Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
File:                     pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft (raw, json)
Hash identifier:          zwCyHz2aCRTPQe53IJ6dQTNjlreG57+1ABiq8cP8R+M=
Subject key identifier:   D3:08:1E:66:07:FB:31:C3:C6:4E:BE:12:66:05:61:21:8C:33:CD:FD
Authority key identifier: A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF
Certificate issuer:       /CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef
Certificate serial:       018F87493F5124AA4D8343F9934E513390A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
Manifest number:          0A95
Signing time:             Fri 17 May 2024 16:01:15 +0000
Manifest this update:     Fri 17 May 2024 16:01:15 +0000
Manifest next update:     Sat 18 May 2024 16:01:15 +0000
Files and hashes:         1: pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl (hash: xoqYMUdRkMuOzSyH5p/G4rdyNqkOIV/+mxtdhAMnj08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:3f:51:24:aa:4d:83:43:f9:93:4e:51:33:90:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef
        Validity
            Not Before: May 17 16:01:15 2024 GMT
            Not After : May 18 16:01:15 2024 GMT
        Subject: CN=d3081e6607fb31c3c64ebe12660561218c33cdfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:bb:d2:f3:57:fc:d2:8a:0a:8e:b8:d8:fa:
                    6a:a7:e9:8d:c6:48:fc:9e:97:ef:82:cd:30:69:0e:
                    89:a0:ff:85:2b:35:84:fb:db:df:c4:46:b7:8c:de:
                    12:c1:e8:d8:6b:7b:01:49:46:26:a0:8d:dc:a3:05:
                    65:5e:6a:d2:69:6d:94:d3:de:de:22:4b:64:8f:59:
                    aa:63:e8:9c:a3:b9:30:fc:03:d6:19:bc:9e:e2:3d:
                    4d:a4:31:5b:68:2f:a4:a4:ea:ad:2c:67:d9:60:eb:
                    02:38:fd:9a:52:f6:76:eb:9b:2d:ba:df:ad:dd:61:
                    88:a3:a7:e2:9f:6f:16:1b:82:88:ad:74:f7:bb:68:
                    91:ed:d2:20:83:09:1d:e2:42:1b:45:28:41:53:0f:
                    ff:75:00:df:06:c9:ed:83:ef:bc:9c:84:16:16:5f:
                    78:d7:38:50:ab:bc:f5:60:b1:0b:45:3b:e0:06:59:
                    05:7e:d8:0a:c2:0f:54:c6:7f:6a:e8:df:ef:fd:1c:
                    5b:f8:88:5d:4b:63:ac:07:ee:bb:a1:c4:7a:fe:b8:
                    84:28:e5:76:c7:20:03:c6:d8:d0:39:30:f7:d1:56:
                    fb:34:d0:c4:85:1e:50:72:98:6a:30:37:ad:dd:22:
                    32:39:86:57:52:b6:ea:a8:1e:3a:4c:1b:7e:90:99:
                    0f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:08:1E:66:07:FB:31:C3:C6:4E:BE:12:66:05:61:21:8C:33:CD:FD
            X509v3 Authority Key Identifier:
                keyid:A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:7e:81:68:0d:f5:98:d9:97:0d:76:f7:e4:a1:ce:03:fe:f0:
         f1:e2:10:b4:cb:2a:d7:a8:33:05:cc:d6:d0:60:44:e8:ac:f9:
         03:85:b3:f5:b0:54:cc:40:8d:1e:62:a1:8a:6d:fb:43:ed:f5:
         83:f6:74:38:4f:23:ba:ed:df:28:d1:5c:a9:a3:a9:fe:84:bc:
         49:d7:52:d6:af:72:a2:cc:c2:a9:88:b3:f1:07:1d:13:7d:db:
         15:60:5f:59:56:01:12:9d:89:06:1f:04:32:c6:24:d4:9c:fc:
         e8:22:97:3f:3a:2e:8d:ef:4e:02:9f:80:d5:b8:ef:1d:20:ed:
         ae:14:92:aa:95:ac:29:9c:fa:f7:b2:1b:ca:02:6f:6f:f6:f6:
         13:39:ca:c7:8b:c2:98:3c:a9:68:bb:17:3b:a2:85:61:0b:de:
         1a:4f:f1:29:2c:dc:95:97:59:d0:5d:08:ca:57:d0:17:1d:12:
         d1:f8:c1:57:5a:34:4a:d5:a2:49:96:02:cf:50:3b:ca:13:be:
         59:9d:a8:5c:08:dc:54:4e:9a:fc:97:2d:85:c2:a6:5a:b6:19:
         d7:8b:0d:69:b1:32:9a:f2:1e:a9:26:3f:5d:5c:09:67:a9:3e:
         b4:41:fd:bb:fd:04:ca:e4:7a:c9:c2:f6:bd:24:ae:57:0a:71:
         43:e6:2c:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HST9RJKpNg0P5k05RM5CmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NGE5ZTI3NWM1YzE3ODA5YjhmY2Y4YzBmZTBiNWY2MzI5
Y2VlZWYwHhcNMjQwNTE3MTYwMTE1WhcNMjQwNTE4MTYwMTE1WjAzMTEwLwYDVQQD
EyhkMzA4MWU2NjA3ZmIzMWMzYzY0ZWJlMTI2NjA1NjEyMThjMzNjZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCa70vNX/NKKCo642Ppqp+mNxkj8
npfvgs0waQ6JoP+FKzWE+9vfxEa3jN4SwejYa3sBSUYmoI3cowVlXmrSaW2U097e
Iktkj1mqY+ico7kw/APWGbye4j1NpDFbaC+kpOqtLGfZYOsCOP2aUvZ265stut+t
3WGIo6fin28WG4KIrXT3u2iR7dIggwkd4kIbRShBUw//dQDfBsntg++8nIQWFl94
1zhQq7z1YLELRTvgBlkFftgKwg9Uxn9q6N/v/Rxb+IhdS2OsB+67ocR6/riEKOV2
xyADxtjQOTD30Vb7NNDEhR5QcphqMDet3SIyOYZXUrbqqB46TBt+kJkP9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMIHmYH+zHDxk6+EmYFYSGMM839MB8GA1UdIwQY
MBaAFKVKnidcXBeAm4/PjA/gtfYynO7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC80NzA3ZWMtZDNkZi00NDcwLTkyYTkt
Njk5ODBlZWJjMjBjLzEvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC80NzA3ZWMtZDNkZi00NDcwLTkyYTktNjk5ODBlZWJjMjBj
LzEvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMX6BaA31
mNmXDXb35KHOA/7w8eIQtMsq16gzBczW0GBE6Kz5A4Wz9bBUzECNHmKhim37Q+31
g/Z0OE8juu3fKNFcqaOp/oS8SddS1q9yoszCqYiz8QcdE33bFWBfWVYBEp2JBh8E
MsYk1Jz86CKXPzouje9OAp+A1bjvHSDtrhSSqpWsKZz697IbygJvb/b2EznKx4vC
mDypaLsXO6KFYQveGk/xKSzclZdZ0F0IylfQFx0S0fjBV1o0StWiSZYCz1A7yhO+
WZ2oXAjcVE6a/JcthcKmWrYZ14sNabEymvIeqSY/XVwJZ6k+tEH9u/0EyuR6ycL2
vSSuVwpxQ+YsEA==
-----END CERTIFICATE-----
Generated at Fri May 17 17:55:41 2024 by rpki-client on console-ams.rpki-client.org