Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
File:                     UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft (raw, json)
Hash identifier:          x93Io2scg22J4L3EeWvWl9RQw/n4qmodTUCIIMlCKVg=
Subject key identifier:   76:FE:29:E0:92:E5:F1:FB:F8:B5:1F:45:54:BC:02:F2:61:9E:C2:F6
Authority key identifier: 50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
Certificate issuer:       /CN=50399d4435bb85fae910abe38e68533204dfd60b
Certificate serial:       0194BB5FF1006C414177A9F96CF2CCA2033B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 08:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:14 +0000
Files and hashes:         1: UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl (hash: JaWnyyFmgtEWvZHGXZySdgLtn8EEAb0G8JZDGQivpXk=)
                          2: pRF0g-KmjQVzQy4b6X1bq_CpEUE.roa (hash: fou9eP6aKJvlZgNY8H8VBsOY1ef+bJJW7cLSICuAHvo=)
                          3: qY-nefcH-LOOVfCQihz5CCt5mqI.roa (hash: Dn21UEBAZW+JYaxSGEnZx/UyFGhOmUarhMAoNzBQGQ0=)
                          4: rFlugNGr-3DyDG3Ypn6kJRgihYw.roa (hash: Moz7baZEmGb60gs946/SMPJbRzqsgdeQtjmQD/8Bfj4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:5f:f1:00:6c:41:41:77:a9:f9:6c:f2:cc:a2:03:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50399d4435bb85fae910abe38e68533204dfd60b
        Validity
            Not Before: Jan 31 08:00:14 2025 GMT
            Not After : Feb  1 08:00:14 2025 GMT
        Subject: CN=76fe29e092e5f1fbf8b51f4554bc02f2619ec2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:9d:a4:e0:98:56:57:4a:4a:0b:ad:2f:63:
                    e6:49:6f:e9:54:6a:d3:95:bd:9f:b6:a7:15:2b:89:
                    6c:81:3a:30:80:10:3e:4d:a9:8b:c2:76:f1:82:cf:
                    c2:1a:83:46:fc:b3:f4:14:92:cc:79:43:fb:53:6c:
                    30:d3:6d:33:0a:07:19:f0:e7:0e:8e:39:23:01:36:
                    84:7e:9f:cf:42:fc:30:14:9b:18:08:06:e6:80:02:
                    53:f1:8e:1d:35:75:97:d0:3e:2a:4b:36:8c:b9:79:
                    a7:c9:32:da:16:ca:fd:9d:e3:c3:57:e8:f8:d8:bb:
                    b9:e2:33:40:bd:35:ac:02:3e:23:48:c4:35:dc:bc:
                    05:71:84:68:6b:a5:96:67:e8:e4:d3:04:5c:b9:a6:
                    0b:70:a3:68:28:8c:6b:f4:95:96:72:fe:82:e8:a8:
                    83:a2:3a:13:fa:44:b5:c9:52:b6:c7:32:86:79:79:
                    5b:33:83:4e:6b:a9:fd:a2:5f:18:90:bc:40:fd:4d:
                    2d:38:cd:c7:7c:05:2c:4f:e1:2d:b6:bb:2d:5a:39:
                    0f:76:0b:76:44:2a:c0:14:fa:e6:e0:92:94:dc:62:
                    ab:78:3d:bb:c8:89:fc:1f:f4:c6:c3:83:12:99:26:
                    60:ef:56:e5:17:f4:fc:90:ea:21:05:b0:ad:ec:08:
                    3f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FE:29:E0:92:E5:F1:FB:F8:B5:1F:45:54:BC:02:F2:61:9E:C2:F6
            X509v3 Authority Key Identifier:
                keyid:50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d1:2d:3f:d6:24:5e:4d:cb:ec:23:95:9f:dc:e1:26:2b:b8:
         b4:8b:93:24:a0:05:e7:04:be:43:33:5a:52:63:9a:4c:18:d0:
         96:c9:fe:92:e1:85:66:88:13:21:2c:a3:89:3f:d0:51:16:a3:
         78:cc:3f:42:3f:46:74:6b:fc:77:2c:81:79:85:89:5e:10:b3:
         f5:01:d6:56:00:6e:fb:a4:7d:b6:e4:48:95:08:0c:ea:9a:83:
         fa:8e:8d:c3:cc:a2:04:f2:de:4c:8b:6f:d0:4e:ea:e7:88:71:
         57:5d:ca:51:0d:65:a5:60:8a:a4:d6:df:97:be:fa:36:31:58:
         9f:4e:10:89:d3:f8:72:d6:ea:57:ec:ef:68:1b:97:79:5b:59:
         0c:bc:74:58:8f:46:2c:f5:d1:b1:5a:26:fe:36:48:96:61:3e:
         7a:cd:75:b5:7e:50:c8:95:36:7a:0d:f4:ee:b8:48:78:ec:be:
         c5:33:6b:a1:43:01:74:c7:94:71:f8:7b:f7:d6:7c:4d:30:d0:
         d4:55:9b:2d:13:8e:a4:ea:eb:e7:c6:38:c5:c7:35:4e:fc:88:
         9a:b2:1c:1f:c9:7c:a6:ac:ee:36:26:88:c8:95:c2:0a:a8:b8:
         87:08:6f:79:52:a4:d7:f3:17:5a:19:29:3c:2e:13:cf:e8:3f:
         96:07:5f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:09 2025 by rpki-client on console-fra.rpki-client.org