Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File:                     ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier:          hcsqjlO1GHkYNKUM+gpS2k7K7bikmt9WEws+kXa0tFI=
Subject key identifier:   5B:91:8D:28:87:C8:A1:B9:81:F3:34:E1:8F:E4:A6:34:E5:8E:AF:8B
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer:       /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial:       019357D25E452BABD375D02DA68C868FA036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number:          0749
Signing time:             Sat 23 Nov 2024 07:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:24 +0000
Files and hashes:         1: 0mEloQ-vg-lMDokWyZZNhb8WvJA.roa (hash: cSY8cb9OPa40lnNS/4umgwKdGglEBaun8PPiL6BqF2g=)
                          2: imZ28BQtqFjnRsj20hXG5Akxjsc.roa (hash: azn3GGs6ZzTZdxKRVBxzcKv4lSz5+AoDd7pnnkP7TEc=)
                          3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: g83l7xYEAh9L7nJOVQscZDKfWLQU8l3/4G+3KT9X4e8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:5e:45:2b:ab:d3:75:d0:2d:a6:8c:86:8f:a0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
        Validity
            Not Before: Nov 23 07:00:24 2024 GMT
            Not After : Nov 24 07:00:24 2024 GMT
        Subject: CN=5b918d2887c8a1b981f334e18fe4a634e58eaf8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ba:bc:68:4e:a9:10:1c:e9:f1:5f:c8:42:1c:
                    8d:9e:f8:81:45:6e:5e:64:d4:ef:cc:27:a0:7e:81:
                    15:86:85:b7:8a:2b:5a:41:d6:77:22:98:d7:bd:80:
                    77:ff:1a:9c:df:22:e7:dd:08:05:da:24:b8:e3:f4:
                    5e:36:df:0c:f7:8d:bd:66:61:79:aa:3c:d8:a4:97:
                    a3:51:85:05:14:59:dc:dc:0a:67:32:99:97:a4:c5:
                    b4:d4:c5:76:4d:a5:cc:9a:15:7e:dd:35:9a:01:09:
                    ae:74:fb:0a:6d:2a:c6:72:92:c4:a3:66:95:4f:eb:
                    59:35:b7:bb:d0:e8:91:0b:ce:e9:ee:81:65:12:bb:
                    31:af:c5:95:88:8a:55:67:6c:06:60:f2:c6:18:81:
                    fa:99:69:fe:9e:9c:73:02:4b:d4:9f:21:36:65:71:
                    e6:4c:54:4b:a4:7a:d9:e7:c7:f4:f7:97:42:61:1f:
                    27:1d:73:46:88:00:04:82:41:7e:2b:30:12:16:6d:
                    d0:4b:3e:ca:1e:d1:89:ef:b8:48:6e:20:0d:26:86:
                    cb:e2:4b:a8:61:2d:dd:73:d4:d9:c2:1f:ad:cd:3e:
                    8c:92:a1:92:a9:3b:00:18:c7:64:71:9c:ae:1a:60:
                    c3:78:11:ce:82:11:25:ac:27:88:ed:1f:11:1e:74:
                    22:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:91:8D:28:87:C8:A1:B9:81:F3:34:E1:8F:E4:A6:34:E5:8E:AF:8B
            X509v3 Authority Key Identifier:
                keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:24:fc:75:11:c4:34:eb:17:2e:aa:26:dc:2d:2e:93:8f:dc:
         63:81:f9:43:13:3a:7c:04:8a:70:00:2d:eb:17:62:9c:2b:ba:
         ca:83:e0:bc:df:50:75:ad:2d:c8:4e:ca:64:60:de:39:aa:c3:
         d7:3c:7c:aa:a4:85:7c:cc:71:19:28:a6:76:aa:88:8c:fc:bc:
         b4:8f:43:c0:05:01:d0:39:45:14:8e:89:24:99:5d:e8:a6:2b:
         60:54:e8:fe:2a:0c:24:51:c9:42:37:5a:95:a9:44:c8:da:78:
         76:26:b3:7b:98:2b:36:a4:de:e1:cf:3b:c7:f1:78:05:b1:3b:
         4a:8a:8c:11:3c:42:45:00:2a:01:54:1e:01:5a:b1:56:f5:9c:
         06:c5:a5:dc:ce:4a:fd:c8:44:cb:e4:9d:de:89:80:28:2c:22:
         a5:eb:80:61:14:15:01:42:b5:55:79:12:2a:cc:91:7c:fe:cd:
         72:8d:7f:fa:a4:5a:36:02:a4:64:b8:58:5f:d7:26:22:c1:00:
         2e:7b:1b:88:d2:6f:80:64:a5:95:0c:6f:0d:72:32:86:ab:00:
         62:6b:ed:38:1f:ab:2b:8b:12:42:91:24:79:7d:cd:f5:43:52:
         c4:bb:f1:33:83:5a:aa:c4:62:68:c1:ac:29:18:73:a6:a4:d2:
         d9:4e:e3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:00 2024 by rpki-client on console-fra.rpki-client.org