Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
File:                     UGVstHd9FLXrJkxrAyyLo3VvKuU.mft (raw, json)
Hash identifier:          1pOwzT9j7/lEMrNu5b1tTALWHpU4z2z1VKkkQStpkSk=
Subject key identifier:   83:F2:B8:E0:ED:46:F0:37:C8:5F:0E:BC:FC:68:6B:98:79:83:30:48
Authority key identifier: 50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
Certificate issuer:       /CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Certificate serial:       018F87494ADCB4581CB71989D70163D9A85B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
Manifest number:          0994
Signing time:             Fri 17 May 2024 16:01:18 +0000
Manifest this update:     Fri 17 May 2024 16:01:18 +0000
Manifest next update:     Sat 18 May 2024 16:01:18 +0000
Files and hashes:         1: UGVstHd9FLXrJkxrAyyLo3VvKuU.crl (hash: 3XX3Ayz2OMmhESJQKTNAn1apryxIIxpoasuqzzbNNLc=)
                          2: tFO-CDAl5zZ4FEoJKP0OYicIIVM.roa (hash: BrnRMDH62xrZpO1pW1kv5YMw0WNw5Ry0hee6TWCkXAs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:4a:dc:b4:58:1c:b7:19:89:d7:01:63:d9:a8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
        Validity
            Not Before: May 17 16:01:18 2024 GMT
            Not After : May 18 16:01:18 2024 GMT
        Subject: CN=83f2b8e0ed46f037c85f0ebcfc686b9879833048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:61:bc:67:ae:8b:d7:7f:91:a4:c5:62:6d:
                    0b:fd:ce:4e:87:84:fb:0f:a4:24:ef:31:38:b5:7b:
                    0a:33:c9:6c:8b:7d:65:e5:c4:85:af:85:40:c5:e0:
                    84:f9:a9:0e:1a:16:db:1a:7a:57:d2:f5:48:8c:65:
                    72:1b:2b:26:bf:f3:69:20:90:19:0e:f2:56:57:fc:
                    e8:de:bb:0e:d2:a3:b4:a5:1f:d6:26:77:fe:b3:83:
                    82:78:81:9d:85:d7:d7:66:ff:0b:e5:ae:9a:d9:51:
                    1f:f2:88:2f:4f:bc:7e:b5:cc:a3:05:49:da:58:0d:
                    a3:92:8b:57:fa:7f:3d:36:77:2c:66:a1:9f:f8:2c:
                    4b:ef:3c:11:00:f4:81:51:59:57:bf:8e:81:a5:99:
                    74:7c:a4:b3:a8:db:7b:1f:5d:18:44:65:90:b4:c4:
                    a3:98:7e:2b:7e:15:29:39:9a:ab:f6:48:1f:89:1a:
                    05:c5:cf:0b:1e:6a:3a:01:08:be:12:71:0a:de:c1:
                    e9:65:a8:85:13:2e:ca:37:40:71:fb:73:4a:fa:87:
                    89:20:47:9d:e2:13:77:a9:ad:f8:e7:36:b4:55:24:
                    3a:2f:79:a8:7d:03:39:0f:8a:20:40:16:aa:b3:23:
                    3c:0e:38:84:ec:c9:e1:b0:a5:63:8d:1a:63:c8:fb:
                    e8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F2:B8:E0:ED:46:F0:37:C8:5F:0E:BC:FC:68:6B:98:79:83:30:48
            X509v3 Authority Key Identifier:
                keyid:50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f7:34:5e:73:39:23:c1:3c:67:bd:ab:e2:23:9f:2b:6c:7e:
         6c:1e:45:58:47:57:60:57:31:65:89:c2:cf:11:b0:69:b9:be:
         3b:fe:61:67:10:24:a9:28:81:a1:1b:37:35:56:4b:25:f3:e0:
         7d:ae:38:4a:12:4a:07:40:40:f0:c9:ba:00:d5:e9:3d:50:a5:
         e7:4b:70:19:c0:a7:60:b7:c3:aa:95:07:cc:e5:62:21:54:23:
         ec:89:3d:c0:73:9a:96:c6:0c:92:ab:da:e4:86:d0:9b:5e:75:
         2b:15:cb:95:00:e7:e2:84:b2:88:6b:16:6e:b0:7f:0b:52:85:
         e6:2a:d8:08:6b:85:fb:0e:99:0e:57:2a:dc:8f:2f:7f:d8:1c:
         49:8d:fa:24:7d:e2:13:bb:ab:96:b5:e9:c3:48:b0:d6:bc:8c:
         90:3e:0c:b3:3f:01:0b:b5:bc:86:00:c2:bf:22:b3:4b:19:ef:
         ae:af:03:ff:e7:42:a7:a0:2a:54:d7:42:d1:f6:05:11:fa:00:
         fe:dd:9a:64:9a:a6:ce:10:8a:64:75:76:be:9e:ce:5e:82:13:
         d9:b4:50:39:d1:a3:e7:03:30:24:f7:56:12:fa:14:40:00:2a:
         f0:04:8e:b2:5a:ea:2e:16:86:c8:2a:8d:0f:03:67:37:3b:2c:
         e3:0a:a7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:58:28 2024 by rpki-client on console-ams.rpki-client.org