Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/33b56d-1943-4bf5-a3b9-c96b8762181d/1/UCEgVRzt4dQIwdliiazjv-K9QKE.mft
File:                     UCEgVRzt4dQIwdliiazjv-K9QKE.mft (raw, json)
Hash identifier:          IZMeEJTra/M+KnGqW6PMgKwh7NJxh8pXNPK5dBaj5GQ=
Subject key identifier:   46:C8:F1:DB:DD:E9:07:05:50:6A:89:EE:1D:46:01:2D:B9:C3:17:7D
Authority key identifier: 50:21:20:55:1C:ED:E1:D4:08:C1:D9:62:89:AC:E3:BF:E2:BD:40:A1
Certificate issuer:       /CN=502120551cede1d408c1d96289ace3bfe2bd40a1
Certificate serial:       01901DEAD2985E76131003886DAC1446EA26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCEgVRzt4dQIwdliiazjv-K9QKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/33b56d-1943-4bf5-a3b9-c96b8762181d/1/UCEgVRzt4dQIwdliiazjv-K9QKE.mft
Manifest number:          0242
Signing time:             Sat 15 Jun 2024 22:00:46 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:46 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:46 +0000
Files and hashes:         1: UCEgVRzt4dQIwdliiazjv-K9QKE.crl (hash: w+bp9ruUvYkb4LrlYy34TFM9zOFETS3M5a3aFM/+uFk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/33b56d-1943-4bf5-a3b9-c96b8762181d/1/UCEgVRzt4dQIwdliiazjv-K9QKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/33b56d-1943-4bf5-a3b9-c96b8762181d/1/UCEgVRzt4dQIwdliiazjv-K9QKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UCEgVRzt4dQIwdliiazjv-K9QKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:d2:98:5e:76:13:10:03:88:6d:ac:14:46:ea:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502120551cede1d408c1d96289ace3bfe2bd40a1
        Validity
            Not Before: Jun 15 22:00:46 2024 GMT
            Not After : Jun 16 22:00:46 2024 GMT
        Subject: CN=46c8f1dbdde90705506a89ee1d46012db9c3177d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:50:94:7d:6f:42:93:44:0c:2b:88:4e:6d:5d:
                    f1:b3:01:c0:26:89:de:90:c0:03:64:a6:af:51:12:
                    a2:28:dd:22:5d:54:c8:c1:b3:cd:cb:38:d1:2d:9f:
                    92:5f:b0:53:65:3b:89:b8:67:4a:5e:fe:db:fb:41:
                    7a:f7:fd:5c:77:5c:c1:e0:87:01:08:7c:1e:52:e8:
                    d4:67:d7:f5:a3:e6:c1:b6:fe:c7:6b:fa:84:3c:b7:
                    12:e0:ce:de:61:fa:39:1c:c2:19:b1:b8:82:e1:5c:
                    67:d8:86:e1:a1:fa:0c:84:c7:d4:09:35:d6:3b:e0:
                    60:84:5a:9d:e1:c9:46:3f:ce:db:84:b2:5c:9d:6b:
                    af:b8:06:dd:b3:12:39:c3:37:6a:f6:7a:91:19:ce:
                    ca:33:9c:05:f6:46:f1:bc:de:51:75:1e:e2:ff:3b:
                    ca:28:31:eb:50:c0:74:21:fa:93:3c:38:ec:72:a4:
                    1c:84:b6:c2:48:c8:7d:c2:e6:4d:d7:85:5b:bd:31:
                    42:6f:ec:72:89:bb:bf:53:38:72:83:ff:b0:bf:9f:
                    a1:23:46:dd:60:be:5b:25:72:9e:a2:bc:f0:0e:a1:
                    45:2a:06:ed:e3:4f:a7:05:1b:7e:e2:2d:99:7b:6d:
                    a0:d3:c2:ee:21:4a:8f:fd:07:60:a0:c0:c0:6b:8e:
                    a6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C8:F1:DB:DD:E9:07:05:50:6A:89:EE:1D:46:01:2D:B9:C3:17:7D
            X509v3 Authority Key Identifier:
                keyid:50:21:20:55:1C:ED:E1:D4:08:C1:D9:62:89:AC:E3:BF:E2:BD:40:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCEgVRzt4dQIwdliiazjv-K9QKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/33b56d-1943-4bf5-a3b9-c96b8762181d/1/UCEgVRzt4dQIwdliiazjv-K9QKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/33b56d-1943-4bf5-a3b9-c96b8762181d/1/UCEgVRzt4dQIwdliiazjv-K9QKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:de:7e:dc:c3:e8:d8:2f:0f:52:e4:de:47:5e:1c:10:93:f9:
         ae:c0:45:29:43:1d:9b:09:8a:4f:a1:40:bd:04:b3:29:fc:f7:
         4c:ac:46:75:05:01:4d:ce:a6:e2:2e:d5:6d:b9:43:8b:2f:85:
         44:bc:da:88:28:87:bb:2e:59:a4:d5:83:e7:fa:9d:47:50:1c:
         07:c0:5e:2f:1a:b6:a5:f0:9c:0c:6e:9f:11:c3:a4:19:ed:96:
         39:2b:a5:71:2e:30:d3:62:46:ef:3a:12:47:e5:af:d6:1e:96:
         d6:ad:f8:cb:d4:06:2f:12:1c:59:fb:57:db:87:b3:bd:0a:89:
         b1:ca:05:42:b5:5e:59:0b:8e:ba:32:45:b8:2e:7a:bd:21:47:
         85:73:47:14:86:2f:4b:1c:cf:2a:75:35:3f:46:8e:d0:7d:35:
         1e:66:65:4e:13:ef:9a:60:bd:4a:f6:18:e5:8d:ed:b1:ab:60:
         c9:ab:37:5f:e8:5c:d7:65:a5:91:30:68:6e:61:28:90:0c:49:
         75:3e:6c:31:21:72:9b:cb:5a:c6:3c:0b:5f:e2:c0:f2:af:90:
         96:6d:3e:41:84:d6:bf:90:4a:6a:1d:b2:23:6f:8f:21:f9:c8:
         9d:5e:7f:c4:f0:8d:fd:db:d5:f6:61:c6:5b:9b:d8:ea:24:f2:
         d0:72:85:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:10:01 2024 by rpki-client on console-ams.rpki-client.org