Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
File:                     UPX-mbwiMohxFv2sgtQIKtvGrLc.mft (raw, json)
Hash identifier:          Z3gE4P9Qzk/V/xGUD/H4Oe8NSk01Pg6S3AusfD+Q3ow=
Subject key identifier:   FA:0B:C3:44:CA:DD:18:CE:F1:B9:D4:4E:6B:1F:8A:F6:25:67:A4:35
Authority key identifier: 50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
Certificate issuer:       /CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Certificate serial:       019365C4D4B71EB67559635F00DCD80DADB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
Manifest number:          01FB
Signing time:             Tue 26 Nov 2024 00:00:18 +0000
Manifest this update:     Tue 26 Nov 2024 00:00:18 +0000
Manifest next update:     Wed 27 Nov 2024 00:00:18 +0000
Files and hashes:         1: UPX-mbwiMohxFv2sgtQIKtvGrLc.crl (hash: w0hBzJCMp8+s5zBO30IOokmXQgdxj1j+qjaaXpRiF/c=)
                          2: tFJCxgAdaelahBdlCMHXFEzVtdc.roa (hash: 3aLl7yqqLq0vv9rxXh0+yTpGZpKtTwMdqCrZIIozkS4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:c4:d4:b7:1e:b6:75:59:63:5f:00:dc:d8:0d:ad:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
        Validity
            Not Before: Nov 26 00:00:18 2024 GMT
            Not After : Nov 27 00:00:18 2024 GMT
        Subject: CN=fa0bc344cadd18cef1b9d44e6b1f8af62567a435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:34:53:15:02:52:51:d5:26:0f:ba:12:cc:0e:
                    7d:a1:01:21:ad:cf:90:7e:40:fd:23:b4:08:c4:b0:
                    86:97:cb:98:b6:4b:a3:84:86:ca:56:9b:9f:c6:b8:
                    e0:6d:9d:43:2a:db:e8:4f:97:b1:8d:22:30:e9:0f:
                    8d:e5:bc:22:a3:50:80:ed:73:03:8c:06:b9:23:ea:
                    64:5f:55:db:66:f3:a6:12:fd:e8:9e:21:40:f3:71:
                    24:01:18:10:c8:38:63:7e:0b:64:27:14:eb:24:10:
                    09:11:72:30:3a:7a:ca:6d:f4:5a:71:7f:32:89:12:
                    77:52:fd:a1:f2:7a:f5:56:0b:78:15:c2:7e:dd:91:
                    8b:0d:bc:fa:2c:63:e3:8a:4e:9e:b8:63:9e:d3:47:
                    ac:db:88:80:11:33:ea:16:81:64:be:bf:aa:a6:68:
                    af:a4:4c:17:e9:2d:0c:98:5d:7a:88:f5:b1:4f:50:
                    03:9a:48:68:81:b5:5e:b9:d4:06:c3:c5:47:39:4a:
                    59:80:67:66:7f:e1:54:18:00:c8:9f:a0:c8:88:d3:
                    94:44:8a:5c:7e:1a:0a:7d:e5:c9:3d:d8:49:23:42:
                    74:2b:1b:fb:6f:64:52:fd:97:8e:c2:fd:42:43:c4:
                    f9:30:c0:90:99:83:84:c9:a6:e8:48:44:87:18:8b:
                    42:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0B:C3:44:CA:DD:18:CE:F1:B9:D4:4E:6B:1F:8A:F6:25:67:A4:35
            X509v3 Authority Key Identifier:
                keyid:50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e0:34:91:70:75:9c:c7:6e:d0:7f:65:be:6c:58:ae:01:d2:
         4e:bc:56:a4:0c:ad:80:aa:b9:c8:84:2a:82:de:58:2a:b3:81:
         fc:f7:a7:8d:68:a5:69:c1:57:ca:e3:bd:bb:6c:d5:72:cd:f8:
         65:a1:3b:b6:b1:67:6c:b1:2d:a7:9b:ce:ff:1b:bc:c1:32:61:
         79:b7:01:63:d9:59:bb:bd:2d:19:55:c8:b0:66:4e:74:4d:1d:
         7c:3e:7b:96:4f:2a:27:9c:b3:b6:98:3f:0c:34:b4:a9:87:08:
         61:ff:04:e3:08:74:dd:ed:05:4b:29:f6:86:85:a8:f1:df:74:
         e2:83:28:ce:11:a7:0d:f9:95:af:e0:aa:da:2d:eb:d3:62:c8:
         ed:69:ce:38:32:64:75:e4:d0:4f:f3:dc:9d:1f:3e:57:24:d7:
         65:d5:e8:70:11:1e:ef:37:6c:d8:a4:ad:18:cd:7a:15:71:2a:
         c3:ff:02:3f:23:d7:7f:5b:79:d6:fa:5d:ce:01:be:8d:1a:de:
         06:32:7c:c5:bc:7f:b8:e0:c8:ea:1b:73:1f:79:9e:e3:c8:31:
         05:0e:10:19:92:87:03:35:6e:fd:73:8a:a6:f1:ff:cd:d7:8a:
         2d:c1:d8:36:17:fc:6a:ca:df:58:47:83:de:1a:5b:79:63:83:
         63:6b:27:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:26:24 2024 by rpki-client on console-ams.rpki-client.org