Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
File:                     UMXKBp6qqux3WtCk6jtHYFtyiiU.mft (raw, json)
Hash identifier:          obqrpkiuX6U8VQpefGNGsDYrVveSoCPC7wQH3T1O+ZI=
Subject key identifier:   2C:7B:FA:B7:48:74:EE:30:6E:E6:C3:C0:7B:60:81:AC:4A:F2:67:29
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Certificate issuer:       /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial:       018F874879F5C3A9AD37D2117356ED35E5F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
Manifest number:          10C9
Signing time:             Fri 17 May 2024 16:00:25 +0000
Manifest this update:     Fri 17 May 2024 16:00:25 +0000
Manifest next update:     Sat 18 May 2024 16:00:25 +0000
Files and hashes:         1: KmE1jxm2YiitYrCpe6jAxFfBuOw.roa (hash: Y5XejpRzQCLjEanYxIMYNqtFsJbZicUnLyroeJp0m5o=)
                          2: UMXKBp6qqux3WtCk6jtHYFtyiiU.crl (hash: WXHMiB/yurkG4ycYP4FAySfYaWzIZeVJ9HX+4dUMLdc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:79:f5:c3:a9:ad:37:d2:11:73:56:ed:35:e5:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
        Validity
            Not Before: May 17 16:00:25 2024 GMT
            Not After : May 18 16:00:25 2024 GMT
        Subject: CN=2c7bfab74874ee306ee6c3c07b6081ac4af26729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f2:19:6c:ad:68:ef:a9:bc:e3:97:46:10:7c:
                    7f:86:4b:a6:8e:41:12:ed:12:32:2c:0a:0b:0a:1d:
                    cc:b2:58:19:d5:4c:59:d7:61:71:3d:b6:48:c5:ab:
                    c4:32:59:97:61:31:98:b0:ae:44:d9:e1:28:6a:37:
                    00:dd:ea:5e:14:28:5d:9e:53:11:c2:6b:a9:b5:4c:
                    21:6f:57:16:f3:7d:6e:44:e3:b0:6e:a6:73:ce:a2:
                    7e:08:a8:1f:df:9e:d2:cd:db:dd:60:01:70:46:be:
                    49:05:2a:ca:80:6b:37:e0:59:50:88:05:fb:ea:e9:
                    9a:86:72:99:ff:0c:02:fc:43:c4:b3:9c:d5:d5:96:
                    8d:05:e9:de:ea:fc:f8:b9:03:d8:a1:84:cf:2e:f0:
                    f4:ee:39:08:78:30:71:8b:c4:2e:cb:d7:41:6e:7f:
                    72:4a:63:8c:44:d2:fa:25:0e:db:42:b5:23:18:b4:
                    a0:eb:e8:f8:ab:46:b5:a6:20:76:0a:47:e3:59:c3:
                    f9:18:bc:2f:21:f8:a9:eb:58:05:35:3a:62:ae:8b:
                    75:bf:99:c7:6c:60:62:37:19:9e:82:44:42:e9:3e:
                    5f:8c:a9:44:89:f8:24:d7:d3:5c:ed:91:05:ba:f8:
                    09:47:0d:d7:de:d2:85:d2:c2:d4:2d:d0:d5:44:58:
                    91:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7B:FA:B7:48:74:EE:30:6E:E6:C3:C0:7B:60:81:AC:4A:F2:67:29
            X509v3 Authority Key Identifier:
                keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e4:ab:e9:13:0b:ca:24:d0:a8:c5:a8:02:21:45:8e:fc:e0:
         bf:62:b4:00:3f:bb:aa:d9:8c:52:97:62:96:f4:cc:0e:35:1a:
         aa:b1:d6:5a:f6:08:cf:cb:94:30:5b:e4:4b:b2:4d:79:67:d3:
         8c:4b:63:9f:37:41:35:47:e1:66:b8:0b:76:7c:37:97:0d:2b:
         3c:94:db:b6:e6:b6:0a:ca:fa:25:58:b3:e7:cd:5e:38:52:76:
         24:25:fa:8c:a5:06:45:de:f8:3c:4e:9e:72:00:e0:10:47:fb:
         01:46:ba:d7:60:db:ec:82:e1:1f:41:9c:c8:04:b5:26:17:15:
         33:94:19:92:85:ca:3a:50:ac:f5:15:09:db:b4:31:57:65:69:
         54:d4:2b:14:0c:19:9f:b1:60:9d:aa:fb:55:fa:6f:44:85:26:
         52:b8:89:db:4d:f1:e2:35:8d:3c:79:7c:5d:da:32:cf:09:23:
         54:79:f2:47:01:56:01:55:b2:be:38:3d:55:55:4d:35:7c:97:
         71:29:af:57:1d:17:cd:7a:39:c9:f3:e6:22:33:cf:2a:85:9a:
         94:50:77:0d:7d:4c:32:f2:b2:73:d0:51:57:01:1d:4b:00:c0:
         9c:9a:b2:46:9d:a1:d1:10:98:8f:0d:85:db:1c:39:ff:92:de:
         2e:0f:56:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:34 2024 by rpki-client on console-fra.rpki-client.org