Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
File:                     uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft (raw, json)
Hash identifier:          UGTEdKdWWNuM22evNwzys4Xm8waemq8JhcsWZPt/+II=
Subject key identifier:   0C:8D:59:E2:6C:C4:7A:A7:A2:2A:EB:5F:92:C7:92:92:27:08:3A:74
Authority key identifier: B8:4C:D9:BC:3D:1A:8F:1B:46:6B:B6:72:A3:0B:C6:D9:67:E7:C5:27
Certificate issuer:       /CN=b84cd9bc3d1a8f1b466bb672a30bc6d967e7c527
Certificate serial:       0193682131272FD0D5E1BDF5D24B2CB420EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
Manifest number:          02D4
Signing time:             Tue 26 Nov 2024 11:00:25 +0000
Manifest this update:     Tue 26 Nov 2024 11:00:25 +0000
Manifest next update:     Wed 27 Nov 2024 11:00:25 +0000
Files and hashes:         1: uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl (hash: vhq6m+1u93M+8Y+PrTSR8PVQy5ca1kp5a8ycU0QcIuw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:21:31:27:2f:d0:d5:e1:bd:f5:d2:4b:2c:b4:20:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84cd9bc3d1a8f1b466bb672a30bc6d967e7c527
        Validity
            Not Before: Nov 26 11:00:25 2024 GMT
            Not After : Nov 27 11:00:25 2024 GMT
        Subject: CN=0c8d59e26cc47aa7a22aeb5f92c7929227083a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:63:3e:b9:73:9f:d9:78:35:44:ef:90:e2:
                    da:d8:a0:6d:df:69:ba:b0:e4:bc:06:30:d5:45:33:
                    c3:d7:3b:ab:6d:6f:6d:ad:89:95:86:ec:40:35:08:
                    c8:68:f3:45:e6:88:8b:fe:ca:64:59:79:04:98:f1:
                    89:1e:13:51:94:ea:46:bd:9e:59:96:78:fe:6a:1b:
                    00:65:cb:c8:15:6b:ba:e5:1c:28:74:2d:d4:1e:77:
                    47:ba:e5:76:bd:2d:70:01:e5:1d:12:e1:d5:98:02:
                    65:8b:c9:90:ea:23:be:b6:3c:35:e6:db:4b:c1:f1:
                    e7:08:5d:29:9d:2a:15:de:69:85:2a:74:d2:05:45:
                    98:c7:7d:f9:d1:14:30:54:ff:e9:5b:69:dc:d9:f7:
                    f7:b9:86:6c:9e:96:a3:70:43:9d:bd:fb:0a:c4:bd:
                    4d:1a:e1:15:66:73:ed:4a:2a:1a:e9:9f:35:19:7d:
                    ad:c0:57:b7:45:e7:40:b7:e0:ca:52:6f:24:0d:51:
                    c8:66:cd:9d:16:ca:f6:a2:2e:0f:66:32:57:8e:dd:
                    2d:7e:e9:04:da:3e:76:a1:bb:6c:59:22:90:3c:00:
                    54:fe:f0:af:a7:bf:2e:75:c8:e2:ae:70:fa:02:75:
                    1b:1d:64:7e:66:c3:47:ac:33:74:a6:a7:b8:7d:a5:
                    5c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8D:59:E2:6C:C4:7A:A7:A2:2A:EB:5F:92:C7:92:92:27:08:3A:74
            X509v3 Authority Key Identifier:
                keyid:B8:4C:D9:BC:3D:1A:8F:1B:46:6B:B6:72:A3:0B:C6:D9:67:E7:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:59:1c:6c:a5:9d:76:ef:fa:12:01:ac:d7:49:1b:19:46:8a:
         2d:69:d6:87:b9:a7:23:9f:5f:46:9f:82:2f:98:14:be:9e:ba:
         0d:44:8b:d4:2f:d5:52:0e:dc:ab:ef:3b:1a:dd:23:c5:c5:4e:
         b3:59:ed:2b:e0:6c:8e:b8:90:55:da:19:42:eb:e1:00:3b:05:
         4b:b8:ea:ea:94:15:12:d0:20:4a:19:01:4a:c7:68:37:d2:d5:
         74:06:51:b0:f8:dd:5a:7a:c0:f8:be:a5:68:6a:2a:89:45:07:
         f4:93:1f:87:9b:db:56:f8:22:70:9b:ed:2f:f4:fc:cc:39:b0:
         10:f1:62:05:85:f1:d0:b9:d9:d1:66:3d:74:c6:a5:de:be:5a:
         56:9e:2c:fa:99:74:30:2a:3c:eb:8b:1b:95:51:c7:45:b1:5c:
         1a:59:99:c0:1b:cc:ed:0a:95:35:64:a1:cd:62:55:31:ab:b6:
         45:a7:0d:eb:4f:77:72:0b:22:a3:99:49:50:81:48:a8:04:30:
         ed:5f:a2:cb:3b:b7:c8:0a:9c:4c:18:ea:1b:c4:0e:2f:7e:d5:
         a2:59:a0:88:a4:8b:12:a0:cd:a8:23:c4:bd:e6:16:79:23:22:
         bd:0e:b2:b4:9e:55:ac:9d:49:99:09:b9:5d:84:a6:57:50:da:
         63:e3:6e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:35:34 2024 by rpki-client on console-fra.rpki-client.org