Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.mft
File:                     UMrU5Xdbox7K4ibRBG89waEEgU0.mft (raw, json)
Hash identifier:          tLRm3ZYIQaLIicHokCSsSmzZ92HRMUlovhP38YWBb2M=
Subject key identifier:   41:5D:9D:28:D8:95:89:DA:54:D0:6D:B9:CF:49:ED:68:56:D5:B3:C6
Authority key identifier: 50:CA:D4:E5:77:5B:A3:1E:CA:E2:26:D1:04:6F:3D:C1:A1:04:81:4D
Certificate issuer:       /CN=50cad4e5775ba31ecae226d1046f3dc1a104814d
Certificate serial:       01901D7CE3F8B29F6BEB5889DF87A8BA8C14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMrU5Xdbox7K4ibRBG89waEEgU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.mft
Manifest number:          015A
Signing time:             Sat 15 Jun 2024 20:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 20:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 20:00:42 +0000
Files and hashes:         1: SPrHu-MB7DuKVibwBcBZoOA9wGk.roa (hash: buHfk0myNtTegzJ0DRyZUYeXUqQ5PaPP2ij+HGYDkVo=)
                          2: UMrU5Xdbox7K4ibRBG89waEEgU0.crl (hash: eBZYCwDCUb3IW5RM604eTiRS+h9yussLOD5UfTLzdGI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UMrU5Xdbox7K4ibRBG89waEEgU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:7c:e3:f8:b2:9f:6b:eb:58:89:df:87:a8:ba:8c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50cad4e5775ba31ecae226d1046f3dc1a104814d
        Validity
            Not Before: Jun 15 20:00:42 2024 GMT
            Not After : Jun 16 20:00:42 2024 GMT
        Subject: CN=415d9d28d89589da54d06db9cf49ed6856d5b3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5a:b9:d3:41:5e:00:e5:1b:34:26:37:66:92:
                    b8:a2:55:5c:ca:47:43:26:94:f6:01:cb:b0:1f:31:
                    d5:2e:9e:44:b8:06:b9:66:4b:e7:a5:9a:1a:90:dd:
                    a6:dc:75:03:b9:73:69:e2:78:8c:00:82:12:67:df:
                    6f:8c:a7:ff:46:31:26:8f:be:4e:7f:14:aa:2b:6f:
                    30:8e:3b:b2:88:b0:d0:72:c4:74:6f:ee:3d:89:d6:
                    b7:92:30:61:3b:15:8f:ed:8e:4a:e6:09:f0:15:9d:
                    8e:85:a1:ba:46:7b:48:10:d9:19:f5:87:7a:b1:e6:
                    84:2b:6f:3d:1f:a4:03:22:e4:70:e5:e1:8e:f9:fe:
                    e8:45:b4:50:ba:f7:50:36:b1:74:36:5a:d1:0c:8b:
                    4d:a7:35:fa:48:89:4e:94:90:03:00:b4:6a:0e:00:
                    4a:bb:c0:76:51:8a:94:75:92:d5:50:2d:a2:1c:49:
                    96:c6:85:66:c8:85:5a:1a:f1:df:a3:2b:50:96:a4:
                    31:2e:ba:9b:f5:44:07:82:b1:14:67:fb:18:87:5a:
                    58:f6:37:d9:9e:76:21:d9:ed:cf:9d:c3:82:f8:bd:
                    e5:ce:92:61:8c:25:b7:d2:10:ca:7d:f9:be:ae:de:
                    9a:25:95:2a:67:18:ac:70:ff:d4:fe:c8:73:0c:2c:
                    a9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5D:9D:28:D8:95:89:DA:54:D0:6D:B9:CF:49:ED:68:56:D5:B3:C6
            X509v3 Authority Key Identifier:
                keyid:50:CA:D4:E5:77:5B:A3:1E:CA:E2:26:D1:04:6F:3D:C1:A1:04:81:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMrU5Xdbox7K4ibRBG89waEEgU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:09:bb:2b:09:79:b5:09:98:ea:20:d1:15:f5:67:e1:cd:e4:
         36:6c:74:96:ec:05:3b:24:d9:99:b6:2e:ef:45:7f:f8:8b:7f:
         8d:98:18:ea:a7:95:cd:76:d6:cb:82:c5:9d:c3:bf:30:22:ca:
         99:37:ac:bd:17:69:70:22:09:23:ab:d6:57:a4:38:55:85:13:
         33:16:43:e6:35:99:f6:e2:58:c8:1a:d0:a2:94:bc:c0:ee:44:
         56:a5:cf:69:dd:d4:02:20:b9:65:06:da:89:cf:06:d4:73:9a:
         37:14:2d:02:40:c6:9c:32:0b:1a:51:c2:a9:96:2e:72:07:9b:
         d8:57:f4:d7:6e:92:96:52:f3:fc:80:53:8e:ac:b0:46:66:de:
         be:09:52:4e:0a:09:87:5e:da:17:a5:36:17:af:bc:b1:31:cc:
         32:f1:a0:e4:60:3f:8d:51:30:9b:1b:9d:67:c0:c5:7d:9a:3b:
         65:84:2b:2c:ad:5b:fc:01:34:3d:06:02:09:ae:d1:a9:b3:f0:
         96:65:7d:34:b8:76:5d:e0:24:63:b9:28:b3:de:5c:87:3d:0f:
         af:02:43:81:9a:f9:ac:10:56:ee:55:47:47:8b:47:94:68:17:
         9d:92:da:a5:94:42:84:27:d6:d8:ba:dc:64:ce:9d:9b:4c:d6:
         5d:e2:5f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:35:27 2024 by rpki-client on console-fra.rpki-client.org