Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
File:                     UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json)
Hash identifier:          QXt24tSd019xuDgPnHbN7Pk70u+d/+RgH2flAePcS4I=
Subject key identifier:   53:A2:7F:82:DF:E7:C3:6D:57:A7:5B:B0:45:DC:6C:26:53:EE:9E:8B
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Certificate issuer:       /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial:       019644B205041A716843988A7C0919DCFF8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
Manifest number:          11D9
Signing time:             Thu 17 Apr 2025 17:00:39 +0000
Manifest this update:     Thu 17 Apr 2025 17:00:39 +0000
Manifest next update:     Fri 18 Apr 2025 17:00:39 +0000
Files and hashes:         1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: Q3wx9i3hXfWsRmGTeJvAbYMSk+BorWbARpOdT3mmqeY=)
                          2: gTDuY8r1VNymJYjX19G7pBZoVz8.roa (hash: DFZawHbPH3fUqxF/xfDF3iDUtDCENnqE3cXs8GAuxpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:b2:05:04:1a:71:68:43:98:8a:7c:09:19:dc:ff:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
        Validity
            Not Before: Apr 17 17:00:39 2025 GMT
            Not After : Apr 18 17:00:39 2025 GMT
        Subject: CN=53a27f82dfe7c36d57a75bb045dc6c2653ee9e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:13:8d:45:53:19:7f:e2:64:2d:5e:d1:79:
                    2b:39:d0:62:f3:84:53:f9:ef:6e:84:2d:92:2f:02:
                    22:68:1b:42:26:e4:b6:3e:c4:d5:bd:70:0d:72:19:
                    26:d0:08:a5:05:2a:38:da:74:d4:0d:0b:55:8d:97:
                    ad:3b:cf:d0:20:0c:5c:1e:50:dc:7c:67:8c:67:0a:
                    8f:89:ff:23:19:95:f8:e9:45:00:6a:2c:4b:a7:54:
                    46:bc:fe:a4:66:a8:ea:1b:c2:05:52:54:81:75:61:
                    e9:f6:30:10:9c:77:db:9f:99:47:ea:bd:ee:83:f9:
                    2d:fb:3d:d2:36:5b:b8:9c:5c:45:90:17:8f:4c:73:
                    7d:1f:45:73:8d:6f:23:83:fa:31:b7:ab:cb:ff:f7:
                    1b:c8:67:f9:37:46:b9:ce:7b:fc:fa:9d:07:38:af:
                    e4:57:20:f1:d9:d8:e3:f1:a6:b3:49:52:e3:2a:4f:
                    8e:38:09:67:b5:61:ea:00:cf:8c:fc:d4:34:be:11:
                    1d:18:5b:ee:9c:55:71:0f:08:a5:70:26:02:23:c3:
                    4c:b9:dd:4e:07:38:10:b0:2a:b6:57:09:17:d6:4d:
                    3a:69:fd:b2:f4:a0:3e:21:c3:bd:0a:8c:e9:fc:6e:
                    71:19:88:84:5c:17:47:78:eb:17:32:93:6f:4b:3d:
                    2d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A2:7F:82:DF:E7:C3:6D:57:A7:5B:B0:45:DC:6C:26:53:EE:9E:8B
            X509v3 Authority Key Identifier:
                keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d5:c5:ce:4b:5b:1f:c3:52:2e:d0:72:d7:d2:ff:01:dd:d5:
         42:08:26:94:06:d9:18:96:30:7e:fd:1f:eb:1e:80:b2:cb:2a:
         bc:57:a2:42:5b:26:fe:81:96:e8:84:20:44:02:12:59:38:c9:
         3f:f2:36:a2:cf:b7:a1:52:6a:7f:3f:32:12:45:fc:57:3b:27:
         e2:8d:f4:43:7e:07:52:7c:51:60:66:d3:d0:8c:50:e2:7b:9a:
         2c:98:eb:a6:0f:96:98:45:40:da:d4:a2:c5:9c:99:23:e2:c9:
         15:7d:4f:a4:49:99:33:9e:4c:ac:fe:8a:93:61:14:53:5a:ef:
         07:23:a9:83:fd:49:cd:f0:95:ae:7f:55:43:29:19:51:e1:7e:
         2c:bb:11:fd:10:3b:39:5b:c5:78:ba:58:29:ba:e1:b0:09:3d:
         d7:57:46:93:fe:1e:fb:ef:6c:76:3c:a7:3e:0c:ba:b1:d9:c7:
         a4:0b:c2:ef:fd:32:d0:b8:79:da:f9:3c:2a:7b:88:fe:02:04:
         3b:45:8d:de:bb:68:75:18:ec:f1:7b:0f:b1:e4:37:2d:28:b6:
         df:10:b5:19:30:a4:0e:da:f2:0d:ba:ec:25:17:d6:e4:c9:4f:
         00:02:e3:ed:c0:fa:53:f4:c0:2b:78:07:6f:e0:69:6a:64:5e:
         e5:c5:61:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:21:32 2025 by rpki-client