Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File:                     U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier:          J59mraaxwkfvQcYnecQ4DdiC3X3kdQGeytoP1z5HgsQ=
Subject key identifier:   43:81:85:E2:AD:52:E6:D2:08:6D:B9:48:AC:48:CD:DF:3A:84:7C:53
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer:       /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial:       019354D14706366D283CF832E3AB7BF2813A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 17:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:21 +0000
Files and hashes:         1: QUMktcgPykbBd3K5nt8UJBMYkZM.roa (hash: /KlPyuPcpYBWK9xeQCsd21HhaoH/UWwxT6jtbT/WlRM=)
                          2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: wHiLr7ckvGCLPOh/AMBSNGHzxTnaHZdiJmYY9n8mQXs=)
                          3: w9-I21vs_lohfqSvTej74vIQ4pc.roa (hash: QfgaY9zuBSEd0KM+D4OCTjuoVcRcqjP9a8iNi9wak48=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:47:06:36:6d:28:3c:f8:32:e3:ab:7b:f2:81:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
        Validity
            Not Before: Nov 22 17:00:21 2024 GMT
            Not After : Nov 23 17:00:21 2024 GMT
        Subject: CN=438185e2ad52e6d2086db948ac48cddf3a847c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:d9:fb:ef:10:c3:17:41:9b:3c:02:26:7b:
                    cf:7f:0d:9c:15:fc:d8:fb:54:ce:f7:48:61:00:e2:
                    b9:7a:bb:c6:c6:25:58:c0:0d:df:39:a6:65:0d:08:
                    42:51:75:3b:14:9b:83:98:27:35:82:59:0f:67:eb:
                    b1:22:24:ab:7c:88:52:bf:01:85:b6:a2:99:fd:0b:
                    84:d1:53:43:d2:05:15:c2:e7:4f:40:1d:ce:35:3d:
                    1c:a2:6f:ce:dc:af:4a:eb:92:db:1a:2f:20:bf:96:
                    97:e2:7f:ee:ac:89:87:4b:4a:14:02:36:dc:d9:c9:
                    ac:6d:2a:f9:d8:f5:16:94:f9:23:a9:47:7e:9e:27:
                    33:e3:55:b8:28:ae:3d:30:27:4a:b8:01:4d:cf:90:
                    43:83:94:c9:57:0d:84:be:b9:74:76:62:f2:9b:0c:
                    94:7b:43:93:de:b6:f8:a8:5e:43:89:75:b9:6e:c6:
                    29:8a:51:a2:79:9f:9f:77:a8:3b:61:f8:d2:f8:3f:
                    41:5d:2d:20:86:64:60:10:68:5f:03:77:dd:f2:94:
                    fd:18:a4:b2:89:4d:a3:bb:79:41:0e:35:bf:1c:1a:
                    ee:f9:1d:09:b6:b3:c8:d5:74:26:53:9f:54:79:a6:
                    eb:c5:e0:30:20:24:3b:a4:82:21:2f:af:4d:1f:d7:
                    08:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:81:85:E2:AD:52:E6:D2:08:6D:B9:48:AC:48:CD:DF:3A:84:7C:53
            X509v3 Authority Key Identifier:
                keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a4:ee:50:ae:35:2c:a5:10:db:08:1e:6c:ca:ff:5e:ef:24:
         fa:1b:aa:34:83:0e:4f:db:b7:e0:a4:51:7a:69:e7:88:26:fb:
         fb:e5:b7:e7:4b:8f:d7:1c:92:d0:00:f0:43:3b:83:1c:52:50:
         57:58:79:ce:95:25:a2:22:95:31:28:a8:2a:48:b0:85:18:4d:
         40:6d:6d:5f:31:25:84:0d:20:d4:a2:02:81:11:d6:7b:58:68:
         0d:7e:7a:97:b4:25:98:23:67:07:fa:a1:0c:6b:c5:18:eb:6f:
         5a:5c:c7:a4:b3:a5:fc:10:8d:72:65:db:2f:62:c8:de:35:cc:
         26:bb:a7:7b:79:69:f4:56:f6:5b:bc:de:b3:61:9d:db:4f:e7:
         9f:60:8d:2b:89:ee:a0:67:d8:f4:59:7d:be:f0:bf:ef:3c:77:
         e1:26:1b:14:8b:b8:96:67:35:4d:1f:f1:09:13:f1:c2:aa:04:
         f9:33:bc:f2:56:58:ce:ca:67:ab:e3:8d:c6:7b:e7:cc:c3:87:
         5d:3f:57:77:c4:87:fe:c0:d8:1c:cf:47:3f:73:eb:59:d0:f9:
         e0:59:a7:c6:ef:72:12:fc:df:ca:14:18:98:89:ae:ce:d6:9b:
         d6:45:97:f4:9d:ce:6d:59:83:8a:88:a9:28:0f:67:de:02:19:
         73:c3:b5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:42:54 2024 by rpki-client on console-fra.rpki-client.org