Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
File:                     U0lylWvf-DsNiB4Br9PWxSZR4Es.mft (raw, json)
Hash identifier:          FmilPt9Lv6C9jGA/lALWFj9DwxOiWk2dZ3leDofa2n4=
Subject key identifier:   F2:E2:53:12:60:B4:41:5A:37:B3:96:CA:2A:CC:70:BA:57:1F:C3:F9
Authority key identifier: 53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
Certificate issuer:       /CN=534972956bdff83b0d881e01afd3d6c52651e04b
Certificate serial:       019048691D43B961591A2F9AA8389069ACC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
Manifest number:          028A
Signing time:             Mon 24 Jun 2024 04:02:46 +0000
Manifest this update:     Mon 24 Jun 2024 04:02:46 +0000
Manifest next update:     Tue 25 Jun 2024 04:02:46 +0000
Files and hashes:         1: U0lylWvf-DsNiB4Br9PWxSZR4Es.crl (hash: aBk/Eifn21HST50ty+xW02BPxlrSx/F4Lano46FFGrU=)
                          2: _9vMQEQ24YI4qOG56vmlo8Iku-w.roa (hash: azU7z28ZHCvNx+/LRpvrxsRZPW5x+ZTMmTbwF6KNTZs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:69:1d:43:b9:61:59:1a:2f:9a:a8:38:90:69:ac:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=534972956bdff83b0d881e01afd3d6c52651e04b
        Validity
            Not Before: Jun 24 04:02:46 2024 GMT
            Not After : Jun 25 04:02:46 2024 GMT
        Subject: CN=f2e2531260b4415a37b396ca2acc70ba571fc3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7e:63:ad:f0:e6:09:ac:2f:3d:92:95:f2:ce:
                    bb:db:55:08:21:d8:03:02:85:83:23:64:3e:fa:7e:
                    12:64:6b:30:be:5c:3b:3f:99:76:85:1c:55:fb:ad:
                    05:21:76:6f:67:51:af:99:33:ef:40:e6:31:d0:18:
                    c4:fc:4b:6c:80:d2:58:c4:6e:75:7c:25:f2:23:c9:
                    62:29:50:52:aa:50:f3:3f:f4:c0:c0:3e:5d:9b:9c:
                    fd:1b:6c:a8:7a:d4:0c:4a:b8:91:98:8d:61:e0:57:
                    53:89:b9:76:96:e9:2f:e5:ec:56:77:45:b7:11:95:
                    d6:1b:ee:1b:cf:70:b0:c2:c7:03:cc:3e:90:20:d5:
                    fc:cb:e9:75:d2:92:06:66:67:22:c7:6c:57:2d:f3:
                    f3:83:eb:0f:72:62:75:23:db:9c:0b:60:55:95:ef:
                    d6:a4:88:71:8a:b3:07:58:84:5b:49:da:d6:30:a4:
                    ff:fe:aa:78:ca:4e:46:e4:d2:51:0e:0f:34:85:54:
                    d3:21:15:96:21:8e:6a:d0:fc:e1:27:d8:ac:0e:f3:
                    7f:3c:bb:a4:26:59:45:6e:19:94:51:1a:b8:7e:e9:
                    01:4c:4a:af:ae:34:9e:97:c3:f4:1a:94:b2:e5:04:
                    b5:fe:e9:46:6f:e0:c2:03:7a:65:e3:88:58:fc:e4:
                    37:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E2:53:12:60:B4:41:5A:37:B3:96:CA:2A:CC:70:BA:57:1F:C3:F9
            X509v3 Authority Key Identifier:
                keyid:53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a2:46:3f:8c:c5:e2:e0:5d:65:bb:16:b6:a3:35:2e:6a:84:
         a7:f2:af:94:72:d9:7d:a2:38:b9:1f:d6:21:5d:54:24:d0:d9:
         3b:b7:98:8a:3d:0f:70:07:ed:70:67:42:71:f5:bc:86:93:42:
         b9:f4:b9:d4:96:e1:6b:a8:14:d3:c0:19:6a:bd:53:97:96:a4:
         a6:0e:dc:ff:da:1e:53:63:0b:c8:58:19:c0:11:0d:97:17:0e:
         d9:c9:82:ba:81:ed:7c:7c:2b:17:2c:2a:5c:ca:4c:7c:e6:0a:
         4e:66:92:1e:5b:5b:47:31:95:85:52:fe:ac:2c:b4:db:4a:18:
         1c:6d:cb:f7:b9:97:55:da:0c:dc:97:7d:b5:25:01:4d:35:fd:
         87:f2:89:59:7c:93:38:ff:88:74:4f:9a:f4:d4:33:d9:cf:77:
         5d:64:2b:d7:b6:3d:01:58:e0:27:3f:9d:04:2e:4d:a7:e5:9f:
         6e:88:60:c2:5e:4b:58:64:68:11:64:57:f8:26:85:47:48:11:
         52:6e:5f:90:cd:26:50:8d:23:8c:31:f1:3c:e2:fd:ac:5b:8e:
         00:88:d7:87:e6:28:92:80:90:7b:2d:d2:eb:74:7f:30:9b:b8:
         4b:1d:df:7d:66:33:5c:69:9d:46:6e:db:98:c7:7e:a3:45:ee:
         c6:de:2f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:30:40 2024 by rpki-client on console-ams.rpki-client.org