Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.mft
File:                     UFAmkoRndw0cL6fOupihjDjWVW0.mft (raw, json)
Hash identifier:          S+Lo+4f7dZYQVHPhu+bkLvFjqksIW1q1t7iFrr2EJdc=
Subject key identifier:   EA:DC:41:D6:45:34:7F:C5:E4:00:E8:69:1F:7A:F9:D3:8D:C9:A7:76
Authority key identifier: 50:50:26:92:84:67:77:0D:1C:2F:A7:CE:BA:98:A1:8C:38:D6:55:6D
Certificate issuer:       /CN=505026928467770d1c2fa7ceba98a18c38d6556d
Certificate serial:       0190497A1A2C9B8BB35195B986FFAD0B14A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFAmkoRndw0cL6fOupihjDjWVW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.mft
Manifest number:          0690
Signing time:             Mon 24 Jun 2024 09:00:57 +0000
Manifest this update:     Mon 24 Jun 2024 09:00:57 +0000
Manifest next update:     Tue 25 Jun 2024 09:00:57 +0000
Files and hashes:         1: UFAmkoRndw0cL6fOupihjDjWVW0.crl (hash: eXkWZetO+YH6WTK2rbZtTJIhGxt6+WIPBqQtusAS9BA=)
                          2: yw2JkSPKCSYd3eCiKgknHiJdpBY.roa (hash: scIWHoPB9Ul3jAAphjEomk0+6hn0k7M1Z++42d+t8DU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFAmkoRndw0cL6fOupihjDjWVW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:7a:1a:2c:9b:8b:b3:51:95:b9:86:ff:ad:0b:14:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505026928467770d1c2fa7ceba98a18c38d6556d
        Validity
            Not Before: Jun 24 09:00:57 2024 GMT
            Not After : Jun 25 09:00:57 2024 GMT
        Subject: CN=eadc41d645347fc5e400e8691f7af9d38dc9a776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:67:e9:4b:a1:3f:37:5b:75:1e:de:f5:82:ab:
                    f3:fd:a5:d0:9d:42:71:ff:5e:19:8a:93:60:fd:10:
                    bb:e9:24:ff:56:1a:a8:36:3a:31:a4:0a:67:82:57:
                    c4:fc:fc:92:a6:06:75:f1:74:3d:05:b0:4b:16:a3:
                    17:8c:e2:f5:0f:63:96:5c:1d:83:9f:da:4c:14:68:
                    c2:5f:da:87:5d:1a:27:62:0a:1d:15:76:93:1c:48:
                    2f:ce:03:c7:3d:f1:79:b2:6c:96:65:b9:43:96:6b:
                    6f:cb:f2:48:80:14:c7:7a:de:7c:68:c6:9b:ff:49:
                    26:2c:60:f3:95:17:75:43:e8:8c:c1:4a:6c:8e:b4:
                    d6:3f:13:fb:de:e7:4d:04:9d:80:80:3f:8a:ce:f7:
                    bc:7e:2c:0d:16:f4:4f:a5:80:eb:ec:33:86:1c:2c:
                    d9:66:41:ed:d8:b6:24:1c:45:92:b2:d4:58:f2:1c:
                    cf:09:cf:5e:65:43:ef:1b:a0:ad:52:81:fe:2e:3c:
                    03:1e:95:5a:df:3f:11:cb:d6:c4:da:49:4c:8e:00:
                    f2:9d:3d:44:f2:da:ca:03:d6:d2:87:84:d7:7d:aa:
                    23:f8:6d:90:49:37:88:14:d0:58:72:e0:ac:ed:72:
                    19:e4:5b:55:11:60:6e:81:d4:6b:ed:c8:f2:13:61:
                    62:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DC:41:D6:45:34:7F:C5:E4:00:E8:69:1F:7A:F9:D3:8D:C9:A7:76
            X509v3 Authority Key Identifier:
                keyid:50:50:26:92:84:67:77:0D:1C:2F:A7:CE:BA:98:A1:8C:38:D6:55:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFAmkoRndw0cL6fOupihjDjWVW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:3a:8a:9b:6c:49:85:f6:b0:86:5e:51:5c:f5:dc:a2:d3:12:
         3d:8e:d9:9b:a3:03:74:77:f5:25:40:01:6c:85:c5:86:9a:70:
         73:f5:19:5e:9a:a8:6e:4f:cb:67:8b:b7:a5:a6:6e:69:74:6a:
         b2:87:f4:6d:0c:a7:d9:73:47:9a:81:7b:02:c7:90:f3:6b:f7:
         96:34:bd:e6:c7:33:f9:97:0c:2b:9b:c9:75:1b:15:68:30:2a:
         a9:b2:90:9e:f8:11:31:b0:81:e0:61:42:4b:37:b9:84:da:59:
         0a:21:6a:c9:a5:e0:f5:1d:73:33:78:d5:f1:95:80:d2:4b:cb:
         28:b1:4e:1c:e5:3a:1b:0e:f5:27:74:e1:47:03:52:37:a6:2e:
         92:c6:3a:22:8f:93:d2:d1:a0:9d:96:d2:1b:53:df:bd:3d:ae:
         72:18:06:e6:29:8c:26:0e:f8:a0:56:b7:f9:22:74:87:2b:f7:
         81:e0:c9:f0:5f:51:19:a9:6e:9f:49:3f:33:3b:1f:f4:d9:0a:
         65:80:5f:8f:79:20:73:b3:1d:6e:aa:76:fd:c7:50:57:79:81:
         0a:d2:3d:f5:9b:5b:58:e3:05:a8:56:42:e2:bf:5a:c1:fd:cb:
         6c:1e:aa:40:26:27:51:14:67:a1:e2:c1:cb:14:04:90:f5:b9:
         fe:9d:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:54:35 2024 by rpki-client on console-fra.rpki-client.org