Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File:                     ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier:          UqzW3nGZFb4mqXopWZ2rmZSmvdNklEX81RcUOS+oas4=
Subject key identifier:   77:F7:F4:D6:A4:45:D5:AC:05:F5:B6:9D:F8:A0:1F:78:13:EB:F7:2A
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer:       /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial:       01901E58C6FF6E9ABDF53C87CF43A6476023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number:          0F3F
Signing time:             Sun 16 Jun 2024 00:00:52 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:52 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:52 +0000
Files and hashes:         1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: HB2ZLlOwb6y4E7782BjPibxUaA8ZjrAYH3NgM/unNw4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:c6:ff:6e:9a:bd:f5:3c:87:cf:43:a6:47:60:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
        Validity
            Not Before: Jun 16 00:00:52 2024 GMT
            Not After : Jun 17 00:00:52 2024 GMT
        Subject: CN=77f7f4d6a445d5ac05f5b69df8a01f7813ebf72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7f:19:74:27:62:ec:25:8a:bd:a7:0f:50:28:
                    1b:49:c5:ef:b9:90:55:0f:7d:4b:49:de:5e:20:56:
                    72:3e:8a:bc:3d:ac:43:5e:88:09:dd:bf:ba:c6:93:
                    5c:92:40:93:d9:db:b0:c0:00:88:15:f6:4d:da:01:
                    f0:1e:1c:8b:0c:da:32:57:ef:75:f9:4e:e5:77:af:
                    af:be:c6:12:dd:9f:10:b0:b4:bf:6f:0a:79:86:f3:
                    f7:25:aa:ef:f8:f7:90:eb:0f:8f:cc:a8:a5:8e:bf:
                    d3:4b:da:04:28:ed:06:13:ef:15:4b:13:b4:91:61:
                    b4:13:0b:26:b2:0f:dc:42:64:0b:2b:4f:1a:c1:49:
                    08:7b:20:dd:50:b9:7d:05:8e:6e:d1:e2:56:59:06:
                    9e:4a:18:ae:f7:e5:c5:b6:94:aa:7d:c4:70:83:d7:
                    d9:cd:b6:1f:cb:7f:99:36:8f:6d:2d:87:38:05:92:
                    95:5e:3f:3e:82:4c:a7:84:31:a4:bb:5e:ba:49:1a:
                    b0:61:e9:ce:69:bf:b0:6d:71:fd:fe:56:b4:51:0c:
                    af:3c:db:98:cf:e3:44:a2:35:ea:2b:e0:2e:35:db:
                    38:2a:6c:af:12:36:e7:d2:8e:cf:a4:8c:ec:eb:64:
                    7b:e2:0b:81:1a:39:8a:e4:89:e9:ef:12:44:f4:02:
                    87:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F7:F4:D6:A4:45:D5:AC:05:F5:B6:9D:F8:A0:1F:78:13:EB:F7:2A
            X509v3 Authority Key Identifier:
                keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3b:31:d8:d2:6f:33:f6:6c:28:8f:5c:47:25:60:af:b2:1f:
         63:14:c6:d1:72:c3:43:b6:76:3f:52:10:1e:fb:4c:50:5a:46:
         c2:45:87:ae:27:17:7f:6f:95:76:ae:2f:b1:d9:0a:44:65:4a:
         8e:40:7a:46:ee:87:30:60:f5:74:d4:d3:64:57:e6:cf:46:84:
         2c:67:7f:2e:b7:0d:81:4a:ec:ef:3c:a9:5d:64:d1:05:52:34:
         96:96:33:6e:41:9d:52:26:89:1d:fd:2d:c7:25:39:9f:d1:37:
         e0:ce:71:30:82:41:91:ed:1a:c3:df:dd:9a:d9:26:be:86:a7:
         85:16:bc:da:72:0c:d5:98:2e:ec:36:a4:db:14:0f:54:64:3b:
         5c:77:e1:1b:e9:dd:b1:7a:43:1b:fc:0c:80:05:cc:fb:26:8c:
         a2:04:1a:1d:fa:3a:71:2a:01:20:39:8b:65:93:81:7a:20:f5:
         9e:5d:9a:54:78:5b:e3:d7:44:e2:49:ce:f9:f6:0f:70:d3:75:
         93:dd:cf:ef:7b:df:19:37:a9:36:15:62:16:cf:35:4f:79:2f:
         c2:52:74:56:77:b7:c6:59:9e:9e:82:bb:e6:68:96:df:e6:9e:
         71:8c:dc:e7:e7:36:3f:8e:5c:bf:15:fa:da:17:52:7e:53:1c:
         a2:9a:c9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:55:39 2024 by rpki-client on console-ams.rpki-client.org