Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
File:                     UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft (raw, json)
Hash identifier:          T0v9eSC6cnI8pH05Z42oNWsYGS7gFKkWoygPYqErwYg=
Subject key identifier:   E7:1E:AF:0E:99:BF:2D:F9:F9:D5:72:AF:D4:E6:CA:3A:77:4C:0C:1A
Authority key identifier: 50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46
Certificate issuer:       /CN=50097fb58c6f6a441d8ed75000773b4d09856746
Certificate serial:       019511D954445DD0FB8468561FB7753D4584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
Manifest number:          0878
Signing time:             Mon 17 Feb 2025 03:00:10 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:10 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:10 +0000
Files and hashes:         1: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl (hash: e3Tp877PO/XzFRoD9ryJeL8HlIU7/sf067F+hKjQngo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:54:44:5d:d0:fb:84:68:56:1f:b7:75:3d:45:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50097fb58c6f6a441d8ed75000773b4d09856746
        Validity
            Not Before: Feb 17 03:00:10 2025 GMT
            Not After : Feb 18 03:00:10 2025 GMT
        Subject: CN=e71eaf0e99bf2df9f9d572afd4e6ca3a774c0c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:79:35:96:c2:7c:de:6a:9d:6f:a9:4f:fd:
                    32:3d:14:bf:32:95:73:37:ae:4f:2e:64:01:2f:8e:
                    f8:50:f6:81:ef:a6:f2:a8:df:d0:2e:ad:03:6a:e7:
                    01:8b:dd:fa:9f:ec:77:4c:ce:d0:b4:94:b1:d3:00:
                    a8:a9:94:8c:a3:f2:25:d8:d1:8a:eb:a8:68:9c:61:
                    55:7a:79:df:b7:dc:c2:84:a1:f9:ca:5e:c1:e2:9e:
                    b6:fb:e6:fd:84:52:34:3f:8f:b8:2b:8c:67:b3:75:
                    86:9c:4e:3c:12:8d:71:3f:7d:ba:40:92:ab:97:5f:
                    1a:ed:80:b5:6d:76:d8:b4:7f:33:ab:4e:29:2b:d7:
                    fd:c7:0b:f3:e8:9d:6d:0a:ef:c5:c7:76:ff:a2:74:
                    a7:d8:6e:49:78:b7:1a:e7:39:9f:98:b7:2a:35:5b:
                    bd:3d:98:47:fc:3f:a3:e3:03:73:a7:22:86:d6:65:
                    b5:5d:84:95:a9:14:cf:43:17:69:62:51:1e:1f:0c:
                    53:b7:5f:de:81:c9:b9:74:60:cd:ce:12:16:30:98:
                    d6:d6:34:1a:18:a3:a6:71:13:d7:81:1f:aa:b3:e8:
                    61:41:57:31:18:6f:0f:2a:22:82:54:c4:1e:f2:cd:
                    ca:19:cd:d8:fe:1a:94:a3:c7:04:c7:39:ee:a4:04:
                    f8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1E:AF:0E:99:BF:2D:F9:F9:D5:72:AF:D4:E6:CA:3A:77:4C:0C:1A
            X509v3 Authority Key Identifier:
                keyid:50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:10:d4:ee:4e:af:0a:1b:5f:f1:0c:2c:14:b4:b9:a2:72:9b:
         fd:6a:e5:d7:ef:00:14:bc:93:f1:4f:2f:22:c7:bf:01:39:51:
         9e:53:85:7f:5c:4d:33:ce:e3:78:67:34:f2:8d:73:ea:8f:94:
         17:70:1e:b4:a4:b9:71:bb:4e:0d:9a:c6:3d:66:d6:82:1a:7e:
         a4:18:e8:a8:b1:dc:d7:bd:27:ea:35:70:62:29:2f:3d:e5:96:
         3e:14:e0:83:4a:04:49:8f:bd:5f:46:fb:92:04:f5:45:b0:5f:
         73:43:a0:81:70:b6:79:81:a8:bf:dd:86:bb:19:01:23:e8:89:
         9b:89:33:1a:2f:d5:c4:2e:d0:49:23:b6:1d:f3:38:62:27:7f:
         c8:06:c8:e9:16:04:a5:5f:79:26:71:2b:b4:0b:63:09:c0:83:
         c5:30:2a:f5:98:4c:0d:40:6e:97:1b:a0:bb:3b:48:31:4b:bc:
         d2:bd:40:a4:b3:59:94:24:8e:a2:07:38:25:6c:53:60:bf:12:
         df:6b:91:8f:a0:1d:e9:d4:25:d2:c6:aa:19:91:31:a7:22:ee:
         59:78:45:92:0f:55:62:e8:63:f1:4f:47:9f:27:42:0f:d7:64:
         fb:c7:96:0f:dc:58:35:1b:1a:71:6f:74:7a:3f:17:ac:84:da:
         09:6f:9c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----