Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
File:                     UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft (raw, json)
Hash identifier:          7NtSy0BZrMOgUE5QMe0tgUilqfOz8wctaCevBcalq9M=
Subject key identifier:   EA:0A:9C:56:5F:8A:AB:3F:56:AE:8E:2B:A8:89:76:CE:DE:0D:5A:47
Authority key identifier: 52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
Certificate issuer:       /CN=52965547f1096064b6b573c0281714c1f061cd4d
Certificate serial:       018F87484493543440C1E0198A8E3A496181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
Manifest number:          0A4C
Signing time:             Fri 17 May 2024 16:00:11 +0000
Manifest this update:     Fri 17 May 2024 16:00:11 +0000
Manifest next update:     Sat 18 May 2024 16:00:11 +0000
Files and hashes:         1: UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl (hash: EQoPrh+s3rFvxemvbo1Wdh/hWD6UGFrhutJS0Mmzv2g=)
                          2: rAEX6nGTwNJurp-RUgVDao7uToM.roa (hash: ZAnTW0JNdixu4RS2ao95jS3IFKAqbPupWix5gerhZiI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:44:93:54:34:40:c1:e0:19:8a:8e:3a:49:61:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52965547f1096064b6b573c0281714c1f061cd4d
        Validity
            Not Before: May 17 16:00:11 2024 GMT
            Not After : May 18 16:00:11 2024 GMT
        Subject: CN=ea0a9c565f8aab3f56ae8e2ba88976cede0d5a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:26:38:bb:21:0a:3d:59:d3:dd:1a:24:1e:
                    48:6e:d0:6c:b1:c6:9d:a3:aa:4a:7c:1c:3d:6d:77:
                    4a:72:35:15:31:1f:4c:18:78:a0:c5:27:5e:d7:94:
                    b8:9c:5f:d0:95:d2:a8:6e:e7:f7:5c:b6:ef:1f:ee:
                    ea:2a:71:51:41:21:16:8c:c5:2f:a8:2d:2b:c7:67:
                    c4:90:d6:6b:05:ee:f6:a1:ee:4b:c9:51:73:71:1d:
                    5a:68:27:81:d8:27:25:97:d9:5d:25:4d:bf:73:ac:
                    07:46:c4:37:d9:de:34:4e:2b:bb:c8:15:94:fe:16:
                    a0:a8:35:22:2a:ae:ea:fb:7e:e8:74:87:81:a6:c5:
                    de:19:fc:d1:c1:66:ea:59:27:d5:38:14:b8:7c:e9:
                    10:b5:2f:86:fb:da:2e:f1:50:f7:91:53:59:23:ac:
                    5e:40:d6:c8:3f:ea:f4:bd:c4:40:50:9b:bb:96:98:
                    38:ef:8f:81:c3:fb:75:7d:33:44:13:89:79:68:13:
                    6f:04:ba:74:30:a3:b1:94:52:ce:21:20:a5:10:40:
                    71:c5:94:cb:2c:12:13:b0:13:78:d7:75:70:83:48:
                    80:da:80:0a:a7:e7:00:9b:45:4c:fe:2e:30:bf:de:
                    51:5a:f1:e3:a9:f0:49:d8:f1:c0:72:d0:f3:e5:0d:
                    f7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0A:9C:56:5F:8A:AB:3F:56:AE:8E:2B:A8:89:76:CE:DE:0D:5A:47
            X509v3 Authority Key Identifier:
                keyid:52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5b:04:88:c7:0f:bd:a1:72:5a:ec:c1:cc:9f:b6:10:81:27:
         90:75:5d:73:ba:50:44:75:58:fd:78:e2:00:46:9e:ec:28:a7:
         17:da:32:67:52:db:26:ce:4d:f9:53:82:d4:17:3b:5e:85:fd:
         8f:83:ce:78:ac:d4:c8:b9:fe:55:13:09:05:b9:d1:85:ec:eb:
         ae:41:38:f5:a2:af:9f:1f:20:7d:01:00:e7:df:fd:b2:e6:40:
         ac:53:ee:28:90:60:b1:2f:9b:29:a5:8f:2b:b9:bc:da:5e:ab:
         ed:96:99:66:fd:b0:2c:79:f3:ea:82:13:6a:e0:36:26:a8:e5:
         94:a6:5f:8b:06:6c:7a:fe:19:ad:f3:98:e6:13:4f:f5:17:74:
         c7:6e:f4:2a:8c:f4:ea:33:5e:0d:ea:0c:ee:f0:20:83:10:5b:
         2c:ab:ce:c9:52:82:ea:99:5b:53:20:a9:05:a0:8d:4f:53:37:
         4a:d4:1e:2e:94:91:3d:34:7a:95:a7:ea:74:c4:70:fc:ce:71:
         86:e9:1b:34:2a:3f:38:d2:d7:2d:98:6c:25:1d:f1:0a:82:8e:
         af:ba:2d:33:c6:61:7e:c0:e0:d5:f9:06:5e:f7:6b:aa:aa:18:
         5b:13:d1:d9:6c:57:a8:3b:88:f3:7a:37:3d:95:2d:7e:bf:45:
         e7:53:3c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:12:29 2024 by rpki-client on console-ams.rpki-client.org