Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
File:                     UCcYumg5OXxsV-ztbVCVcers7d8.mft (raw, json)
Hash identifier:          WypnoWR7ChTrm3tEL0SCvG6lHvlZv1zXaQ8EM2qDw18=
Subject key identifier:   FC:DC:C8:AC:28:1E:65:A4:FA:40:B0:CC:57:A3:50:F0:9E:DC:80:FE
Authority key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
Certificate issuer:       /CN=502718ba6839397c6c57eced6d509571eaeceddf
Certificate serial:       01951210466EF76CDAEAF07282FFD551B8F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
Manifest number:          1457
Signing time:             Mon 17 Feb 2025 04:00:11 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:11 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:11 +0000
Files and hashes:         1: UCcYumg5OXxsV-ztbVCVcers7d8.crl (hash: 22zcPdzKwFtArJQNfM0wi4W4PcAlBd12wV/1NjMgeWo=)
                          2: WtJONoz3Ixt7CeZPRU-hgtKyWKs.roa (hash: otXlAL96Q2eQ0JoFnviTH8lX7JlMAqHtqXMBKNXMq+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:46:6e:f7:6c:da:ea:f0:72:82:ff:d5:51:b8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502718ba6839397c6c57eced6d509571eaeceddf
        Validity
            Not Before: Feb 17 04:00:11 2025 GMT
            Not After : Feb 18 04:00:11 2025 GMT
        Subject: CN=fcdcc8ac281e65a4fa40b0cc57a350f09edc80fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:a4:70:e3:01:81:a5:a5:ca:d3:c6:32:d1:
                    d9:cb:7e:42:48:f1:28:4b:bc:98:cc:62:2e:08:93:
                    12:5d:ed:1f:14:65:3e:69:36:83:21:24:8a:7b:23:
                    46:cb:d7:57:56:46:b0:1b:a8:cb:f0:5d:16:c3:c0:
                    4a:68:08:bd:1d:9e:24:b8:58:cf:ec:2c:c9:b7:6d:
                    c2:eb:e3:6b:a7:85:43:78:a4:a0:18:11:69:4f:e1:
                    a8:ed:5e:0f:c8:49:43:63:dd:06:72:2d:6d:0c:8e:
                    b7:d0:56:9b:c5:cd:15:9a:5d:ed:6d:51:3e:a6:6b:
                    e5:97:55:23:1d:1b:b6:13:ed:1f:3c:14:d5:40:22:
                    67:b3:30:30:37:3e:43:0d:98:04:58:e9:ad:7b:a5:
                    84:11:26:e0:fe:e9:6f:48:3c:7e:d4:96:f8:69:1a:
                    a8:ba:11:8d:b7:2a:92:d1:c8:b7:a9:74:96:30:c8:
                    38:7c:36:a7:a6:89:a5:ea:84:05:3b:18:74:1a:3e:
                    9b:86:65:14:4c:02:32:b6:10:e1:f3:de:e1:fe:24:
                    20:c3:e8:03:42:86:76:3f:0d:7a:30:93:4d:67:20:
                    a6:64:45:d0:f7:d3:22:26:3e:a3:b6:3f:4b:ac:7b:
                    78:3c:fc:a5:74:66:a2:66:16:14:b1:f1:55:47:d5:
                    dd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DC:C8:AC:28:1E:65:A4:FA:40:B0:CC:57:A3:50:F0:9E:DC:80:FE
