Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.mft
File:                     UFAmkoRndw0cL6fOupihjDjWVW0.mft (raw, json)
Hash identifier:          laF1i86luRwwb3EcDeRE47DOGGVVVj14sYq+/j5TYvk=
Subject key identifier:   51:11:63:99:55:93:05:00:72:89:1D:0B:18:C0:24:08:46:A2:E9:AD
Authority key identifier: 50:50:26:92:84:67:77:0D:1C:2F:A7:CE:BA:98:A1:8C:38:D6:55:6D
Certificate issuer:       /CN=505026928467770d1c2fa7ceba98a18c38d6556d
Certificate serial:       01901EFD5CC1180F8785DA7F5DDA8D84CDE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFAmkoRndw0cL6fOupihjDjWVW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.mft
Manifest number:          067A
Signing time:             Sun 16 Jun 2024 03:00:38 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:38 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:38 +0000
Files and hashes:         1: UFAmkoRndw0cL6fOupihjDjWVW0.crl (hash: 8fA0laopnR89wYsCe62dQ/RXLO/3uijgwpzSwMbyZqA=)
                          2: yw2JkSPKCSYd3eCiKgknHiJdpBY.roa (hash: scIWHoPB9Ul3jAAphjEomk0+6hn0k7M1Z++42d+t8DU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFAmkoRndw0cL6fOupihjDjWVW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:5c:c1:18:0f:87:85:da:7f:5d:da:8d:84:cd:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505026928467770d1c2fa7ceba98a18c38d6556d
        Validity
            Not Before: Jun 16 03:00:38 2024 GMT
            Not After : Jun 17 03:00:38 2024 GMT
        Subject: CN=511163995593050072891d0b18c0240846a2e9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:15:aa:b3:64:99:0d:d3:58:0e:df:72:1b:09:
                    26:f2:74:5f:16:c6:01:d7:f2:6b:e4:a1:4f:5d:5e:
                    fd:25:bd:d1:e6:70:0b:c2:ea:4d:32:84:c9:cb:e5:
                    d4:c6:6c:aa:a0:bb:10:23:ff:e4:8c:c9:77:b0:1b:
                    cc:ae:ea:00:4c:c1:f5:2c:d1:1d:98:37:71:e7:3a:
                    92:5d:cf:41:f1:33:76:7f:1c:2e:a3:2d:24:57:33:
                    41:99:5f:26:14:d8:32:45:5e:8d:57:98:98:87:d6:
                    0d:98:57:30:1e:8e:11:50:f8:7b:ab:ca:5b:7b:df:
                    7a:0f:3c:31:03:14:52:53:a5:26:e7:2b:fb:8e:39:
                    38:c3:89:f5:a2:55:47:de:23:59:21:f5:76:29:47:
                    6e:33:33:d6:b9:99:c3:3e:72:a0:85:9f:bd:4d:f2:
                    1c:69:51:85:ce:8c:92:fe:ba:fe:fd:ff:4e:9b:b5:
                    6f:5d:84:22:1b:e0:b6:cb:5f:2e:4a:07:87:b0:79:
                    ab:1f:2d:ae:d5:f0:f9:46:3c:c2:f2:37:88:91:ed:
                    cc:f9:be:cb:ba:22:ce:bc:ac:b6:1b:c5:7c:96:04:
                    93:d9:86:03:8c:d3:92:80:3b:99:2b:96:f8:b6:e8:
                    34:f2:8d:ea:fc:2b:55:1c:2c:1f:aa:24:3f:f7:63:
                    67:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:11:63:99:55:93:05:00:72:89:1D:0B:18:C0:24:08:46:A2:E9:AD
            X509v3 Authority Key Identifier:
                keyid:50:50:26:92:84:67:77:0D:1C:2F:A7:CE:BA:98:A1:8C:38:D6:55:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFAmkoRndw0cL6fOupihjDjWVW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e7:ca:95:35:4f:d0:06:f8:84:cb:a8:42:f9:1f:dd:11:f7:
         01:0d:7b:82:80:87:42:77:60:36:34:8c:f5:0e:45:df:14:9a:
         83:05:ab:39:bc:a8:83:77:0d:bd:c7:55:c6:86:a2:c2:08:1b:
         99:ff:c9:79:f5:5b:86:99:e9:88:5c:81:8b:08:30:fc:64:4f:
         3e:db:34:ca:30:47:ba:24:c0:93:0e:62:71:49:56:e5:13:42:
         79:5a:c6:74:d9:5b:9a:69:b8:15:1c:ba:35:d9:39:14:ed:1e:
         99:f1:f1:1c:ce:c1:0b:5c:04:86:9d:59:da:65:04:5a:df:15:
         16:45:ba:9b:d8:39:b2:e3:2c:54:95:ec:23:63:58:a2:6c:c6:
         72:5a:a2:a3:7e:b1:39:29:7b:69:11:7a:c2:bc:c2:5f:f5:cf:
         e9:ef:0e:a8:31:73:f7:b4:86:de:61:ff:fc:b8:f0:57:cf:ef:
         32:c5:6a:99:0a:d1:56:b6:e5:2b:fc:79:00:24:df:c2:79:1f:
         fb:63:94:8b:3a:2e:78:ae:f1:2c:83:aa:72:27:00:b7:30:c6:
         ca:2d:3d:fb:43:0c:8a:b8:c4:82:0e:9b:84:47:a7:93:1e:0c:
         e6:99:6f:c2:00:d5:0b:76:2e:c7:61:4b:56:a5:a3:63:25:a9:
         9d:18:e5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:47:27 2024 by rpki-client on console-fra.rpki-client.org