Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/33635f-dbf6-4c7b-b121-8bc862da75dc/1/UOx05wUaRQngxSWDoJKY2umJ2MU.mft
File:                     UOx05wUaRQngxSWDoJKY2umJ2MU.mft (raw, json)
Hash identifier:          FJ+x2xrRlTJHfqTPgdG7c+QPg5Cj5QZ5CItx+I0KFBg=
Subject key identifier:   70:52:F0:09:77:0E:E4:93:C9:A4:79:32:6C:33:47:20:0B:C3:53:C5
Authority key identifier: 50:EC:74:E7:05:1A:45:09:E0:C5:25:83:A0:92:98:DA:E9:89:D8:C5
Certificate issuer:       /CN=50ec74e7051a4509e0c52583a09298dae989d8c5
Certificate serial:       01901DEC64722D684EA134AE9E6E528CE33C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UOx05wUaRQngxSWDoJKY2umJ2MU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/33635f-dbf6-4c7b-b121-8bc862da75dc/1/UOx05wUaRQngxSWDoJKY2umJ2MU.mft
Manifest number:          059C
Signing time:             Sat 15 Jun 2024 22:02:29 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:29 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:29 +0000
Files and hashes:         1: UOx05wUaRQngxSWDoJKY2umJ2MU.crl (hash: n8chY17RaIH/MWIRtbzCylDJLz3hBitEXuSJcWBpDfo=)
                          2: cTLEW-EkQfUFoo_ELpUgzHHityY.roa (hash: nT8el9VQqQFe6TTNwE9Gu3WDlIPkUF9K5YoK/BXeFKw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/33635f-dbf6-4c7b-b121-8bc862da75dc/1/UOx05wUaRQngxSWDoJKY2umJ2MU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/33635f-dbf6-4c7b-b121-8bc862da75dc/1/UOx05wUaRQngxSWDoJKY2umJ2MU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UOx05wUaRQngxSWDoJKY2umJ2MU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:64:72:2d:68:4e:a1:34:ae:9e:6e:52:8c:e3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ec74e7051a4509e0c52583a09298dae989d8c5
        Validity
            Not Before: Jun 15 22:02:29 2024 GMT
            Not After : Jun 16 22:02:29 2024 GMT
        Subject: CN=7052f009770ee493c9a479326c3347200bc353c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dd:ee:1f:0e:e4:5b:3c:49:a9:be:58:8b:1a:
                    c3:b8:20:e8:a8:57:f1:ec:72:c3:13:22:cb:68:be:
                    0c:a7:dc:32:f1:78:a1:46:a3:7c:07:80:92:19:44:
                    ac:30:dd:db:b4:bf:b5:5a:c9:b7:5d:6a:8f:8c:00:
                    79:37:8a:13:55:56:ca:f7:ca:b0:2d:40:14:30:85:
                    0f:ac:8c:b6:24:cb:12:1e:f5:bc:4a:8a:61:9f:a1:
                    50:91:30:d5:c8:95:66:81:36:79:ff:4d:fc:d3:d9:
                    8c:4e:da:d9:52:be:e1:ff:af:38:2d:ba:01:dc:ee:
                    94:63:ec:55:48:b9:cb:e7:0d:4b:cb:0b:f7:4f:e9:
                    70:71:7d:a1:9f:e4:bf:85:f0:0a:5d:2f:15:31:dc:
                    b3:1e:77:d7:29:b3:2a:23:be:b6:b9:3b:7e:ee:dc:
                    35:11:43:fd:1e:92:7e:38:ec:dd:49:68:4d:04:b6:
                    b8:80:69:ce:3a:e4:88:da:98:78:9d:73:cc:a4:4e:
                    40:e6:45:10:28:e3:42:5f:fb:b3:09:78:c6:1f:2c:
                    02:22:dc:3d:11:29:75:08:da:53:2b:19:d3:de:38:
                    ce:e5:51:49:d9:0a:9f:91:e6:2b:77:cd:b8:ab:07:
                    00:d2:ad:c6:85:9e:c9:88:a0:c2:fb:99:74:a4:55:
                    4a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:52:F0:09:77:0E:E4:93:C9:A4:79:32:6C:33:47:20:0B:C3:53:C5
            X509v3 Authority Key Identifier:
                keyid:50:EC:74:E7:05:1A:45:09:E0:C5:25:83:A0:92:98:DA:E9:89:D8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOx05wUaRQngxSWDoJKY2umJ2MU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/33635f-dbf6-4c7b-b121-8bc862da75dc/1/UOx05wUaRQngxSWDoJKY2umJ2MU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/33635f-dbf6-4c7b-b121-8bc862da75dc/1/UOx05wUaRQngxSWDoJKY2umJ2MU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:28:81:f3:61:0b:fe:2d:b8:ea:15:44:de:73:31:ab:1f:71:
         ba:a5:9e:d5:9e:98:cc:95:ac:e5:1a:dc:92:1c:b1:4c:18:76:
         66:97:dc:67:4d:3b:9f:d9:a2:8a:87:9c:4a:20:65:7e:6c:76:
         0c:d9:ae:f7:50:36:02:2c:d4:ec:b1:bb:bc:bf:03:11:38:6c:
         12:05:eb:b8:c6:4e:4a:27:b3:27:d1:fd:73:e9:f6:26:53:65:
         28:96:bc:24:ce:75:ff:d9:3b:49:92:7a:c1:c4:30:12:ce:69:
         05:91:25:29:f8:59:92:ff:9d:43:53:be:1a:99:17:14:09:a3:
         28:05:80:6c:76:64:9d:55:f4:bc:79:67:d4:65:ae:ee:53:24:
         1b:c3:31:23:83:46:d2:9e:62:59:8a:c0:4c:ee:f5:42:fe:53:
         f6:30:3d:3a:d9:1b:da:2b:0d:ad:1f:5f:7f:24:17:d0:0e:80:
         70:03:82:65:a9:3f:9d:00:92:d0:9e:3f:73:1f:97:30:56:40:
         ab:10:2b:09:ff:33:38:c5:3e:c2:03:0c:ff:05:b7:3c:2b:66:
         bb:df:81:24:59:b5:19:38:2d:59:e1:f2:f0:d3:61:f6:89:51:
         97:61:3d:0b:25:ae:60:36:ad:42:44:fa:8b:25:a0:81:6b:0a:
         db:b5:fe:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:44:55 2024 by rpki-client on console-ams.rpki-client.org