Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
File:                     UTIqxJAgylfHTzsUi8BBAsq63IM.mft (raw, json)
Hash identifier:          wE/4AmC4e6sH9GtEFd1dR3d2s6sKErkSw1t1vSZZCNE=
Subject key identifier:   70:6B:A0:89:57:E5:5D:AD:2F:BC:18:FC:3A:E6:31:A7:B9:DD:67:FD
Authority key identifier: 51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
Certificate issuer:       /CN=51322ac49020ca57c74f3b148bc04102cabadc83
Certificate serial:       01901F34FED87DBDD0006817B800D9AA81AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
Manifest number:          0CA2
Signing time:             Sun 16 Jun 2024 04:01:25 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:25 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:25 +0000
Files and hashes:         1: UTIqxJAgylfHTzsUi8BBAsq63IM.crl (hash: 1ZJtWxI4vzCGLK3Q4s5MLAFL2Rccso/JSKb6F3HPZs0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:fe:d8:7d:bd:d0:00:68:17:b8:00:d9:aa:81:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51322ac49020ca57c74f3b148bc04102cabadc83
        Validity
            Not Before: Jun 16 04:01:25 2024 GMT
            Not After : Jun 17 04:01:25 2024 GMT
        Subject: CN=706ba08957e55dad2fbc18fc3ae631a7b9dd67fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:61:0d:aa:00:82:22:32:a2:72:37:4f:7e:
                    64:9a:02:3c:47:8d:ba:97:f1:fd:a0:54:c6:e0:5d:
                    09:6c:11:95:ae:81:5d:ff:be:15:73:e8:60:a7:5e:
                    26:4e:86:f6:fc:87:34:06:f0:7f:5d:62:5b:1e:5a:
                    09:71:70:d5:cd:95:d1:33:a7:cd:a7:78:1b:fb:30:
                    6f:f3:df:d6:21:76:7b:1e:26:11:7d:a4:59:d7:a1:
                    3e:f6:ee:2e:59:65:c5:e1:e2:75:09:d7:c1:b5:14:
                    5c:ec:93:8e:7f:fd:a3:a2:32:1d:49:57:d3:86:0b:
                    a3:76:bb:e2:52:8c:39:07:69:65:fd:ba:fb:a6:9e:
                    32:8a:99:a8:72:56:39:39:37:15:78:53:14:c3:19:
                    c1:39:1b:00:e9:0a:94:c1:c4:e4:6b:01:8f:32:77:
                    4a:fb:21:ec:0e:ab:1a:34:b9:a3:61:60:a6:2e:12:
                    07:2e:31:3a:b5:be:2f:3a:56:ec:18:a3:55:5c:15:
                    55:71:66:d5:3b:14:7b:01:fb:c5:37:39:b7:eb:bb:
                    96:16:a0:5e:d9:d6:74:af:e7:93:03:90:01:aa:a0:
                    a8:60:45:30:d0:a7:a5:11:5e:28:77:45:d2:1c:92:
                    f7:7a:ef:90:25:d0:23:4a:5b:b8:0a:7e:ed:4d:69:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6B:A0:89:57:E5:5D:AD:2F:BC:18:FC:3A:E6:31:A7:B9:DD:67:FD
            X509v3 Authority Key Identifier:
                keyid:51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:fb:3a:81:3b:7b:06:2f:57:83:d5:18:b0:58:63:8a:f8:
         c4:9d:d2:47:64:3b:8d:5c:44:c3:ac:45:5c:46:89:75:d6:66:
         d0:31:bc:2a:86:a6:d4:ce:a3:3e:87:0c:fa:8c:c1:7a:75:cd:
         86:b3:f3:ad:a6:0d:89:34:62:03:9e:19:a4:f0:b7:ac:fd:84:
         f9:7d:72:d6:42:51:1c:56:89:32:08:52:bc:9b:9a:ef:7e:e2:
         d9:d0:49:e1:ba:0d:85:d9:b8:83:9a:8a:4b:5b:5c:b2:83:6b:
         f6:33:94:53:1b:45:c6:54:09:16:8e:9b:86:37:ae:ed:2b:22:
         3c:80:14:5a:38:71:74:8d:62:1b:64:3f:76:e8:5e:18:aa:5d:
         d3:b8:81:77:f4:fa:79:b2:bd:b9:9f:13:ab:a1:f0:6f:95:9f:
         8f:6e:d2:d0:20:c4:70:7e:9c:41:68:53:65:58:2a:51:62:c1:
         cc:34:d9:56:e9:1b:3d:89:5f:4f:b4:e3:6b:ce:67:12:21:72:
         ca:a7:ee:87:76:93:a6:85:fb:77:85:72:51:72:1a:92:72:1c:
         33:ba:b5:bc:41:ef:44:cf:c9:4f:2b:d0:9b:43:ed:d3:01:83:
         b5:ee:51:4e:b3:e0:27:15:ad:ed:c3:dd:3c:dd:37:a2:86:66:
         d1:cf:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:32:40 2024 by rpki-client on console-ams.rpki-client.org