Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
File:                     ujG8-SPF8lyvvavf3UblEfld8NE.mft (raw, json)
Hash identifier:          72Tq9l+QLruaEvJZBb681vxew7/C0a/oR+JccbqN25Q=
Subject key identifier:   DE:E8:04:F0:31:C5:17:CD:19:3D:00:02:61:AE:20:AF:FA:28:EB:3D
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Certificate issuer:       /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial:       01901C6AFBBF6F93EB568C5E25D392F0276B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 15:01:31 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:31 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:31 +0000
Files and hashes:         1: ujG8-SPF8lyvvavf3UblEfld8NE.crl (hash: Kn5vknTazrYecXIGv80XTgQTu79LdAyD3AqPP7OCp7o=)
                          2: wrSMUbFUhVZg1ozS85o4gI0GQFM.roa (hash: D1RFpHMWPXREdx5dfliBkze2l8fgXcRq/4zqhZTqqQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:fb:bf:6f:93:eb:56:8c:5e:25:d3:92:f0:27:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
        Validity
            Not Before: Jun 15 15:01:31 2024 GMT
            Not After : Jun 16 15:01:31 2024 GMT
        Subject: CN=dee804f031c517cd193d000261ae20affa28eb3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:22:44:31:b1:09:61:d1:cb:c4:7e:0b:e1:28:
                    e1:97:75:57:85:04:dc:ff:96:8d:80:46:3d:2f:77:
                    2f:18:4a:ea:82:01:07:5f:6e:e1:7e:96:c3:2f:d5:
                    e3:8b:32:83:43:26:59:1b:e6:40:5c:2f:ea:5f:15:
                    e3:84:06:54:6d:76:82:0c:a8:12:4d:ae:95:24:02:
                    68:12:f7:43:8b:e9:d8:65:19:37:44:44:6d:7e:71:
                    6b:ab:b4:d1:99:b0:27:8f:d2:b6:44:f6:7b:87:5c:
                    52:c7:74:66:f0:78:77:8d:0a:7b:41:a7:23:64:44:
                    65:a4:4a:3b:77:72:e7:1a:fb:13:62:8e:c3:14:27:
                    57:90:31:fc:4f:3d:80:e3:d4:39:71:df:6e:30:ca:
                    68:31:f7:8c:f6:3d:e4:56:82:62:62:ec:71:c9:4d:
                    c1:27:21:3e:17:a9:c2:59:7c:74:b8:29:41:83:bf:
                    19:b5:b9:f3:58:2e:84:d5:9b:75:6f:1e:b4:73:5c:
                    86:e2:fc:5c:4c:0e:db:19:f7:4f:be:f4:4a:4e:a0:
                    f1:b8:80:38:0e:c3:92:f0:53:63:a7:b2:0a:cb:79:
                    d1:d2:c0:b0:e0:92:71:1c:74:51:ae:62:be:26:51:
                    57:12:06:a5:fd:e3:0f:39:cb:34:c4:cf:41:7b:e7:
                    72:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E8:04:F0:31:C5:17:CD:19:3D:00:02:61:AE:20:AF:FA:28:EB:3D
            X509v3 Authority Key Identifier:
                keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:68:4b:6c:4b:5d:3f:1c:93:e2:eb:35:e0:3d:c9:d8:50:19:
         ea:9b:16:b7:89:a6:29:51:99:4f:86:3a:16:fd:0a:11:a3:24:
         5b:d3:88:ea:fa:90:4c:e5:4b:cd:b4:c6:d2:5b:8a:f8:d2:20:
         64:29:0c:59:5c:c5:39:5d:cf:93:d6:f5:9b:db:34:f8:a2:17:
         c4:b2:8b:f5:5e:c5:ba:8a:2a:5f:c4:ba:3f:19:87:6c:cb:75:
         37:94:6c:82:4d:41:c8:e9:30:9a:8d:fa:50:17:56:9d:83:2e:
         3c:50:97:7b:a8:78:23:9c:f4:34:25:b3:f2:06:40:ac:bf:e0:
         4a:e8:77:e6:2f:2c:c0:d2:bd:c7:99:b0:b3:f5:0e:55:ad:09:
         f7:9a:34:5b:9a:e0:4a:7e:0e:2a:1e:14:8e:a2:d9:c2:85:04:
         12:e5:af:21:a6:87:ea:53:b2:2f:aa:bc:59:26:0b:05:5c:09:
         1a:fe:ce:c6:ca:11:b4:2d:c2:f4:d7:32:05:12:eb:72:fb:31:
         c1:79:62:54:25:bf:f7:a5:a3:f4:22:4d:d7:25:ac:2a:e0:50:
         d0:85:d9:00:e0:51:a0:86:7f:ca:f8:e8:69:1e:66:33:7d:63:
         9d:d3:18:d5:a4:8d:46:20:8f:c9:cb:7d:ff:38:e5:d1:0d:a4:
         e0:91:63:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:59:27 2024 by rpki-client on console-fra.rpki-client.org