Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
File:                     Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft (raw, json)
Hash identifier:          P2p9++Wid5wul4N/1KmHemI1VjnFVJ4kP/uTdgDpYCI=
Subject key identifier:   59:AC:88:76:81:6F:1D:D2:BD:24:D3:3C:DB:21:06:AE:6F:96:C0:B7
Authority key identifier: 52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04
Certificate issuer:       /CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104
Certificate serial:       0194BAF283C5E4CEF80242406958CB4C4D6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 06:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:43 +0000
Files and hashes:         1: 9JadLiuorP5WBtAK4ahko9XzHjQ.roa (hash: qnkmqt5DjArPix3ByqvfUIsWSJTvM73SLxqKVoYiGls=)
                          2: Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl (hash: IGklI3GKXiG3n73zltBFu3h/154oYUqPeqjvhMneRH0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:83:c5:e4:ce:f8:02:42:40:69:58:cb:4c:4d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104
        Validity
            Not Before: Jan 31 06:00:43 2025 GMT
            Not After : Feb  1 06:00:43 2025 GMT
        Subject: CN=59ac8876816f1dd2bd24d33cdb2106ae6f96c0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d4:e0:3c:4a:7b:81:32:06:30:04:5d:cd:70:
                    22:05:23:a7:cc:c3:9b:6a:cd:27:fd:bd:db:b0:54:
                    dd:92:ed:21:6b:32:0a:c8:e5:a8:6a:38:e4:51:b4:
                    a0:0e:70:e7:54:43:e3:a8:ea:dd:e8:0e:b8:a8:3f:
                    be:bf:6d:f5:81:8c:90:7c:5b:6e:c5:d7:01:b5:93:
                    fd:67:c1:3c:dc:24:0d:eb:e9:a0:f8:0a:37:c2:a9:
                    b1:47:88:22:c8:16:9c:e5:10:a0:f5:b3:f7:d6:2e:
                    0a:f7:c7:75:f6:52:fc:f1:f3:d7:92:1a:6f:52:8a:
                    fb:0e:41:e0:96:c3:8b:80:5d:e0:22:3d:7a:2c:51:
                    4d:f2:d1:92:bb:53:ee:a5:13:b4:68:04:ae:a0:95:
                    cc:61:de:67:9b:6d:c9:5f:1b:10:d3:40:5e:3d:7e:
                    60:50:d4:94:f9:7f:7d:8e:64:f0:3f:a4:f7:97:00:
                    e4:98:d7:53:1f:a7:6d:0b:96:65:1f:97:74:11:4c:
                    f5:c0:08:2b:72:63:a9:6b:eb:f6:df:85:a9:ab:2c:
                    3f:e5:20:79:8e:0f:f4:bd:52:3e:06:1e:75:e2:9f:
                    53:29:c0:0d:36:06:c4:8e:b7:f9:50:28:32:72:0a:
                    25:9b:c6:58:23:94:26:95:8b:61:b0:5b:b3:5d:8a:
                    ae:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AC:88:76:81:6F:1D:D2:BD:24:D3:3C:DB:21:06:AE:6F:96:C0:B7
            X509v3 Authority Key Identifier:
                keyid:52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:17:a7:8c:fd:da:1d:65:fe:10:11:c0:1d:66:79:f2:65:de:
         b7:cc:ab:7a:72:32:26:f6:80:2a:2a:a7:78:07:b8:2b:51:ee:
         4b:34:20:d6:3b:12:79:89:1b:82:da:bb:1e:30:2e:17:c2:a5:
         a0:75:e7:eb:c0:11:e1:fc:82:94:0e:15:33:c5:cb:0a:6c:5d:
         40:f3:39:9c:17:3d:2b:29:1e:af:4d:24:83:e7:44:52:c8:c6:
         97:bb:8d:5b:63:a1:ce:e1:f2:f2:54:ec:5a:68:49:31:74:5e:
         fa:e5:6f:b2:8f:51:06:75:e6:03:26:b7:59:97:7e:17:0f:5e:
         16:44:0e:d4:b3:cd:db:8f:0f:9d:29:a0:8b:91:f4:e2:7b:d9:
         82:cc:d4:59:f0:be:e6:a3:fc:87:9e:c5:f6:49:a0:11:63:b4:
         a4:a7:96:20:43:da:5d:d7:a0:0e:ac:c7:04:ac:d2:3b:9f:e6:
         f2:13:f2:8d:10:62:73:b9:9c:f0:da:52:00:50:1d:0b:9c:53:
         8c:50:af:57:b7:9e:96:d9:92:01:e5:a2:ed:58:75:23:e9:08:
         d5:b6:80:01:20:da:35:44:b9:66:5a:9b:4b:4c:eb:a3:6d:5f:
         5c:65:b2:37:a1:24:e5:cd:c6:ea:62:b2:23:cd:b1:94:9a:74:
         14:d6:53:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:08 2025 by rpki-client on console-fra.rpki-client.org