Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.mft
File:                     UZAPFNiJz2-neRaxmjkeLA0fgM4.mft (raw, json)
Hash identifier:          7yC3+R5kXopBOdWBLYva+UFR8hE5dARjrDiteek6vpQ=
Subject key identifier:   19:04:7A:46:00:F4:EC:B1:6D:94:A2:74:6B:78:2D:BD:DC:82:33:7D
Authority key identifier: 51:90:0F:14:D8:89:CF:6F:A7:79:16:B1:9A:39:1E:2C:0D:1F:80:CE
Certificate issuer:       /CN=51900f14d889cf6fa77916b19a391e2c0d1f80ce
Certificate serial:       01901DECF6F922B0328AC47A7AE0A3B0CCDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZAPFNiJz2-neRaxmjkeLA0fgM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.mft
Manifest number:          0881
Signing time:             Sat 15 Jun 2024 22:03:07 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:07 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:07 +0000
Files and hashes:         1: UZAPFNiJz2-neRaxmjkeLA0fgM4.crl (hash: 0JSEDpXP3hBfA0jy1iWIGk6FP/ruHuzUvR/lWkiUWdc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UZAPFNiJz2-neRaxmjkeLA0fgM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:f6:f9:22:b0:32:8a:c4:7a:7a:e0:a3:b0:cc:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51900f14d889cf6fa77916b19a391e2c0d1f80ce
        Validity
            Not Before: Jun 15 22:03:07 2024 GMT
            Not After : Jun 16 22:03:07 2024 GMT
        Subject: CN=19047a4600f4ecb16d94a2746b782dbddc82337d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fc:42:07:bc:95:47:97:8c:11:76:c8:f7:8e:
                    d7:3a:5b:2c:b3:81:be:e8:04:05:e2:a5:d6:81:d6:
                    fc:b2:80:16:a1:bb:b3:4d:e3:87:74:83:e6:25:e9:
                    ce:29:52:dd:ad:2a:fd:04:17:18:44:79:db:3a:67:
                    11:21:f1:1b:f6:75:ab:ee:ca:34:99:71:1f:4f:a1:
                    75:6c:22:bf:a5:3b:c1:79:f4:8a:a9:d9:bd:31:a2:
                    09:9a:4a:ba:45:2e:a1:b2:5b:fc:50:d2:d4:ad:c7:
                    f3:2a:d3:4f:25:37:88:e0:cd:e7:69:aa:16:34:a5:
                    f6:a6:ed:66:26:f1:c2:7e:64:de:24:9e:b8:9e:7b:
                    b6:16:cb:5c:4d:84:b4:34:24:fa:53:98:7e:63:a1:
                    d1:70:8c:72:92:f3:64:a9:28:2d:72:65:17:69:bc:
                    3c:15:f9:f1:61:00:04:6c:a3:1e:c8:ba:d4:04:2d:
                    b8:b5:6a:05:b3:fe:b1:13:cc:b9:98:c0:73:1b:f6:
                    a9:dc:cf:7c:8e:aa:ce:ca:20:1c:96:de:31:61:00:
                    ca:a9:17:7b:29:d2:71:bb:55:ee:9d:8e:ce:e6:cb:
                    a3:fe:4b:26:13:93:59:72:96:ca:66:4e:6c:9b:7e:
                    4c:b7:2b:da:19:3c:8f:30:a4:bc:e1:9a:02:d6:d2:
                    59:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:04:7A:46:00:F4:EC:B1:6D:94:A2:74:6B:78:2D:BD:DC:82:33:7D
            X509v3 Authority Key Identifier:
                keyid:51:90:0F:14:D8:89:CF:6F:A7:79:16:B1:9A:39:1E:2C:0D:1F:80:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZAPFNiJz2-neRaxmjkeLA0fgM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:08:01:fd:5a:69:92:64:3e:48:8d:c9:7b:cc:cc:ea:1f:52:
         e8:79:6a:e0:79:c8:ff:16:e8:dd:26:82:89:fe:03:d2:9a:d7:
         34:01:be:8c:1e:e4:5f:3e:fe:3f:db:2b:ce:37:37:0b:42:f1:
         ae:00:6c:99:38:34:67:47:8c:9a:65:e4:2d:58:bf:33:b9:ef:
         88:37:65:59:e0:2b:1b:dc:1a:14:41:f7:75:1b:09:5b:16:17:
         c8:85:f7:c4:c9:82:aa:0d:3e:cf:e8:90:0c:40:da:6a:e8:61:
         23:12:aa:d9:01:20:87:ae:fc:c1:ed:7c:2b:91:27:09:b0:20:
         ef:1d:ca:fd:cd:6e:04:35:b6:8f:8e:98:e8:4d:79:a4:18:b8:
         d1:d3:17:10:a8:76:0b:64:be:18:d3:ee:b8:f5:88:2d:b0:bb:
         d1:5c:c8:ac:e3:f7:ef:78:0c:57:ed:ec:64:12:a5:73:58:2b:
         ae:18:2a:68:ef:76:13:d0:f0:72:5a:ef:c3:6b:b5:35:61:c4:
         7e:f4:98:d0:79:b3:5c:02:22:b3:b1:3e:52:05:54:f8:0b:aa:
         37:2b:d3:a1:49:68:8a:73:28:68:74:ae:36:16:e3:9f:55:c4:
         53:37:e0:8d:fb:a6:b2:50:9a:ed:09:ea:8e:ea:29:69:1a:67:
         65:61:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:52:51 2024 by rpki-client on console-fra.rpki-client.org