Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f620b2-bd7f-49a3-ac06-2db6093dd605/1/UI4AePdxGuHP_QDzUsyKA7OXetc.mft
File:                     UI4AePdxGuHP_QDzUsyKA7OXetc.mft (raw, json)
Hash identifier:          1MFYL270BvmluqiZ1iPKEM2cHlmF4rWB6U5JbCknDm8=
Subject key identifier:   49:A9:2D:72:E8:9A:74:4C:F4:42:91:91:C5:ED:E1:21:04:6C:5C:D4
Authority key identifier: 50:8E:00:78:F7:71:1A:E1:CF:FD:00:F3:52:CC:8A:03:B3:97:7A:D7
Certificate issuer:       /CN=508e0078f7711ae1cffd00f352cc8a03b3977ad7
Certificate serial:       018F87ED29CAAAFB279B42D5C5699ED94231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UI4AePdxGuHP_QDzUsyKA7OXetc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f620b2-bd7f-49a3-ac06-2db6093dd605/1/UI4AePdxGuHP_QDzUsyKA7OXetc.mft
Manifest number:          0227
Signing time:             Fri 17 May 2024 19:00:17 +0000
Manifest this update:     Fri 17 May 2024 19:00:17 +0000
Manifest next update:     Sat 18 May 2024 19:00:17 +0000
Files and hashes:         1: UI4AePdxGuHP_QDzUsyKA7OXetc.crl (hash: ktM8pB5IadxPJZVfd9tYoH+pGnTryLpFhV+U4mv5C0g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/f620b2-bd7f-49a3-ac06-2db6093dd605/1/UI4AePdxGuHP_QDzUsyKA7OXetc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/f620b2-bd7f-49a3-ac06-2db6093dd605/1/UI4AePdxGuHP_QDzUsyKA7OXetc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UI4AePdxGuHP_QDzUsyKA7OXetc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:29:ca:aa:fb:27:9b:42:d5:c5:69:9e:d9:42:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=508e0078f7711ae1cffd00f352cc8a03b3977ad7
        Validity
            Not Before: May 17 19:00:17 2024 GMT
            Not After : May 18 19:00:17 2024 GMT
        Subject: CN=49a92d72e89a744cf4429191c5ede121046c5cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:d4:84:77:df:de:37:c2:f4:5f:5a:11:64:
                    17:3f:ea:02:cf:4a:b9:75:46:9a:c1:e9:64:7b:6e:
                    a4:1c:de:86:f6:8c:9a:94:be:30:a6:31:42:1c:a4:
                    b9:6b:eb:d9:c0:65:b8:a7:21:7d:14:84:a4:7d:83:
                    72:f0:80:41:7d:1f:fd:be:63:72:98:5b:21:ed:a2:
                    50:22:74:4c:50:03:7e:38:06:c1:e4:2f:ac:58:04:
                    73:9c:38:10:66:98:c1:18:f7:09:70:23:ca:8c:57:
                    6c:5a:85:ca:0a:bd:3a:1e:e9:8e:c3:5a:04:96:bd:
                    20:4c:10:6a:ab:84:27:4c:69:75:69:be:59:9d:61:
                    89:d0:0d:d3:d6:cb:3a:48:71:6e:95:f8:70:7c:b0:
                    bc:b7:de:17:51:16:8e:f7:69:9d:d8:8a:7f:db:af:
                    d7:88:6b:b5:0b:b4:42:41:d9:17:7b:ba:72:cc:12:
                    69:e6:84:f1:11:17:7d:8f:45:bd:45:38:6c:c7:b5:
                    b2:ba:b0:b3:81:59:e0:c8:3c:56:81:40:5d:02:4b:
                    5d:ae:14:91:11:05:fe:f9:0d:89:de:71:db:7a:2f:
                    cb:64:b2:f6:9d:31:b0:0e:19:6e:2e:3c:16:4c:4c:
                    f0:c4:dd:fc:9e:63:7c:43:a6:9b:ef:43:a9:4a:83:
                    cf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A9:2D:72:E8:9A:74:4C:F4:42:91:91:C5:ED:E1:21:04:6C:5C:D4
            X509v3 Authority Key Identifier:
                keyid:50:8E:00:78:F7:71:1A:E1:CF:FD:00:F3:52:CC:8A:03:B3:97:7A:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UI4AePdxGuHP_QDzUsyKA7OXetc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f620b2-bd7f-49a3-ac06-2db6093dd605/1/UI4AePdxGuHP_QDzUsyKA7OXetc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f620b2-bd7f-49a3-ac06-2db6093dd605/1/UI4AePdxGuHP_QDzUsyKA7OXetc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c2:34:03:c6:20:3f:15:07:6c:06:be:ad:1f:de:33:44:1c:
         81:57:42:45:c8:8a:80:50:4d:f9:c4:49:3e:2b:e8:35:dd:a3:
         12:66:11:6b:b0:36:d3:44:81:e9:7c:5c:ef:f0:4c:29:f0:c3:
         ff:01:e5:30:60:50:fd:f9:91:67:63:cc:a6:f0:1e:cf:07:e7:
         31:43:e9:47:71:13:f4:01:b7:98:9e:4f:a5:be:b7:aa:91:0f:
         9a:da:14:00:b8:0b:18:ec:ae:ac:8e:75:b4:c4:e3:93:38:b6:
         f7:e7:d1:75:96:b7:32:b6:23:06:05:8d:26:be:e6:e7:20:31:
         99:e2:54:5c:d7:9f:94:29:dd:b5:53:b1:df:00:d5:7b:43:02:
         50:90:7f:8a:44:68:33:33:96:16:33:26:c3:55:d9:01:24:c3:
         a1:91:a1:7e:c8:4f:21:b5:f9:be:91:37:d7:cd:36:c5:04:cb:
         57:25:48:b7:59:a2:b0:84:56:43:16:b2:6b:5e:da:13:3a:a4:
         26:50:b8:f1:dc:85:fd:be:5c:57:9a:c5:be:7c:d9:f7:d2:d9:
         9e:3a:32:45:be:84:94:0d:5e:4d:1a:7f:4d:f4:14:1e:e6:cc:
         35:19:d7:5d:eb:49:57:53:b7:ef:2a:40:b5:3a:c0:cc:35:8b:
         58:33:46:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:35 2024 by rpki-client on console-fra.rpki-client.org