1d:3e:d1:ab:cc:0c:9d:11:92:d2:
         94:7a:d9:34:f4:6d:b2:89:9a:c9:8c:75:b6:04:0d:72:48:99:
         5a:c3:59:77:ed:ba:8b:13:08:51:c8:8f:2e:ed:4c:bc:91:dd:
         14:63:a0:c0:e6:9d:fa:cf:60:97:f7:5e:cd:6a:ad:08:1e:26:
         3f:8a:d4:cc:93:3b:da:26:36:21:1e:32:19:67:2d:aa:05:63:
         c8:c7:b9:a0:7f:69:aa:8d:07:e1:b4:b9:f2:c5:02:08:6e:7f:
         90:11:d3:e8:ae:56:e1:0c:77:50:66:73:2f:a2:db:9d:95:18:
         24:b1:d5:51:93:06:8d:fe:41:01:84:ef:40:c6:3b:ae:85:e8:
         88:7d:8d:c5:c7:bc:97:9e:6b:64:a4:36:b3:db:fd:b9:c5:11:
         37:29:48:20:cd:5d:d4:0e:92:ab:37:84:ff:fa:04:8b:26:d4:
         78:08:06:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:27:09 2024 by rpki-client on console-fra.rpki-client.org