Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File:                     kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier:          HSCZZHGkHvi2ZewL8b2qO1kDDZ5KmpFPs+dGjd+Wggg=
Subject key identifier:   8A:CC:D2:BC:59:55:CF:F6:DB:5E:13:37:82:0E:99:9F:8D:FC:D5:A9
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer:       /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial:       018F874B80389692DFD5032FD440662AC4C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number:          085D
Signing time:             Fri 17 May 2024 16:03:43 +0000
Manifest this update:     Fri 17 May 2024 16:03:43 +0000
Manifest next update:     Sat 18 May 2024 16:03:43 +0000
Files and hashes:         1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: sTqE9khFNhARMfdMcguIngq6sBHYYutykNaw8LeMlUg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:80:38:96:92:df:d5:03:2f:d4:40:66:2a:c4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
        Validity
            Not Before: May 17 16:03:43 2024 GMT
            Not After : May 18 16:03:43 2024 GMT
        Subject: CN=8accd2bc5955cff6db5e1337820e999f8dfcd5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:97:4f:bc:bb:8e:d9:70:c1:e9:86:73:26:80:
                    0f:5d:29:a1:0d:26:53:c1:25:b6:98:b0:73:0a:aa:
                    c5:43:2a:42:4a:d4:21:f7:37:33:ed:a3:71:d8:e9:
                    cd:91:7c:ec:f6:32:dc:94:a4:b1:ea:95:ff:bc:6c:
                    85:6a:c0:9b:49:9d:8e:eb:60:e6:5f:0f:40:e6:60:
                    69:a9:7e:f3:7c:09:c5:88:69:b8:e3:72:70:61:f3:
                    dc:c2:aa:64:16:0a:bd:c5:41:a1:fc:bc:3d:e8:d9:
                    25:d4:17:89:a8:f2:14:26:d6:af:60:ef:c9:d3:e6:
                    0a:3a:c4:71:ed:98:59:69:bf:b2:cb:15:eb:9e:4e:
                    af:3a:ea:2d:c4:95:a2:55:bb:a5:81:8c:09:46:f1:
                    a7:8e:6b:ee:5d:04:f5:b4:00:95:ef:8b:1d:fd:7a:
                    fc:f1:68:82:13:d3:d6:d6:3a:c7:31:f2:ef:bf:22:
                    3e:de:3c:25:8c:5f:62:64:64:25:60:f8:aa:d0:08:
                    a3:ca:42:a0:22:17:88:51:18:ae:b3:7f:9d:24:97:
                    e0:bf:8f:c2:ef:f1:d4:df:36:13:56:5f:da:4b:ae:
                    42:0d:f0:d4:d9:73:17:89:9a:6d:cd:a6:44:3f:7f:
                    76:cd:4f:93:a6:8f:f9:77:d2:99:81:a0:2a:34:3e:
                    fc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CC:D2:BC:59:55:CF:F6:DB:5E:13:37:82:0E:99:9F:8D:FC:D5:A9
            X509v3 Authority Key Identifier:
                keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e9:cb:3d:10:f0:10:81:08:be:ce:5b:71:2a:1f:dc:58:1e:
         8c:f3:cd:17:af:8a:17:02:d9:1b:3a:d5:b8:ce:7a:c3:a1:07:
         74:6f:dd:0b:14:67:af:96:86:8b:e6:a4:fc:6c:26:08:45:e4:
         86:3e:50:70:31:83:74:39:9f:a0:49:80:b3:6f:6b:c1:d1:0e:
         c8:d7:d5:30:f6:3b:7e:ef:92:db:d1:37:c8:79:b8:f2:f7:64:
         e3:27:c2:fc:d4:d7:62:27:ce:3e:e1:33:00:d3:26:dd:06:93:
         94:e4:64:ac:65:04:8c:b1:72:3a:db:f2:65:f5:12:95:6b:12:
         c6:c8:58:a4:06:b5:c8:fa:19:20:aa:aa:aa:82:71:69:61:ef:
         e1:2c:6a:ca:46:f9:c7:79:a9:ac:d4:e6:b0:11:af:09:23:2f:
         74:4c:e3:49:88:19:c6:12:83:40:40:af:3f:b9:95:25:cd:47:
         9c:ba:89:59:b5:3f:90:6f:e8:52:a5:ba:11:63:3d:92:ca:3a:
         c5:bb:cf:20:7f:9c:ca:83:fb:df:0f:ee:6f:09:db:73:ef:c0:
         c5:58:1e:c3:a8:40:71:75:a0:47:82:79:35:c7:fa:f2:0d:cb:
         84:3b:e0:4e:d2:b2:8c:00:4f:8f:67:6c:20:a7:9d:3c:8e:88:
         50:ba:5d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:47:16 2024 by rpki-client on console-fra.rpki-client.org