Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
File:                     UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft (raw, json)
Hash identifier:          Htxfn4iNmLmpSfCT3W0rEWPs7ACS0pdjNsDOZP5FD/8=
Subject key identifier:   A7:22:9A:B8:D8:5C:E6:2A:87:58:5F:55:E7:99:7B:80:E1:01:C9:EC
Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
Certificate issuer:       /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Certificate serial:       019675D4FB5016ABB2121C7D58A07A00C0A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
Manifest number:          1511
Signing time:             Sun 27 Apr 2025 06:00:14 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:14 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:14 +0000
Files and hashes:         1: 9m785MXZwp0BQtk_jk4fp9A4qB0.roa (hash: u+8J+4zJtWHS217NkWrzbcfb0E+Zj0l1Wu1mFSLU2lI=)
                          2: UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl (hash: Uqjp9lnQHqHvd3nFPsp4ygqFEbqsBuRgQ/DvxqFLN48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d4:fb:50:16:ab:b2:12:1c:7d:58:a0:7a:00:c0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
        Validity
            Not Before: Apr 27 06:00:14 2025 GMT
            Not After : Apr 28 06:00:14 2025 GMT
        Subject: CN=a7229ab8d85ce62a87585f55e7997b80e101c9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:96:75:32:15:25:5b:9b:b5:23:76:99:3d:3d:
                    97:5b:50:51:95:06:3c:30:78:ac:03:64:9d:77:68:
                    c7:f7:56:30:1e:35:c8:ba:d3:32:b9:0b:e8:8a:6f:
                    7f:f7:37:99:3e:48:ac:7a:4b:70:d7:70:1c:a2:8f:
                    e7:e9:31:74:ce:c2:4e:b7:ca:d8:47:8b:67:d3:25:
                    f8:89:27:81:5b:15:5f:12:35:66:d7:3c:c1:b2:c9:
                    54:d0:77:24:fc:14:0e:6b:19:74:e7:56:e7:d6:7e:
                    54:a6:a3:fe:38:e1:cc:6d:13:65:e3:b7:3c:b2:f0:
                    4a:69:a1:ee:e0:ed:64:22:d7:b5:0b:38:20:e0:75:
                    b6:6f:64:ef:2c:38:01:59:87:b1:d6:ba:af:09:e7:
                    e6:b2:c8:bc:71:0b:69:90:7b:36:f0:cc:90:2a:9e:
                    c7:f3:95:85:71:4a:8d:09:25:8d:da:95:1b:2f:fe:
                    92:cf:b1:d9:ed:e3:f1:9e:c7:99:3f:43:c7:02:73:
                    5a:9a:d8:0f:47:4d:98:60:60:33:b6:22:d6:fc:f9:
                    dc:db:32:fe:fc:55:e6:a4:e7:10:1e:25:aa:9a:64:
                    c5:60:bd:45:71:02:7f:70:05:41:53:7c:9f:7c:24:
                    c3:30:cd:6b:63:ae:26:0d:8e:72:65:fb:f9:81:01:
                    36:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:22:9A:B8:D8:5C:E6:2A:87:58:5F:55:E7:99:7B:80:E1:01:C9:EC
            X509v3 Authority Key Identifier:
                keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:73:9a:0e:9f:1f:a5:f9:d0:af:ad:06:f9:e4:b0:8a:ca:7f:
         a0:04:6b:ae:18:f8:6f:1b:59:9f:a0:b0:da:e8:80:fd:aa:90:
         11:95:77:e0:93:ca:65:e1:29:34:97:00:fa:d5:ad:5c:5a:58:
         95:fe:e7:22:32:7b:27:7e:84:d2:87:9b:a4:de:56:cb:3a:ae:
         4c:71:98:79:10:b7:f5:94:87:1e:c5:0e:c7:1e:73:09:1c:6f:
         ff:77:34:75:34:fe:33:43:50:07:9c:c7:ee:bf:d3:02:3b:de:
         46:94:b5:62:af:ba:cb:72:9b:0e:ea:a8:2d:d1:c6:aa:08:e6:
         0c:3d:9e:9f:0d:58:22:5c:a7:1d:c5:65:fd:b1:71:b9:0f:d8:
         6d:e5:ce:bf:5c:f2:53:44:7a:b0:10:84:76:4c:21:bd:98:01:
         0e:0e:e1:74:f8:c8:fe:9d:8f:7b:88:3f:de:e3:65:fb:9b:5c:
         c5:e4:f0:f8:0a:ca:f0:60:2e:e2:c2:78:ff:5b:1e:28:22:b6:
         54:48:97:e1:03:8e:14:78:74:21:61:6d:3d:ee:0b:e0:f9:db:
         60:cf:33:a8:0e:15:72:f2:cd:4c:c7:11:ce:3a:55:be:b0:2b:
         08:86:1a:84:03:9d:be:1c:8e:a5:0d:e8:d0:80:70:cd:c2:ba:
         fa:ab:e6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:45:03 2025 by rpki-client