Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
File:                     Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft (raw, json)
Hash identifier:          XTx39G1zm8jLLV1KVgAgskbK1N6MP9pYnf8aI6/QoLw=
Subject key identifier:   21:66:16:5B:D4:2A:47:33:C7:AB:51:DB:78:82:8E:2C:37:D7:64:EB
Authority key identifier: 52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71
Certificate issuer:       /CN=52eff385d4b48215d805b588a2705829d4621171
Certificate serial:       019040AFC8839010D15EEE5A00B10E1B0C80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
Manifest number:          0581
Signing time:             Sat 22 Jun 2024 16:03:00 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:00 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:00 +0000
Files and hashes:         1: Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl (hash: +M7CJRfWsIQEJiP0PSZZzi87A/S7l0nn3Ejw7FwjSi0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:c8:83:90:10:d1:5e:ee:5a:00:b1:0e:1b:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52eff385d4b48215d805b588a2705829d4621171
        Validity
            Not Before: Jun 22 16:03:00 2024 GMT
            Not After : Jun 23 16:03:00 2024 GMT
        Subject: CN=2166165bd42a4733c7ab51db78828e2c37d764eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:39:34:c5:6f:95:f4:4a:2d:be:ca:24:0c:
                    d4:d1:dd:f9:eb:bc:a7:5a:67:5f:10:3d:b8:ab:4d:
                    0b:63:d4:b2:c5:8c:e1:9b:66:8c:fc:02:f4:65:fb:
                    f2:db:38:67:dc:d4:61:b3:f3:ff:a8:29:3b:ca:0a:
                    39:53:eb:1b:04:59:46:72:3b:74:37:ce:c3:9c:24:
                    b3:19:3c:c4:8a:9f:4b:72:8b:ea:af:22:1a:a2:c3:
                    33:df:24:79:98:22:87:f7:ac:32:41:0c:b6:68:93:
                    c1:f8:1d:94:fc:64:a1:a0:64:21:79:a7:eb:a3:2d:
                    6d:12:6b:04:c0:8f:ef:52:e0:b4:13:39:2b:0e:78:
                    8f:be:dd:86:08:c3:fd:45:de:ae:49:68:3e:b9:d7:
                    0c:ac:30:94:04:7a:e1:ca:56:ee:b5:97:b1:fe:c1:
                    1e:52:8b:b1:82:eb:d5:7b:0f:fd:9d:bb:fa:16:50:
                    c4:53:50:fc:3d:22:72:94:5b:68:c2:47:21:e7:43:
                    67:19:a7:07:34:43:31:73:72:63:f7:07:ab:d2:52:
                    d7:db:aa:b4:e7:fa:75:e8:cd:6f:d2:74:7e:33:9e:
                    e8:b8:95:ad:e5:3c:1a:ed:54:a9:bd:ad:fb:0e:b2:
                    69:cd:c9:92:aa:9f:10:e4:e7:57:f5:6c:1e:31:5f:
                    2e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:66:16:5B:D4:2A:47:33:C7:AB:51:DB:78:82:8E:2C:37:D7:64:EB
            X509v3 Authority Key Identifier:
                keyid:52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:6d:dc:8f:4e:e7:3b:0e:7c:c9:38:29:a8:07:ed:ce:26:32:
         82:54:44:9e:6b:0d:03:cd:89:fc:99:c1:69:2e:26:db:88:11:
         d1:6c:5e:fd:d3:e5:0b:24:74:6c:60:80:6a:27:dc:86:7c:db:
         d3:15:cb:26:e8:f6:f1:98:59:27:fa:75:79:4a:1d:8b:9b:2c:
         e3:07:25:99:fc:2b:1e:b3:29:66:59:43:18:6e:87:c3:8b:91:
         c1:e2:85:7b:f6:48:e9:1f:f6:a0:07:6b:c0:bd:b0:12:35:47:
         74:9e:1b:a2:6a:c9:11:56:64:91:3b:98:a1:09:b8:94:99:a0:
         36:77:d8:54:ca:37:dd:ff:0e:70:78:16:96:ac:0d:71:91:3c:
         31:e2:64:f9:ff:79:21:90:13:88:d6:7f:d4:84:73:59:dc:34:
         5a:fb:f5:e9:c1:ef:bb:97:d8:ef:9e:1d:42:bf:60:29:6e:53:
         dc:88:8d:6c:0c:7c:6f:5e:55:55:b6:70:a0:3f:b7:67:70:c9:
         6b:51:af:2c:85:13:e0:61:05:53:99:b9:4e:e6:3a:da:46:ba:
         01:94:fa:b6:10:c7:c1:44:95:38:f3:b7:8c:f6:1e:c0:9b:84:
         ef:24:f6:5b:05:84:7a:3b:14:65:2a:94:11:0d:fd:ad:10:7a:
         40:b2:b5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:19:25 2024 by rpki-client on console-ams.rpki-client.org