Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
File:                     UZhWegOeXM4j7pN0CW7tV7u6KY4.mft (raw, json)
Hash identifier:          +ZMEgALabLBsscswqq7AXstBg9ALy5xUAbWjDjyxXF0=
Subject key identifier:   B2:FE:A9:95:9E:38:F8:EE:22:AA:C0:2E:68:57:44:65:BA:4E:D9:D9
Authority key identifier: 51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
Certificate issuer:       /CN=5198567a039e5cce23ee9374096eed57bbba298e
Certificate serial:       018F874B027C23ED0FEBFE7ADB62D889D880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
Manifest number:          1172
Signing time:             Fri 17 May 2024 16:03:10 +0000
Manifest this update:     Fri 17 May 2024 16:03:10 +0000
Manifest next update:     Sat 18 May 2024 16:03:10 +0000
Files and hashes:         1: UZhWegOeXM4j7pN0CW7tV7u6KY4.crl (hash: 4wh7qXqlnZ9ZIqwSswtizCGYsPwiAYMp7dructwRzPU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:02:7c:23:ed:0f:eb:fe:7a:db:62:d8:89:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5198567a039e5cce23ee9374096eed57bbba298e
        Validity
            Not Before: May 17 16:03:10 2024 GMT
            Not After : May 18 16:03:10 2024 GMT
        Subject: CN=b2fea9959e38f8ee22aac02e68574465ba4ed9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:11:4d:77:4e:ef:68:0c:f4:7a:1e:60:06:87:
                    8a:1f:b8:11:f2:b6:04:5f:d8:cf:c5:2a:17:3f:a7:
                    81:f9:7f:67:02:d9:c0:44:ab:db:2b:75:5c:35:6b:
                    d6:89:31:d5:3d:ac:3e:97:9f:13:ba:ec:53:21:93:
                    1c:38:86:3e:b6:42:14:c0:83:ca:78:bd:9f:67:18:
                    5b:9b:a2:fe:9e:9d:eb:57:7a:ba:f9:2b:5e:31:70:
                    74:3a:c6:1b:61:29:d8:f8:d3:9d:a6:91:91:94:67:
                    ea:b0:e9:8b:33:ec:2a:df:60:af:18:f0:4e:6c:08:
                    f5:09:13:ca:ea:e1:09:80:0a:eb:f9:c9:f4:27:ef:
                    24:f0:1c:36:81:15:ae:0e:23:9a:a1:98:43:de:f5:
                    ac:47:60:33:b6:c7:ef:13:ed:ef:3c:24:15:d2:b1:
                    92:4b:0e:cd:e4:f1:51:f9:cb:0b:55:2d:b0:ac:80:
                    4f:ea:6a:a0:98:d9:fd:5f:db:bf:68:3b:63:1c:60:
                    48:6b:f0:0a:a7:7f:7f:46:1b:33:fe:7c:eb:d7:f8:
                    42:67:40:9a:ae:3b:af:82:61:cf:34:d1:8a:3d:59:
                    14:7b:a0:95:21:26:a5:f8:6d:92:23:5f:a4:d8:06:
                    b7:af:98:90:56:2f:7f:0b:80:18:a0:a1:c8:36:55:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FE:A9:95:9E:38:F8:EE:22:AA:C0:2E:68:57:44:65:BA:4E:D9:D9
            X509v3 Authority Key Identifier:
                keyid:51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9d:24:94:ee:a1:a3:ae:c0:92:d3:a0:75:92:8a:49:8f:3b:
         9d:27:6c:c6:38:78:33:00:de:24:ca:42:02:a6:f3:0e:54:c9:
         f0:61:ad:34:72:bf:a5:3a:c5:59:04:31:e2:6a:89:16:12:1f:
         10:da:28:dc:62:b8:81:9f:cf:24:71:0e:77:03:23:ac:a0:01:
         66:4d:df:d7:b3:84:a3:a0:07:03:e6:a8:79:ce:28:9f:ed:e3:
         32:f9:f6:f7:e6:13:1c:91:6f:14:4e:4a:54:0c:61:92:58:f0:
         be:58:9f:ec:97:84:8c:1b:75:1f:94:79:43:20:e0:d2:ba:c0:
         6d:5f:a4:06:36:46:e9:a9:f3:37:3d:fa:f2:0a:91:60:f1:88:
         04:62:75:d9:b4:29:f6:5c:aa:57:4a:d9:24:49:fa:74:5f:1b:
         8e:f0:aa:86:cf:81:69:00:a6:8c:38:af:e1:46:31:e4:b6:91:
         df:a1:22:87:8a:12:74:cb:d4:00:14:8d:54:db:d6:37:5c:19:
         69:4c:c0:4b:ec:00:ca:c5:7e:8c:da:6f:e6:f1:0d:ea:82:aa:
         44:67:79:a6:41:89:d9:a7:4c:df:78:ef:54:53:ec:c5:80:37:
         f2:95:be:cc:e9:68:fd:65:4e:18:ad:7f:07:52:d4:e4:13:2c:
         e5:e0:b4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:25 2024 by rpki-client on console-fra.rpki-client.org