Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
File:                     UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft (raw, json)
Hash identifier:          U+3BX/aPrvFaNQ2gbyHyPyB88LoR48c0cObtp6GDd1Y=
Subject key identifier:   82:10:9C:54:93:04:10:8A:2B:EC:F0:48:08:A5:4B:AB:AD:17:C4:22
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Certificate issuer:       /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial:       019259FB542D9ACE1F6C1D9CC5DDC085C796
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
Manifest number:          12F7
Signing time:             Sat 05 Oct 2024 00:01:36 +0000
Manifest this update:     Sat 05 Oct 2024 00:01:36 +0000
Manifest next update:     Sun 06 Oct 2024 00:01:36 +0000
Files and hashes:         1: 1-MIXQxRn_V5NApktsp3mRCKYNPI.roa (hash: TxqsZr0h+g1L1kIxuC6+mGMcohUk74SbQT5MrhUpOx4=)
                          2: M7S8dYcZBy_-xH9XIeu5eOvZycM.roa (hash: 5Zrnyx7bSYIihpNOAJaWnv3qw7hTUI7+2REvwOl3Dqg=)
                          3: Qlu1dXXxPHbSVvLSCTBMLzWpiG0.roa (hash: JT5w90eKlXnP8R7lhm31oPKKRfnBAPU89BjDdqozlSY=)
                          4: UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl (hash: tabAVtqGFp7gzd03xpkil8D7e7SEGQF4sZISSkzU3js=)
                          5: VULmVpakAxzBHq4bRmxVEgqUGcU.roa (hash: 8WuBx1lEkp0wwdThO/7OWZl7pbl1KS1BaIRCs7hvOmM=)
                          6: uFIagI19syrPUqf9PKja854Uqy8.roa (hash: U18tP5wQTr/tudJqWTKY0zWqceEjODjjxVhmv5Mdunk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Oct 2024 00:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:59:fb:54:2d:9a:ce:1f:6c:1d:9c:c5:dd:c0:85:c7:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
        Validity
            Not Before: Oct  5 00:01:36 2024 GMT
            Not After : Oct  6 00:01:36 2024 GMT
        Subject: CN=82109c549304108a2becf04808a54babad17c422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:e8:93:3f:e3:93:b0:d5:f2:6b:c7:86:d5:
                    c4:6f:4f:89:ed:35:66:07:ee:dd:86:de:f1:e1:25:
                    3e:53:4d:3d:ce:01:1b:ff:ea:11:72:0d:6b:9e:8b:
                    bd:b7:d3:4e:c6:63:48:c1:17:90:0e:58:d7:44:ea:
                    4b:30:0e:3f:bf:6f:36:6d:8c:52:ec:93:a1:34:d6:
                    a9:c0:20:26:b1:5a:84:a3:38:68:89:05:9e:ac:7b:
                    1a:7c:30:9e:39:3e:33:9e:81:97:c3:a1:8a:4b:e2:
                    2f:b0:15:7e:38:40:d9:ed:76:4e:44:35:de:b1:2a:
                    a0:6a:e0:b6:e8:0f:94:fe:1a:38:68:41:20:40:02:
                    58:ed:d2:10:ac:59:46:b7:16:74:64:b3:39:9f:bf:
                    ab:eb:ca:33:81:38:37:df:d9:29:07:63:1f:ba:22:
                    d7:6c:1f:18:ec:e1:3a:19:c5:34:8c:ca:16:37:3d:
                    2d:46:8a:77:d8:8e:af:04:f1:30:d0:14:24:27:3c:
                    f6:ce:d4:c8:a3:a8:c4:62:6b:37:1c:b9:e5:0e:5a:
                    ce:67:8d:dd:04:1b:7f:10:e4:ee:e3:c3:5a:94:56:
                    e2:1a:09:db:69:e3:c8:4c:45:cb:03:1c:fd:4c:11:
                    c5:93:b8:15:ae:7c:d6:b0:f7:24:dd:cf:82:69:ef:
                    ec:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:10:9C:54:93:04:10:8A:2B:EC:F0:48:08:A5:4B:AB:AD:17:C4:22
            X509v3 Authority Key Identifier:
                keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:28:06:52:8d:ef:68:fd:7e:26:bb:5b:88:8b:b4:69:37:40:
         0c:5e:61:80:82:69:89:9b:4d:b6:6e:1e:0f:9b:18:c9:b1:27:
         13:6c:dc:4a:38:17:32:df:0b:64:62:4d:1c:75:71:3b:d3:dd:
         51:d6:5e:a1:5e:55:f7:f3:ca:1b:29:ae:36:07:e8:b8:c3:d7:
         3d:b8:a6:a1:43:40:70:21:07:77:7b:c7:29:04:39:19:a3:0b:
         53:a9:83:d6:55:a3:ae:f7:20:1d:57:84:03:e1:31:af:8d:02:
         6c:02:22:fc:88:ac:b9:69:0f:bd:39:61:df:68:7e:fc:f8:a3:
         91:21:6e:97:e3:1e:7e:e7:1b:de:12:5b:32:20:d3:87:79:d8:
         a9:61:c9:d5:25:18:b5:8b:5b:34:b3:70:5d:7b:20:d8:77:94:
         34:6f:b1:8b:5e:0c:a9:6c:8f:c2:bf:da:f3:02:62:40:61:a4:
         85:09:5c:91:60:3a:f9:7d:dd:ba:fd:9b:1b:9f:4a:94:d1:d6:
         7f:c1:d1:08:39:d1:f5:1a:3a:84:0e:bc:68:fd:75:cf:f1:2c:
         a0:41:62:2c:ea:cd:4c:24:db:4c:ff:90:d1:9f:e9:e1:ce:c1:
         29:a3:c2:2f:89:e8:f9:cc:f4:f5:b6:3b:8e:f3:50:fc:89:40:
         77:d9:36:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 07:48:09 2024 by rpki-client on console-ams.rpki-client.org