Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
File:                     uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json)
Hash identifier:          OAjSpRFnqB+vFrP2xTih12My4imbfY4O/a9heRozycg=
Subject key identifier:   53:93:E6:BD:B4:9A:1F:CA:3D:CD:5B:4F:AA:02:14:A6:CA:08:3A:AD
Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Certificate issuer:       /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Certificate serial:       01901E59198A2524605C8F00C7B1CF8785B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
Manifest number:          1158
Signing time:             Sun 16 Jun 2024 00:01:14 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:14 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:14 +0000
Files and hashes:         1: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: 6n3JcakZPrKA9qQdr0WPXbrBQq5gZ8r7RQfCgScCS9A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:19:8a:25:24:60:5c:8f:00:c7:b1:cf:87:85:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
        Validity
            Not Before: Jun 16 00:01:14 2024 GMT
            Not After : Jun 17 00:01:14 2024 GMT
        Subject: CN=5393e6bdb49a1fca3dcd5b4faa0214a6ca083aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:ce:48:d6:8d:ba:3a:92:21:65:3f:13:3f:
                    99:54:06:87:6d:04:4d:6a:cd:98:0b:57:a2:74:f3:
                    13:e0:e8:8c:f1:30:ab:53:89:35:09:a3:03:8e:6c:
                    2f:f7:26:90:49:e7:f3:dd:1c:81:2a:9a:2c:30:db:
                    2e:00:4e:6c:cc:ed:d9:25:43:1f:d4:56:d2:4b:d4:
                    99:b1:8c:c1:35:7b:fa:6e:f2:ca:c1:6f:b9:75:80:
                    1e:d0:6c:03:d8:f6:29:26:29:44:0d:2b:5b:e3:ab:
                    57:c8:2f:79:ac:4c:fe:88:9e:68:04:79:0b:dc:2f:
                    b2:bf:93:21:63:c4:a2:fd:80:c0:db:55:9f:25:84:
                    f0:32:9e:26:e7:44:d7:a9:19:74:a2:3b:41:7d:d8:
                    51:08:9b:85:b3:e1:20:56:c1:01:f1:f4:7e:22:bc:
                    20:9b:7b:07:49:7e:9a:74:b7:eb:e6:c5:8d:c3:e3:
                    6e:90:c2:d2:af:be:c0:b2:51:45:f3:b2:e5:fd:e7:
                    50:14:25:69:d9:0e:dd:74:f5:07:36:5b:48:7b:db:
                    a9:ed:3e:79:dc:c7:e2:0c:3a:45:65:e5:d8:33:14:
                    ef:4d:47:8c:04:9b:10:2b:e3:66:b0:b1:0f:4a:be:
                    da:47:17:65:06:39:56:73:ab:7c:85:0c:1b:fb:ad:
                    d6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:93:E6:BD:B4:9A:1F:CA:3D:CD:5B:4F:AA:02:14:A6:CA:08:3A:AD
            X509v3 Authority Key Identifier:
                keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:2a:75:64:e9:92:83:f4:5b:0f:3c:1b:b3:4b:e5:c3:af:eb:
         54:1c:72:14:c7:f4:14:a3:3d:ed:3b:d4:c2:d4:50:c1:55:38:
         49:71:d4:2a:43:29:4d:1e:3c:87:ca:f3:16:ed:3b:c6:6d:20:
         16:8c:3a:64:d8:04:18:32:5d:7d:00:d4:60:4f:63:fa:a1:f4:
         b6:b3:5d:60:3b:e0:8e:db:1a:3b:16:b6:e1:01:08:c2:5a:f5:
         49:44:1c:8f:1f:58:dd:2c:2d:6d:b8:5b:9c:3b:27:3f:8e:d8:
         e1:49:cb:98:8d:16:74:aa:6f:af:20:d5:c1:66:ee:74:7c:b6:
         76:bc:49:ba:7a:6f:18:fc:8f:60:26:b0:a4:d5:65:0b:f0:3d:
         20:1b:ca:6a:69:b7:8b:46:b7:29:aa:b6:e0:45:63:05:5d:d5:
         11:4a:db:2d:45:99:a1:26:39:a9:9c:fc:57:84:1b:ab:0c:81:
         3f:1d:64:b3:14:db:59:77:6d:61:05:f2:51:67:d3:69:52:7a:
         81:70:e4:01:60:38:f3:48:10:29:12:bd:4b:70:de:e9:55:65:
         23:23:41:65:da:92:34:bf:ce:bb:e8:2a:e0:99:8f:b0:b5:7f:
         a8:49:de:e6:cc:d8:1f:53:e9:95:19:e8:65:78:5b:74:b4:46:
         ae:fb:bc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:05:25 2024 by rpki-client on console-fra.rpki-client.org