Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
File:                     UDUgXD0BcT-di1sA41OWGbIzUjI.mft (raw, json)
Hash identifier:          6yfLf+i6/HapLyJJ973SyO9YeMejx+HDcGfpfW3OBzg=
Subject key identifier:   F4:A1:E2:D4:B7:BA:D8:55:67:72:DE:51:EA:52:D3:56:C9:AF:5D:53
Authority key identifier: 50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
Certificate issuer:       /CN=5035205c3d01713f9d8b5b00e3539619b2335232
Certificate serial:       01901E8FEC2919080520B105F9988D43A695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
Manifest number:          098F
Signing time:             Sun 16 Jun 2024 01:01:06 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:06 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:06 +0000
Files and hashes:         1: UDUgXD0BcT-di1sA41OWGbIzUjI.crl (hash: sg3Pt3QGwTFrCy4QKQKqwj8Mi2MjfaO7D4fZi7fgog0=)
                          2: tsxd5I17r7YoxLYdqe6sUanHTbc.roa (hash: plus18pPfscv26gYc9i7oXVnSD3wGUQQEAjGyCuKogI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:ec:29:19:08:05:20:b1:05:f9:98:8d:43:a6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5035205c3d01713f9d8b5b00e3539619b2335232
        Validity
            Not Before: Jun 16 01:01:06 2024 GMT
            Not After : Jun 17 01:01:06 2024 GMT
        Subject: CN=f4a1e2d4b7bad8556772de51ea52d356c9af5d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2a:ce:46:7f:2f:81:39:b5:61:2d:67:67:1e:
                    9a:6d:6b:ee:f1:5d:d2:9e:db:10:fd:61:b6:57:52:
                    a6:d4:af:c6:92:49:6d:d5:43:57:1f:74:56:74:b6:
                    6a:92:bf:ab:06:14:b0:d4:a3:f2:84:7e:44:99:d8:
                    da:73:b6:59:c0:e6:27:8b:3d:6f:2f:22:7f:c2:8c:
                    50:5d:a6:be:80:05:c0:50:78:51:b1:81:c0:ec:b5:
                    aa:f9:3c:3a:4f:82:0d:d7:23:80:44:55:aa:82:bb:
                    7a:3e:a0:00:f6:f3:e4:ce:5b:0f:03:69:5f:ac:f5:
                    1d:dc:ac:ba:62:83:ce:6a:5b:af:13:f9:40:e7:ff:
                    c9:a5:34:13:f7:20:29:7a:18:16:37:4e:f4:af:0a:
                    0c:11:c7:9b:04:87:f9:f8:74:73:9b:b6:23:6f:2b:
                    90:b5:53:9c:5e:8d:3a:f0:ba:9a:e8:54:10:22:6a:
                    db:bc:d0:48:91:36:83:8c:ee:77:db:30:2e:fd:9b:
                    a4:ca:c8:38:0a:c3:24:90:9c:f7:dd:1f:b5:4b:7a:
                    87:8f:d3:33:52:1f:fa:79:f9:2c:7d:0d:a1:44:ab:
                    29:76:9a:2f:12:d7:d5:cd:d5:da:61:ea:0c:0a:7a:
                    13:9e:7d:e3:5f:19:9d:85:93:2e:17:7c:ee:fa:ab:
                    14:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A1:E2:D4:B7:BA:D8:55:67:72:DE:51:EA:52:D3:56:C9:AF:5D:53
            X509v3 Authority Key Identifier:
                keyid:50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b4:03:f5:4d:24:9d:df:18:19:4e:25:cc:1e:1f:81:6d:95:
         f3:f2:56:c0:0f:1d:69:c1:97:8c:7c:8b:3f:b4:a4:2c:76:97:
         30:b1:70:00:28:07:c9:67:5d:4f:e5:e6:00:ce:c0:cf:21:ad:
         c7:e1:5d:fe:02:3d:ba:86:9b:5d:cd:ba:07:cf:58:39:5d:3a:
         3d:4d:28:92:21:2e:59:dc:30:22:ba:8b:4c:f5:87:2e:2d:a9:
         a5:6d:87:d3:e5:46:1f:5b:34:63:88:9a:23:1c:e3:51:28:bf:
         d0:c5:00:fe:48:d9:5b:e1:ac:68:99:61:94:a4:21:ca:24:fc:
         4c:92:57:b8:52:22:08:ac:c1:71:54:27:7e:c6:32:eb:ef:c7:
         5a:37:26:0b:d6:c4:c9:71:f5:2f:e3:f3:d5:7a:e4:b3:36:24:
         e6:f5:a7:06:4d:b9:1e:06:bf:59:bc:f4:55:d7:bf:0a:5a:dc:
         c1:71:06:bc:ab:5e:75:54:c4:c4:97:c8:a9:cf:23:44:ee:ae:
         3c:68:11:1e:b2:c5:36:53:de:2e:c5:34:1e:85:09:6a:a7:22:
         bf:84:33:12:5a:5d:5f:dd:2b:d6:0d:72:ae:8a:d3:77:6d:d5:
         25:18:f5:86:81:3a:30:af:d9:86:da:64:c1:75:6b:e1:80:d6:
         93:2b:ff:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:30:29 2024 by rpki-client on console-ams.rpki-client.org