Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
File:                     AGXxbaYGeD8wH3CKXmtP1f_UMug.mft (raw, json)
Hash identifier:          zYn0p8WYEncO/21y43fXCaM9aU+1VI9BRaovoH3kjCs=
Subject key identifier:   16:8C:16:15:EC:43:B7:F5:54:6B:79:AE:8E:3B:DF:AD:CC:7B:FA:69
Authority key identifier: 00:65:F1:6D:A6:06:78:3F:30:1F:70:8A:5E:6B:4F:D5:FF:D4:32:E8
Certificate issuer:       /CN=0065f16da606783f301f708a5e6b4fd5ffd432e8
Certificate serial:       018F3DE719C7BAE61FE1297C50F70B292E6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
Manifest number:          05EE
Signing time:             Fri 03 May 2024 10:01:46 +0000
Manifest this update:     Fri 03 May 2024 10:01:46 +0000
Manifest next update:     Sat 04 May 2024 10:01:46 +0000
Files and hashes:         1: AGXxbaYGeD8wH3CKXmtP1f_UMug.crl (hash: OUba5zl+oQQ1shW6/nOpAzsuimQ2U2NZL5PoJV8gn94=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e7:19:c7:ba:e6:1f:e1:29:7c:50:f7:0b:29:2e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0065f16da606783f301f708a5e6b4fd5ffd432e8
        Validity
            Not Before: May  3 10:01:46 2024 GMT
            Not After : May  4 10:01:46 2024 GMT
        Subject: CN=168c1615ec43b7f5546b79ae8e3bdfadcc7bfa69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3f:d4:1a:78:84:bb:ca:37:74:20:41:ca:38:
                    19:67:87:35:c1:5a:c3:79:e5:da:38:fd:ce:13:e6:
                    df:6d:54:43:58:db:d8:b5:ae:bc:48:0f:6d:9a:47:
                    21:48:e0:55:52:73:c8:04:fb:7a:e9:9d:bb:7a:8f:
                    78:6f:59:24:60:6b:0e:f5:4f:12:da:72:c1:35:5e:
                    6b:43:1e:14:1f:c3:b9:6d:bd:1c:9a:18:01:2b:5f:
                    a5:c6:6c:da:02:bf:9e:f8:da:1c:87:be:35:11:f5:
                    71:cc:dc:6d:0d:c2:ba:57:19:df:fc:76:e4:75:ce:
                    a0:8d:ac:64:87:25:e7:35:08:c3:f1:7f:6d:4d:a1:
                    92:b6:f1:17:69:b3:4c:60:0f:22:3e:48:a7:6c:15:
                    e0:4e:09:9a:26:11:0d:6d:71:e2:83:c3:d3:06:a6:
                    9c:9c:0c:f3:b0:c8:53:4f:01:83:40:44:b4:f6:86:
                    ab:05:1b:a4:c0:60:0a:bd:17:83:c6:8a:95:e1:42:
                    7c:e6:a3:8d:db:a4:50:21:27:a8:6e:61:6c:4c:94:
                    de:22:bc:3d:fa:29:59:ff:26:f8:65:10:7d:11:e8:
                    15:a4:35:ad:6e:09:f6:68:62:40:08:e4:c7:9e:68:
                    26:20:70:ea:c8:9e:23:41:44:1d:d0:98:96:13:50:
                    0f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8C:16:15:EC:43:B7:F5:54:6B:79:AE:8E:3B:DF:AD:CC:7B:FA:69
            X509v3 Authority Key Identifier:
                keyid:00:65:F1:6D:A6:06:78:3F:30:1F:70:8A:5E:6B:4F:D5:FF:D4:32:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:fc:c4:53:88:5e:5f:69:32:cc:07:9e:68:ab:9b:59:f6:c0:
         a7:1f:59:1a:c7:0f:0b:9d:1e:41:d5:b8:7c:36:0b:3a:95:a4:
         ef:9a:3a:d9:34:26:72:b2:06:4e:30:ec:ac:c5:96:a6:0f:ab:
         54:79:c4:c7:ff:dd:f5:08:6b:ce:31:cd:67:7e:44:04:01:91:
         3c:9e:b2:e5:22:f1:2e:0a:32:39:f2:ae:34:84:16:e8:2c:7a:
         53:84:6f:ba:47:6f:d3:a8:1b:6b:37:8c:bb:82:33:b0:d5:2b:
         5d:28:d3:7f:5e:7c:a5:49:f4:5d:bc:7a:95:3d:69:0a:a3:03:
         4d:fe:de:c5:d0:60:2d:61:a8:81:2c:0b:23:b6:9a:db:d9:f1:
         53:6b:0d:85:06:ae:ec:41:cc:00:bf:1a:0c:00:64:85:68:b1:
         31:8b:12:0a:6d:51:c2:c7:89:ed:01:35:b6:03:fc:07:2d:de:
         9e:08:ec:86:df:f2:47:56:83:fe:57:5d:9d:c5:3f:2f:ac:f6:
         7b:57:26:b2:9b:e8:41:26:a7:40:a2:f1:18:ed:26:0f:51:2f:
         86:1f:2a:6a:b9:55:cd:18:60:e2:f8:bb:c4:f4:34:86:88:9f:
         9d:68:34:28:37:a4:7c:4a:7f:bc:3f:59:6a:a4:e6:7a:56:28:
         e4:d8:35:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:26:41 2024 by rpki-client on console-fra.rpki-client.org