Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
File:                     UFZxLM-od6u3YMt34nBBd0ywRzk.mft (raw, json)
Hash identifier:          QDeyKyMtDNwcjvY0gGUWCjQUkWSs+KYMHdBBo8Oe244=
Subject key identifier:   4F:5A:4D:76:C7:04:EC:A9:C3:C1:FB:6C:E4:E8:D5:C8:5D:C1:F6:AA
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Certificate issuer:       /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial:       01901E8F79F45822BB00A61BCAF38C99690A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 01:00:37 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:37 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:37 +0000
Files and hashes:         1: 2_gacoHrW3LVNKuQlX4pA3fYCPI.roa (hash: n1e6RrqVe2NsRvpZhGkR2GbsN2VRbQifKBnWJ3zv+W4=)
                          2: UFZxLM-od6u3YMt34nBBd0ywRzk.crl (hash: qzODdaPI4AJsz5XGlm9GF+UPlzKZfCmZwdHzL/iIxrU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:79:f4:58:22:bb:00:a6:1b:ca:f3:8c:99:69:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
        Validity
            Not Before: Jun 16 01:00:37 2024 GMT
            Not After : Jun 17 01:00:37 2024 GMT
        Subject: CN=4f5a4d76c704eca9c3c1fb6ce4e8d5c85dc1f6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:38:3a:01:03:be:bf:3c:9a:45:40:d2:8d:
                    32:97:78:2c:a6:ca:d2:03:3e:f3:68:4f:91:39:d2:
                    2d:ac:b0:41:7f:f0:de:46:cc:01:27:13:88:80:52:
                    aa:0c:2b:b9:bb:93:ad:b6:bd:5e:d7:63:54:f3:73:
                    74:6f:f3:63:0f:35:c1:e1:5d:a3:fa:f4:51:94:ef:
                    aa:49:75:c7:84:ec:51:ce:83:d4:34:dc:17:0d:ee:
                    2e:4d:c8:a5:67:73:2f:3b:19:ec:8b:3c:97:0d:94:
                    94:98:9c:de:c6:2c:2d:35:e6:e4:05:e9:48:10:1d:
                    e7:fc:17:a3:fc:12:19:6f:04:28:bc:67:73:2d:62:
                    a2:0c:d7:b1:d7:53:9f:fb:46:90:53:71:30:71:e5:
                    1e:f0:59:74:d3:6b:c5:85:e7:db:e8:2e:b0:33:c3:
                    ed:2e:7c:d7:f1:c2:0e:fc:00:55:74:0d:75:a2:6e:
                    15:98:cf:4e:33:b5:37:10:5d:b1:0f:b7:1d:98:55:
                    c7:6c:0d:7c:5d:04:23:c9:08:0d:68:11:3c:e3:e3:
                    c7:d4:c5:6a:34:95:4f:b4:52:e4:6e:4f:d8:a5:2c:
                    46:ef:2a:75:5d:f5:d1:12:0e:77:c6:ed:ad:04:3a:
                    91:6e:ad:3c:98:d2:c2:fb:d6:a8:17:35:5a:cc:c3:
                    0a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5A:4D:76:C7:04:EC:A9:C3:C1:FB:6C:E4:E8:D5:C8:5D:C1:F6:AA
            X509v3 Authority Key Identifier:
                keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f7:06:3e:64:bb:0a:01:fd:40:a3:ba:02:7b:66:c0:05:ee:
         25:9e:1f:af:76:c4:c0:32:f3:16:e0:7a:3c:48:01:a1:61:64:
         6f:1f:d7:47:c6:c1:50:03:6e:06:60:4d:b4:cb:31:dc:a8:b2:
         60:21:a2:b0:25:b7:ac:d4:6e:d9:60:8a:a0:9a:bc:c3:0e:6f:
         0f:8a:69:35:27:c6:76:0b:6c:ce:6d:25:06:a7:97:1b:5f:ee:
         0c:09:3c:2c:d3:c3:38:ac:a2:2d:68:35:21:12:3b:82:1a:8c:
         f2:0c:2f:20:aa:a4:e7:fb:f4:55:c3:64:28:b5:e1:15:72:f6:
         90:37:a2:3a:ee:54:87:1c:04:c4:17:ce:10:5b:a6:be:5b:53:
         50:95:71:be:fc:dc:89:de:21:0d:13:06:ec:58:a4:f0:bd:af:
         fb:95:d0:6c:44:b5:cf:2d:f5:af:21:ba:7f:d5:0d:ae:87:21:
         e2:33:6d:5b:ed:db:ad:55:7f:72:0c:f5:28:e1:55:a2:c4:b4:
         dd:77:c9:44:16:52:7c:e4:21:4f:e9:79:66:70:25:c5:9e:60:
         6b:40:a1:6b:42:4d:52:d8:ed:87:78:06:df:4a:6d:e0:b7:48:
         08:0f:a5:83:89:e8:9d:73:51:67:fa:a6:83:81:47:95:89:2e:
         5d:07:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:59:35 2024 by rpki-client on console-fra.rpki-client.org