Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
File:                     UUxVK7lETAD5Ty8FlMujUvwsu7w.mft (raw, json)
Hash identifier:          02I1xhr3pOf6OiAOXiM3COF2wBVnxJduRBiNxon7jfA=
Subject key identifier:   C9:2B:7C:F5:7A:29:B6:FB:2B:F8:B9:5B:65:B1:0E:86:11:B2:00:CF
Authority key identifier: 51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
Certificate issuer:       /CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Certificate serial:       01967FEAEC19AD1C8ACD9198F2C8B8AFD775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
Manifest number:          1514
Signing time:             Tue 29 Apr 2025 05:00:24 +0000
Manifest this update:     Tue 29 Apr 2025 05:00:24 +0000
Manifest next update:     Wed 30 Apr 2025 05:00:24 +0000
Files and hashes:         1: UUxVK7lETAD5Ty8FlMujUvwsu7w.crl (hash: vl/LOzulepXxASuHe+HtKgiGfPWx2TFOPHuieOUjBR4=)
                          2: xWOpZfRr7thuD6cUtKvPdI-_VBQ.roa (hash: Pf5kik5m7cGGBhNkzoxIAzTv7Y7VAUUsC50OhLmpfJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:ea:ec:19:ad:1c:8a:cd:91:98:f2:c8:b8:af:d7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
        Validity
            Not Before: Apr 29 05:00:24 2025 GMT
            Not After : Apr 30 05:00:24 2025 GMT
        Subject: CN=c92b7cf57a29b6fb2bf8b95b65b10e8611b200cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7d:72:c2:2b:db:aa:53:2c:ca:00:27:7d:e6:
                    ca:e5:fd:75:9a:e3:d7:cf:2b:1b:24:47:f7:29:d2:
                    ad:24:72:3f:93:7c:c4:e4:c8:3b:d9:5a:ee:cf:0e:
                    c0:49:b5:7f:e7:85:ab:a1:3b:66:67:89:61:f2:8f:
                    ac:25:02:d3:f1:5b:35:13:1b:44:75:98:b9:3b:da:
                    3d:04:9d:f8:58:67:85:8a:44:d2:d7:95:73:30:98:
                    ea:7f:92:37:b6:84:cb:4e:4c:71:8c:5f:68:79:93:
                    79:f7:26:8d:6f:42:cc:30:a4:48:e6:ce:07:a4:36:
                    a4:1f:2e:c2:33:c7:48:68:13:17:8b:d6:b7:72:21:
                    49:62:0c:0c:86:bf:65:7a:4f:91:c6:a2:43:45:27:
                    3d:09:06:92:87:9f:bf:42:e6:f0:8c:0c:23:4f:e2:
                    34:7e:65:ac:ab:35:9a:9d:a7:7a:e4:2e:19:b4:de:
                    aa:c8:2c:3f:8a:e3:96:b9:a6:60:88:02:88:03:f7:
                    ad:03:2e:65:46:b8:d8:05:3d:2b:97:ae:88:0f:dd:
                    24:34:13:a6:66:1c:90:49:d0:d9:37:66:68:dc:b5:
                    6f:05:a9:36:57:1c:af:75:5d:7e:f7:8c:15:d1:2f:
                    f4:80:cd:c6:bb:89:a9:b7:70:4b:9e:37:67:6e:89:
                    fa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2B:7C:F5:7A:29:B6:FB:2B:F8:B9:5B:65:B1:0E:86:11:B2:00:CF
            X509v3 Authority Key Identifier:
