Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft
File:                     UBEgdwLICEl5tIPPyG3vdUPgXO0.mft (raw, json)
Hash identifier:          Au+WMc/GnTNnHfnZ9F6GMIotm8bL6PkV76hj/rRNHPE=
Subject key identifier:   F2:8C:E2:F5:B5:63:6D:A5:AD:B3:C0:45:65:FC:99:53:0D:51:C1:AC
Authority key identifier: 50:11:20:77:02:C8:08:49:79:B4:83:CF:C8:6D:EF:75:43:E0:5C:ED
Certificate issuer:       /CN=5011207702c8084979b483cfc86def7543e05ced
Certificate serial:       019037083D8B46893E52315CCED749524506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBEgdwLICEl5tIPPyG3vdUPgXO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft
Manifest number:          05FC
Signing time:             Thu 20 Jun 2024 19:03:25 +0000
Manifest this update:     Thu 20 Jun 2024 19:03:25 +0000
Manifest next update:     Fri 21 Jun 2024 19:03:25 +0000
Files and hashes:         1: UBEgdwLICEl5tIPPyG3vdUPgXO0.crl (hash: IIxa7ZUYDZLzif0YoM35Cx4VSzbZZSyKD+f7oRHcuGg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBEgdwLICEl5tIPPyG3vdUPgXO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:08:3d:8b:46:89:3e:52:31:5c:ce:d7:49:52:45:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5011207702c8084979b483cfc86def7543e05ced
        Validity
            Not Before: Jun 20 19:03:25 2024 GMT
            Not After : Jun 21 19:03:25 2024 GMT
        Subject: CN=f28ce2f5b5636da5adb3c04565fc99530d51c1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:6d:88:75:8d:20:29:f6:7c:2a:ed:be:53:
                    79:d2:c5:0b:70:cc:ab:67:7d:e7:6e:75:5d:76:94:
                    62:04:c3:de:08:65:01:a2:50:1f:cd:73:48:d5:2a:
                    ce:1a:c4:dd:ed:d1:2a:ce:a4:4c:e2:d6:62:5a:cd:
                    67:44:aa:b2:f7:30:7b:50:c3:52:0a:02:c5:ac:3d:
                    7a:5b:77:35:7f:e0:7e:e1:91:11:9a:22:1c:28:c4:
                    e8:32:4a:e2:56:18:70:c2:2f:fa:47:d4:8f:43:ba:
                    75:b9:8a:65:85:8f:00:0a:7e:69:1a:32:f3:99:d8:
                    a4:3d:78:1b:fb:08:2c:71:5d:02:ea:ef:b9:fe:b8:
                    fa:02:29:5a:e7:50:9f:4f:7b:f8:6e:a4:55:14:75:
                    40:26:a4:41:d4:4d:b2:c8:82:c1:36:7d:72:ad:61:
                    56:e8:3a:b1:c1:8b:af:2e:d0:33:7f:e1:4c:f6:16:
                    a8:30:0d:4c:79:df:d0:91:30:44:a0:10:0e:e9:ed:
                    05:a2:01:ec:79:29:fa:85:5c:17:98:8e:46:64:3b:
                    de:b9:38:41:d3:50:72:3b:5d:f8:d2:67:99:78:4f:
                    e9:e8:8f:c0:54:ce:48:34:dc:c1:a6:1c:10:67:28:
                    46:3a:b5:0f:f5:4d:cc:06:c4:32:5d:52:8c:74:62:
                    b1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8C:E2:F5:B5:63:6D:A5:AD:B3:C0:45:65:FC:99:53:0D:51:C1:AC
            X509v3 Authority Key Identifier:
