Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
File:                     UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft (raw, json)
Hash identifier:          /KxFzjNSRxQHo3CuDnidIBGSNfn6wwY+5ZsoRwepGnM=
Subject key identifier:   D0:55:C2:A2:97:5B:10:7C:03:E4:19:56:A7:D9:1A:68:9A:5C:B8:67
Authority key identifier: 52:62:D3:F2:7C:C0:5B:E5:92:4B:B7:BD:89:0F:7E:6D:EF:FB:49:7D
Certificate issuer:       /CN=5262d3f27cc05be5924bb7bd890f7e6deffb497d
Certificate serial:       01963EE7460E3F307F9696D0829F4B97E01E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmLT8nzAW-WSS7e9iQ9-be_7SX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
Manifest number:          1450
Signing time:             Wed 16 Apr 2025 14:01:06 +0000
Manifest this update:     Wed 16 Apr 2025 14:01:06 +0000
Manifest next update:     Thu 17 Apr 2025 14:01:06 +0000
Files and hashes:         1: UmLT8nzAW-WSS7e9iQ9-be_7SX0.crl (hash: lQnTRbMEf6O00B7bYGuuoItk90KO0yHVhYvNmeGU974=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UmLT8nzAW-WSS7e9iQ9-be_7SX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:e7:46:0e:3f:30:7f:96:96:d0:82:9f:4b:97:e0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5262d3f27cc05be5924bb7bd890f7e6deffb497d
        Validity
            Not Before: Apr 16 14:01:06 2025 GMT
            Not After : Apr 17 14:01:06 2025 GMT
        Subject: CN=d055c2a2975b107c03e41956a7d91a689a5cb867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:18:40:3c:7f:8a:ba:ab:04:25:07:52:2e:
                    09:16:66:83:8f:6a:7d:07:98:f5:1a:22:21:a4:14:
                    db:27:0f:f5:4f:57:a2:8d:65:18:c3:66:26:21:1a:
                    66:17:de:c9:af:39:a3:dc:2e:11:0e:cd:ea:8c:92:
                    29:6f:8f:dd:3e:aa:93:0a:f6:de:b8:54:2b:30:3f:
                    e2:75:d3:cc:16:f1:82:29:8a:12:ae:b9:60:66:90:
                    61:b4:60:d2:b0:bd:57:68:7c:ad:da:48:65:19:46:
                    dc:e6:bf:05:9d:78:86:f0:4d:96:ea:42:f5:6c:93:
                    e4:75:01:d5:1f:02:2b:6a:8a:e9:84:a5:b5:b5:08:
                    7d:ce:26:25:1d:c4:09:58:dc:64:9f:cd:ad:d8:e1:
                    1f:c2:f2:6e:ab:f8:a8:76:31:c7:d6:ef:00:a7:dc:
                    c9:2e:a2:38:aa:7f:33:8c:75:0a:b4:75:77:9c:aa:
                    19:80:02:3b:a6:5b:81:af:98:9e:97:af:d0:b1:41:
                    86:08:28:e1:6e:d5:4b:92:a4:86:ef:44:ae:35:d0:
                    f8:1f:7f:b0:25:a9:fa:45:96:d3:68:ba:9c:5c:e1:
                    27:e5:01:20:17:5a:ea:36:7e:ed:e7:1b:e5:b5:e7:
                    a9:2c:ee:7b:ed:09:88:0d:4f:8d:2a:fd:3a:86:eb:
                    ef:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:55:C2:A2:97:5B:10:7C:03:E4:19:56:A7:D9:1A:68:9A:5C:B8:67
            X509v3 Authority Key Identifier:
                keyid:52:62:D3:F2:7C:C0:5B:E5:92:4B:B7:BD:89:0F:7E:6D:EF:FB:49:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmLT8nzAW-WSS7e9iQ9-be_7SX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b6:5f:78:b6:39:63:89:3a:38:94:b6:bb:cc:72:80:0c:81:
         f3:71:43:1a:43:88:5f:f4:8a:8f:fd:37:e6:8a:90:8e:8e:6b:
         da:94:a8:37:a6:23:51:b5:31:f9:49:8a:fb:32:8f:c4:2c:48:
         ed:d4:63:0e:29:10:35:39:e0:0d:5a:31:01:0a:f6:b4:ce:2d:
         db:17:8e:7f:c6:da:34:b3:1e:c9:b7:92:e5:b5:e6:17:7b:ea:
         95:0e:25:b5:bd:55:2a:0a:83:8a:0e:3e:c0:85:22:8c:29:c0:
         d4:5a:fb:e1:c5:37:90:9d:5b:17:e3:e4:08:ee:dc:78:73:1d:
         75:2d:cc:94:e9:cc:a9:86:20:64:43:4d:6f:01:36:fa:9a:6b:
         2f:39:90:8d:d9:25:8e:9c:1f:3f:e6:cc:e8:00:1f:45:6b:1f:
         69:29:d7:29:99:30:fe:59:45:cc:0d:08:32:74:b8:21:07:e4:
         b5:b4:45:ca:e8:56:c4:7a:fb:4b:7c:ed:7d:f1:ff:1f:75:d8:
         eb:2e:3c:f3:a2:9b:30:02:60:3c:51:0c:ba:d3:7b:62:0e:51:
         79:f8:d2:bf:d3:6e:41:92:83:5f:76:33:b6:99:31:f0:ec:be:
         71:89:4f:b5:ca:20:6e:90:14:22:5a:45:4f:d4:36:a4:ee:ce:
         d3:8e:10:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:31:10 2025 by rpki-client