Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
File:                     UC_eWr0nGEuqmtq3za-8w6VEGus.mft (raw, json)
Hash identifier:          s+6W5/EZ4vlinizCwPRQfLUViSR7rKJmYd453O6f2aM=
Subject key identifier:   1E:CB:B4:72:5A:9E:35:E4:59:6C:BC:F4:39:F7:A3:7E:76:8F:BE:2B
Authority key identifier: 50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB
Certificate issuer:       /CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb
Certificate serial:       01901D45FB84E45259E5A8D75F9D4C972122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
Manifest number:          0EFE
Signing time:             Sat 15 Jun 2024 19:00:43 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:43 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:43 +0000
Files and hashes:         1: UC_eWr0nGEuqmtq3za-8w6VEGus.crl (hash: 6AnN88/AM/hZky25zQkQMhKZY6V/L6t9b+gxDN+fBLc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:fb:84:e4:52:59:e5:a8:d7:5f:9d:4c:97:21:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb
        Validity
            Not Before: Jun 15 19:00:43 2024 GMT
            Not After : Jun 16 19:00:43 2024 GMT
        Subject: CN=1ecbb4725a9e35e4596cbcf439f7a37e768fbe2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9b:0f:82:04:70:c5:e7:56:07:1b:75:66:c6:
                    4b:af:a9:71:5d:3a:ae:5f:ce:93:0e:c4:44:ad:b8:
                    3c:0e:4f:ce:8c:11:03:2e:66:59:dc:85:cf:46:e5:
                    af:5f:92:15:45:30:05:c7:d5:76:31:71:8a:05:36:
                    14:74:61:fd:88:c5:05:5b:99:0f:20:66:a8:fe:ef:
                    ff:47:40:6e:12:18:f5:0a:fc:fd:40:df:99:4a:aa:
                    7c:66:6b:aa:56:25:09:15:24:70:7f:5e:e7:2d:2c:
                    2a:de:07:fa:fa:bd:5f:42:e5:ed:97:b9:73:5f:5f:
                    03:13:dd:d7:1c:47:e1:ef:e4:14:d7:63:e8:06:96:
                    8e:71:a7:3d:fc:9f:d0:c9:68:a7:26:39:21:9e:73:
                    e1:8f:4d:26:9f:63:70:b3:62:94:ad:42:64:81:6b:
                    9b:bf:7b:9b:e2:e1:39:9a:97:c2:54:5f:87:03:1f:
                    a7:93:cc:9e:4d:29:42:10:c5:21:1b:a3:2e:44:8f:
                    3e:ba:c8:3e:42:c5:03:7a:b2:2b:bd:dc:28:54:c5:
                    b6:7b:10:a8:65:38:92:c8:6b:86:0c:87:62:25:2b:
                    24:f1:8f:9b:db:3a:48:3a:ff:8e:87:d4:2d:d5:71:
                    43:a1:d6:ae:ed:7e:36:57:b2:7a:f9:d6:16:c6:f3:
                    06:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CB:B4:72:5A:9E:35:E4:59:6C:BC:F4:39:F7:A3:7E:76:8F:BE:2B
            X509v3 Authority Key Identifier:
                keyid:50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a2:55:23:34:90:04:a7:f7:d0:3d:10:6a:8f:0a:59:7a:d1:
         69:2a:72:ac:9e:e1:24:d6:6a:6a:fa:0b:91:5b:61:eb:e7:c8:
         75:64:da:e2:99:28:13:3f:d9:bf:a2:08:14:07:15:64:f1:73:
         24:4e:51:1d:f5:c4:ec:9d:6c:7f:97:01:7f:1f:7d:c7:03:fd:
         b1:99:19:3e:09:00:62:a4:be:c5:4f:f9:00:d8:9d:3e:86:4b:
         8e:d4:7b:12:40:08:1c:54:3f:e7:9b:ae:4c:98:54:26:c4:ea:
         c2:4b:d9:9b:c9:75:af:d9:4c:3c:2a:58:cc:b2:74:aa:db:73:
         cf:24:07:d7:0d:9c:0b:d9:4d:c2:d3:04:70:6e:65:c7:84:83:
         b7:0d:04:ed:9d:62:12:cf:5e:44:e2:82:63:a8:d6:bf:4f:0b:
         1e:a3:a9:6a:82:11:aa:be:56:a5:f1:93:2b:ac:62:28:9d:54:
         33:03:f7:8b:60:ef:c6:f8:bf:f3:cb:21:f9:f5:21:3e:cb:37:
         b6:71:58:a5:89:19:2f:25:11:85:1a:56:a3:2d:99:16:fd:19:
         6f:16:4f:60:20:76:df:9a:c2:e1:02:ba:60:1f:23:e3:f2:c9:
         4a:d6:6c:4e:44:25:de:ae:0f:48:60:da:36:4d:bb:34:46:d0:
         ad:06:83:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----