                keyid:50:11:20:77:02:C8:08:49:79:B4:83:CF:C8:6D:EF:75:43:E0:5C:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBEgdwLICEl5tIPPyG3vdUPgXO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:13:e9:70:e4:4b:fc:f0:d4:8f:7d:06:1c:58:8f:85:59:c6:
         31:ca:be:52:7f:a6:39:5e:db:59:f2:6f:2b:e6:de:90:c8:98:
         36:3f:f9:bd:7b:03:2f:a6:10:88:79:ab:eb:12:1c:03:93:34:
         d9:a2:93:b2:ea:fe:63:d2:76:ba:19:85:e5:92:64:db:2e:d3:
         ff:29:7e:6c:00:ac:7e:6a:fd:2a:6f:37:99:ec:2a:4c:fd:87:
         69:f8:12:50:e3:66:9b:83:2f:5f:2e:65:fb:93:c5:59:c6:88:
         a0:0a:ae:54:5b:87:e5:b8:60:21:1a:bb:da:f9:5c:cf:00:bb:
         37:45:aa:0f:c4:60:8b:11:ba:d3:23:9b:be:42:78:df:2e:94:
         02:a8:73:97:e0:d7:57:48:d4:15:6b:ff:68:f4:c5:77:01:6d:
         70:84:42:a2:ba:48:81:93:4e:3b:60:a1:04:29:9f:5d:98:b5:
         ec:b4:45:aa:60:68:4d:d0:ec:f1:6a:01:46:92:97:e7:c9:12:
         01:5f:e5:2c:96:2c:c7:91:82:b4:05:b8:30:3c:49:dc:a8:06:
         ba:c5:c3:03:e8:c4:ca:8f:e8:e2:ea:d5:f5:68:f7:ba:35:56:
         27:97:2a:e9:4a:d2:fe:39:2c:6c:cf:73:a0:76:37:b1:58:8e:
         b3:4b:b4:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA3CD2LRok+UjFcztdJUkUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTEyMDc3MDJjODA4NDk3OWI0ODNjZmM4NmRlZjc1NDNl
MDVjZWQwHhcNMjQwNjIwMTkwMzI1WhcNMjQwNjIxMTkwMzI1WjAzMTEwLwYDVQQD
EyhmMjhjZTJmNWI1NjM2ZGE1YWRiM2MwNDU2NWZjOTk1MzBkNTFjMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP1tiHWNICn2fCrtvlN50sULcMyr
Z33nbnVddpRiBMPeCGUBolAfzXNI1SrOGsTd7dEqzqRM4tZiWs1nRKqy9zB7UMNS
CgLFrD16W3c1f+B+4ZERmiIcKMToMkriVhhwwi/6R9SPQ7p1uYplhY8ACn5pGjLz
mdikPXgb+wgscV0C6u+5/rj6Aila51CfT3v4bqRVFHVAJqRB1E2yyILBNn1yrWFW
6DqxwYuvLtAzf+FM9haoMA1Med/QkTBEoBAO6e0FogHseSn6hVwXmI5GZDveuThB
01ByO1340meZeE/p6I/AVM5INNzBphwQZyhGOrUP9U3MBsQyXVKMdGKxtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKM4vW1Y22lrbPARWX8mVMNUcGsMB8GA1UdIwQY
MBaAFFARIHcCyAhJebSDz8ht73VD4FztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJFZ2R3TElDRWw1dElQUHlHM3ZkVVBnWE8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy85OTcyNjUtNjlhZC00YjRkLWI3Mzgt
ZjczM2UwZjQwNWFkLzEvVUJFZ2R3TElDRWw1dElQUHlHM3ZkVVBnWE8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy85OTcyNjUtNjlhZC00YjRkLWI3MzgtZjczM2UwZjQwNWFk
LzEvVUJFZ2R3TElDRWw1dElQUHlHM3ZkVVBnWE8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRPpcORL
/PDUj30GHFiPhVnGMcq+Un+mOV7bWfJvK+bekMiYNj/5vXsDL6YQiHmr6xIcA5M0
2aKTsur+Y9J2uhmF5ZJk2y7T/yl+bACsfmr9Km83mewqTP2HafgSUONmm4MvXy5l
+5PFWcaIoAquVFuH5bhgIRq72vlczwC7N0WqD8RgixG60yObvkJ43y6UAqhzl+DX
V0jUFWv/aPTFdwFtcIRCorpIgZNOO2ChBCmfXZi17LRFqmBoTdDs8WoBRpKX58kS
AV/lLJYsx5GCtAW4MDxJ3KgGusXDA+jEyo/o4urV9Wj3ujVWJ5cq6UrS/jksbM9z
oHY3sViOs0u0RQ==
-----END CERTIFICATE-----
Generated at Fri Jun 21 04:01:15 2024 by rpki-client on console-fra.rpki-client.org