                keyid:51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:42:0d:e3:23:e0:96:37:3c:42:2e:b1:7b:29:73:c9:ee:c0:
         0c:3f:7f:fd:45:f4:7a:59:85:70:4a:93:cd:96:1e:71:5a:55:
         41:9d:45:94:e7:b6:13:a4:34:01:c9:b6:8f:5f:fc:4c:24:43:
         51:fb:3f:fc:c7:01:be:a1:13:eb:dd:d8:21:4b:33:83:95:c5:
         e2:44:06:34:db:6f:df:5c:ed:cd:d9:07:01:69:49:52:0a:0c:
         1c:7d:c3:a3:38:82:ee:1a:8b:58:e4:29:74:6d:20:8e:e2:3c:
         c9:19:b0:29:fb:6f:b4:37:7a:dd:f8:61:17:7c:fa:fd:51:1b:
         c6:a8:80:53:e8:b9:66:8f:0d:e8:25:83:0e:b3:f6:6e:33:b6:
         6b:ff:51:dd:0b:70:03:d4:76:50:5d:9d:f2:a2:9c:02:a4:26:
         8d:96:19:03:ea:27:e4:b8:76:07:ad:25:56:db:15:b3:fe:25:
         a5:11:16:9d:af:af:0b:e8:31:11:e9:cd:f0:1a:21:d5:65:04:
         fd:7a:c8:97:f5:0a:16:2b:d6:3f:1c:38:2e:d7:ac:d3:a6:34:
         80:63:5e:fc:24:6e:c3:c4:b1:18:3a:79:c6:85:e3:f5:21:21:
         3e:71:f1:c7:5a:4c:c5:02:21:b7:3b:00:99:1d:dc:bc:40:ca:
         6e:b5:1e:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/6uwZrRyKzZGY8si4r9d1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNGM1NTJiYjk0NDRjMDBmOTRmMmYwNTk0Y2JhMzUyZmMy
Y2JiYmMwHhcNMjUwNDI5MDUwMDI0WhcNMjUwNDMwMDUwMDI0WjAzMTEwLwYDVQQD
EyhjOTJiN2NmNTdhMjliNmZiMmJmOGI5NWI2NWIxMGU4NjExYjIwMGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6n1ywivbqlMsygAnfebK5f11muPX
zysbJEf3KdKtJHI/k3zE5Mg72Vruzw7ASbV/54WroTtmZ4lh8o+sJQLT8Vs1ExtE
dZi5O9o9BJ34WGeFikTS15VzMJjqf5I3toTLTkxxjF9oeZN59yaNb0LMMKRI5s4H
pDakHy7CM8dIaBMXi9a3ciFJYgwMhr9lek+RxqJDRSc9CQaSh5+/QubwjAwjT+I0
fmWsqzWanad65C4ZtN6qyCw/iuOWuaZgiAKIA/etAy5lRrjYBT0rl66ID90kNBOm
ZhyQSdDZN2Zo3LVvBak2VxyvdV1+94wV0S/0gM3Gu4mpt3BLnjdnbon6pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkrfPV6Kbb7K/i5W2WxDoYRsgDPMB8GA1UdIwQY
MBaAFFFMVSu5REwA+U8vBZTLo1L8LLu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVV4Vks3bEVUQUQ1VHk4RmxNdWpVdndzdTd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS84YjBiMTktZmJmYS00MzU3LWIyOTAt
OWVhNzUxZDU5YWI3LzEvVVV4Vks3bEVUQUQ1VHk4RmxNdWpVdndzdTd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS84YjBiMTktZmJmYS00MzU3LWIyOTAtOWVhNzUxZDU5YWI3
LzEvVVV4Vks3bEVUQUQ1VHk4RmxNdWpVdndzdTd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUIN4yPg
ljc8Qi6xeylzye7ADD9//UX0elmFcEqTzZYecVpVQZ1FlOe2E6Q0Acm2j1/8TCRD
Ufs//McBvqET693YIUszg5XF4kQGNNtv31ztzdkHAWlJUgoMHH3DoziC7hqLWOQp
dG0gjuI8yRmwKftvtDd63fhhF3z6/VEbxqiAU+i5Zo8N6CWDDrP2bjO2a/9R3Qtw
A9R2UF2d8qKcAqQmjZYZA+on5Lh2B60lVtsVs/4lpREWna+vC+gxEenN8Boh1WUE
/XrIl/UKFivWPxw4Ltes06Y0gGNe/CRuw8SxGDp5xoXj9SEhPnHxx1pMxQIhtzsA
mR3cvEDKbrUe9Q==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:31:54 2025 by rpki-client