Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft
File:                     UBEgdwLICEl5tIPPyG3vdUPgXO0.mft (raw, json)
Hash identifier:          ztG7rP8Sg6K7WlGnd23OKdysZ1+/M06qeR8RYrn42x8=
Subject key identifier:   12:53:87:AB:89:B3:82:BF:BE:51:3A:F7:49:C4:86:36:90:83:DC:B5
Authority key identifier: 50:11:20:77:02:C8:08:49:79:B4:83:CF:C8:6D:EF:75:43:E0:5C:ED
Certificate issuer:       /CN=5011207702c8084979b483cfc86def7543e05ced
Certificate serial:       01901DED0D0331820FFFF32F3F32023B9BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBEgdwLICEl5tIPPyG3vdUPgXO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft
Manifest number:          05EF
Signing time:             Sat 15 Jun 2024 22:03:12 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:12 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:12 +0000
Files and hashes:         1: UBEgdwLICEl5tIPPyG3vdUPgXO0.crl (hash: NDTmfaQqfphRUAAwvCo2Roc56aBrlDlziLIAcow4JXA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBEgdwLICEl5tIPPyG3vdUPgXO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:0d:03:31:82:0f:ff:f3:2f:3f:32:02:3b:9b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5011207702c8084979b483cfc86def7543e05ced
        Validity
            Not Before: Jun 15 22:03:12 2024 GMT
            Not After : Jun 16 22:03:12 2024 GMT
        Subject: CN=125387ab89b382bfbe513af749c486369083dcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:82:4a:1a:e9:46:e4:45:40:bb:39:8a:ba:db:
                    7a:92:9a:ed:b4:bc:8d:ce:cd:36:33:b8:94:92:f3:
                    9e:30:b5:5f:d9:8a:df:cd:fe:ed:ac:79:74:b1:57:
                    a1:76:9e:80:32:85:28:e5:7c:fc:a5:4e:0b:32:5d:
                    f2:84:c3:67:ac:0b:04:a2:29:31:3a:9f:82:b3:9e:
                    6e:91:77:14:66:ab:bc:05:43:49:be:e7:dd:a0:47:
                    0e:f8:8a:22:3e:f4:aa:a6:b9:08:25:1c:77:29:47:
                    02:f6:97:99:89:80:ad:d0:ef:58:5b:82:d8:ce:d8:
                    bf:bc:57:04:b6:ad:11:9e:3b:01:f6:da:37:1c:ab:
                    89:62:83:3f:90:88:99:74:3e:1e:de:62:d4:f8:36:
                    38:2c:a7:ab:2d:25:90:8a:0e:1b:af:08:1d:64:3a:
                    95:8a:58:38:67:d1:52:f2:a7:a8:b9:3a:39:22:b4:
                    28:45:8e:d3:a4:4a:6d:f9:b7:ee:b3:e5:f7:cc:8d:
                    58:3e:e3:3d:8a:ba:e5:07:1f:08:03:e7:99:36:d4:
                    79:3d:c1:a8:67:22:9c:be:2c:d6:de:c6:9a:53:ca:
                    59:4e:8c:8a:93:ab:4f:12:93:3f:e4:f4:55:82:b8:
                    39:42:ad:1f:47:7a:1e:d2:f8:a1:aa:95:5f:5a:70:
                    36:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:53:87:AB:89:B3:82:BF:BE:51:3A:F7:49:C4:86:36:90:83:DC:B5
            X509v3 Authority Key Identifier:
                keyid:50:11:20:77:02:C8:08:49:79:B4:83:CF:C8:6D:EF:75:43:E0:5C:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBEgdwLICEl5tIPPyG3vdUPgXO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2c:4a:05:ec:2f:d9:df:32:5a:7a:33:ac:dc:a6:a5:be:a0:
         df:b1:95:46:4b:fd:06:ff:fd:42:29:2a:d2:af:6b:86:0c:c5:
         5b:55:bd:2e:94:34:87:bb:46:11:3b:aa:1a:33:76:29:b8:18:
         77:33:80:e3:eb:45:43:a7:38:b9:6d:51:e0:58:f7:fd:c3:78:
         ed:9f:ea:4d:34:d8:54:f7:95:d2:1c:a6:ce:be:17:fa:ec:da:
         af:1f:84:bb:64:a8:86:ff:50:5f:9d:81:05:af:5a:49:13:21:
         25:68:9a:9a:6c:e5:7e:2a:b1:a1:34:8c:a9:df:26:60:55:ec:
         52:ab:d1:e7:4b:74:7a:c6:5c:54:e1:9d:2d:d6:2b:9d:cd:5d:
         e0:ab:27:dd:1c:6e:30:65:89:77:66:15:c6:d4:47:ac:cb:fe:
         85:a7:ed:d8:c2:fe:92:64:a4:48:1e:5e:9f:69:b2:97:71:c6:
         16:87:f0:59:c7:32:aa:24:4e:e9:df:c6:88:e3:bb:31:11:ae:
         d8:8a:d9:24:1b:66:d2:29:cb:1c:d5:54:25:33:84:82:22:88:
         fa:2f:f2:ac:a9:35:85:a2:1c:70:d0:4f:ba:a0:7a:23:e6:e1:
         74:e9:f7:b1:95:b1:14:1d:b4:02:72:38:d1:f4:c7:6b:6c:93:
         98:75:3a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:44:40 2024 by rpki-client on console-ams.rpki-client.org