            X509v3 Authority Key Identifier:
                keyid:50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ce:c3:d3:c8:f7:6c:66:c7:e1:2e:cc:e5:ee:e4:55:c1:cf:
         43:b1:ce:42:85:a2:72:fc:93:a4:39:9f:a3:e7:44:99:01:fd:
         fd:7a:25:b0:e3:f6:9a:88:a3:07:87:f5:96:02:ec:32:17:70:
         41:fa:b2:42:80:0b:01:5c:15:13:b8:a6:2d:a8:6c:d8:82:60:
         67:a5:06:90:49:b8:69:a4:9c:cf:27:ff:34:18:78:1c:3f:10:
         d1:81:75:6c:9b:86:1a:12:93:5c:11:94:2e:d2:a7:34:4c:4f:
         e6:8b:a7:80:bd:bd:84:51:21:29:75:64:71:5d:08:99:27:77:
         fb:e3:98:55:7b:45:9e:79:17:02:dc:ec:ca:25:44:52:61:0e:
         dc:82:b0:63:41:cb:13:e4:d3:19:8a:4c:9c:f2:62:ba:d0:1f:
         23:11:11:01:a2:38:52:34:df:99:08:16:8d:21:d4:71:86:59:
         a9:18:b7:37:c3:3d:1e:2e:19:dd:5f:6f:18:01:d4:87:58:78:
         93:7f:3a:d8:39:1b:7c:f5:23:65:79:66:3a:6d:56:86:58:37:
         5a:83:9a:c0:37:61:ed:26:af:57:f7:e6:bb:31:de:7c:52:08:
         5d:ed:6b:08:ca:9d:f5:f6:9a:78:3f:ce:d0:94:e6:fb:bf:b4:
         49:87:19:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEEZu92za6vBygv/VUbj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMjcxOGJhNjgzOTM5N2M2YzU3ZWNlZDZkNTA5NTcxZWFl
Y2VkZGYwHhcNMjUwMjE3MDQwMDExWhcNMjUwMjE4MDQwMDExWjAzMTEwLwYDVQQD
EyhmY2RjYzhhYzI4MWU2NWE0ZmE0MGIwY2M1N2EzNTBmMDllZGM4MGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXqkcOMBgaWlytPGMtHZy35CSPEo
S7yYzGIuCJMSXe0fFGU+aTaDISSKeyNGy9dXVkawG6jL8F0Ww8BKaAi9HZ4kuFjP
7CzJt23C6+Nrp4VDeKSgGBFpT+Go7V4PyElDY90Gci1tDI630Fabxc0Vml3tbVE+
pmvll1UjHRu2E+0fPBTVQCJnszAwNz5DDZgEWOmte6WEESbg/ulvSDx+1Jb4aRqo
uhGNtyqS0ci3qXSWMMg4fDanpoml6oQFOxh0Gj6bhmUUTAIythDh897h/iQgw+gD
QoZ2Pw16MJNNZyCmZEXQ99MiJj6jtj9LrHt4PPyldGaiZhYUsfFVR9XdEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzcyKwoHmWk+kCwzFejUPCe3ID+MB8GA1UdIwQY
MBaAFFAnGLpoOTl8bFfs7W1QlXHq7O3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wMDA1YjItZDI4Yi00YmY5LTliY2Ut
Y2Q4MWZjNTgwZjQ3LzEvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wMDA1YjItZDI4Yi00YmY5LTliY2UtY2Q4MWZjNTgwZjQ3
LzEvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALs7D08j3
bGbH4S7M5e7kVcHPQ7HOQoWicvyTpDmfo+dEmQH9/XolsOP2moijB4f1lgLsMhdw
QfqyQoALAVwVE7imLahs2IJgZ6UGkEm4aaSczyf/NBh4HD8Q0YF1bJuGGhKTXBGU
LtKnNExP5oungL29hFEhKXVkcV0ImSd3++OYVXtFnnkXAtzsyiVEUmEO3IKwY0HL
E+TTGYpMnPJiutAfIxERAaI4UjTfmQgWjSHUcYZZqRi3N8M9Hi4Z3V9vGAHUh1h4
k3862DkbfPUjZXlmOm1Whlg3WoOawDdh7SavV/fmuzHefFIIXe1rCMqd9faaeD/O
0JTm+7+0SYcZwg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:05 2025 by rpki-client