Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
File:                     i_UbRkYUeZl2V31e96gHjqgMF0M.mft (raw, json)
Hash identifier:          vjEYWcYU2HC1nmHIverM/Ld+nFcLk3g7ObKOTu++g8Q=
Subject key identifier:   3E:BE:39:FE:32:D2:3F:31:6D:9D:A1:EE:44:41:2A:F6:6D:AE:D0:B5
Authority key identifier: 8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
Certificate issuer:       /CN=8bf51b464614799976577d5ef7a8078ea80c1743
Certificate serial:       01901E8F8B768B69184F6A1E8FDBA421A998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
Manifest number:          B3
Signing time:             Sun 16 Jun 2024 01:00:42 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:42 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:42 +0000
Files and hashes:         1: i_UbRkYUeZl2V31e96gHjqgMF0M.crl (hash: vzoi6S1pXlWnZRLNLCzAq4FUrqs98StmYofYTH9rcOo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:8b:76:8b:69:18:4f:6a:1e:8f:db:a4:21:a9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bf51b464614799976577d5ef7a8078ea80c1743
        Validity
            Not Before: Jun 16 01:00:42 2024 GMT
            Not After : Jun 17 01:00:42 2024 GMT
        Subject: CN=3ebe39fe32d23f316d9da1ee44412af66daed0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a8:36:82:a4:cc:51:c7:55:1e:61:39:91:41:
                    88:6e:01:cc:af:13:e3:0d:d5:3c:ac:69:77:6d:11:
                    d0:35:4f:c8:3f:79:fe:2f:19:9e:0e:a3:37:28:d5:
                    a9:93:86:fb:63:09:88:b5:5f:df:d8:6c:75:b7:23:
                    18:48:dd:e4:b1:56:ab:32:47:de:af:53:0d:26:5c:
                    b9:22:7b:85:e0:54:06:f6:c9:eb:6d:67:a5:bb:ab:
                    5c:86:3e:03:94:54:a8:fa:62:f1:51:65:4b:bb:87:
                    b4:45:50:c8:d1:9e:b7:2b:47:55:16:76:54:67:5a:
                    99:18:e1:10:bd:99:98:21:14:bb:9f:a2:51:b1:90:
                    92:a6:57:74:0d:6f:23:60:a6:0b:d6:34:4b:23:81:
                    13:cd:47:4d:5c:b9:54:da:74:26:16:eb:64:84:1f:
                    48:a6:6b:ae:63:18:0b:14:ac:78:c1:c2:dd:a9:35:
                    86:e1:95:a4:59:24:3c:08:cb:9d:6d:58:4a:d6:91:
                    ef:b6:83:9f:db:0a:6d:47:d1:70:79:df:87:69:40:
                    e6:db:3f:c8:14:f8:02:1e:5c:46:47:e6:ed:aa:5f:
                    8a:07:68:93:27:b4:28:ec:f1:c1:9d:b1:3c:49:8c:
                    b1:6c:14:08:dd:a6:9f:51:e3:fb:07:68:10:66:69:
                    01:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BE:39:FE:32:D2:3F:31:6D:9D:A1:EE:44:41:2A:F6:6D:AE:D0:B5
            X509v3 Authority Key Identifier:
                keyid:8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e5:cf:f4:9b:59:69:32:22:26:f8:4a:b4:61:2d:5a:49:1e:
         ae:65:fe:7b:58:9c:d2:82:38:04:40:03:ff:f4:12:40:a8:e8:
         07:eb:84:94:43:30:28:9e:15:5a:8a:75:3e:26:fd:f8:62:0d:
         08:8f:31:9d:55:e8:b8:ff:74:5b:8d:78:70:f6:6b:cf:df:8c:
         e9:7a:3b:12:40:47:c7:33:c9:3c:8d:a3:57:47:21:cd:07:88:
         23:91:30:2b:bc:75:eb:31:d9:66:bc:60:81:0e:b1:8c:7a:1b:
         87:3e:6a:df:58:a9:2e:5c:c8:bd:57:c2:14:e7:c5:a7:d9:ce:
         6f:78:d0:dd:36:4a:c5:06:12:9c:07:09:c0:a5:18:fe:b4:b7:
         62:f8:df:6f:bb:e9:b5:56:3a:6e:56:09:51:0f:0e:88:05:e0:
         1c:49:fe:fe:62:9c:a9:6f:0e:17:b9:19:f3:c8:2b:5c:73:58:
         42:f5:eb:e5:c0:64:dc:1f:61:46:11:79:c9:9e:49:fb:97:e3:
         9d:3d:9b:52:ae:9b:1e:16:c5:7f:82:7a:cf:73:24:73:42:73:
         25:3d:46:a1:41:cb:29:41:f2:56:c0:84:48:d1:fd:19:69:09:
         2e:1f:eb:19:a1:62:9e:0b:e7:7d:35:e9:15:7b:38:14:6b:b0:
         6d:e3:ca:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:33:56 2024 by rpki-client on console-ams.rpki-client.org