Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
File:                     ujSP3hs60izyj-ZAMK4v5PIst_s.mft (raw, json)
Hash identifier:          Dk8PMLhipRYRVrBUho+hk6Cr4s29l8JQKmwQ+Yq0X38=
Subject key identifier:   3F:C5:75:B5:51:87:7B:3D:0B:E2:F7:8B:FA:CF:8A:1D:89:59:E7:FA
Authority key identifier: BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
Certificate issuer:       /CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Certificate serial:       019369DAD5A9C094EC1BB9FFEBD0A690639B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
Manifest number:          105A
Signing time:             Tue 26 Nov 2024 19:02:49 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:49 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:49 +0000
Files and hashes:         1: ujSP3hs60izyj-ZAMK4v5PIst_s.crl (hash: T8raDRcV1WqKj1dPW/fzreETqorDjpxcWqsmUel0ReM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:d5:a9:c0:94:ec:1b:b9:ff:eb:d0:a6:90:63:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
        Validity
            Not Before: Nov 26 19:02:49 2024 GMT
            Not After : Nov 27 19:02:49 2024 GMT
        Subject: CN=3fc575b551877b3d0be2f78bfacf8a1d8959e7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bb:55:ba:00:09:d7:a6:db:d3:57:2e:de:c6:
                    ed:e5:ff:4b:21:a3:82:3c:c0:1b:ec:69:fa:5d:c9:
                    84:42:07:c8:7e:72:8d:ec:91:57:a9:f2:a5:30:4a:
                    74:d1:a4:9c:77:a5:10:92:e3:2f:4f:49:e9:29:21:
                    85:e2:90:1c:3f:66:34:8a:6b:3c:1f:62:d4:8e:84:
                    b4:a8:f8:72:21:08:af:af:23:a3:4f:3b:5d:80:c6:
                    18:24:1d:ef:d9:ad:28:d3:ea:c7:13:f4:59:03:37:
                    d0:cf:9d:04:08:8b:59:f8:08:15:cb:db:d1:59:80:
                    e3:d9:78:30:dc:4e:41:1c:24:dd:16:29:a1:d1:b0:
                    55:e3:34:a1:7b:9c:5c:56:2b:0f:88:f5:6a:74:54:
                    67:22:7a:9e:7a:e1:bb:10:5e:b2:50:54:50:be:cd:
                    e1:c9:5e:23:1a:89:9a:8d:82:53:a4:80:41:3b:c4:
                    8d:80:f5:f1:98:d2:2d:6f:1a:d9:1e:8c:70:3b:4d:
                    cf:8d:04:08:c3:79:be:b3:f2:f5:b8:cb:3d:9b:f5:
                    f0:55:7e:27:2e:fe:c9:fe:1b:6a:b1:44:c7:fb:d5:
                    e7:d1:4a:5e:5f:0c:a1:5b:6d:26:bb:03:e0:2e:c6:
                    46:50:40:19:e2:36:44:9b:dc:6e:4c:83:08:68:d9:
                    f9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C5:75:B5:51:87:7B:3D:0B:E2:F7:8B:FA:CF:8A:1D:89:59:E7:FA
            X509v3 Authority Key Identifier:
                keyid:BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:66:d3:8c:fb:c2:20:2b:0b:47:ed:7b:d2:26:34:04:7a:76:
         f0:17:02:36:95:a5:b7:5f:e8:d1:4a:33:19:7b:aa:86:89:6c:
         7f:d7:fe:1c:00:e8:84:e2:89:c3:64:ba:20:40:1c:3c:2a:5e:
         85:25:f1:b8:f9:27:b2:55:6d:5f:07:b8:d3:27:6f:6c:01:28:
         39:02:6d:a7:b3:e2:c9:e9:41:08:94:4c:1b:c9:4d:66:b1:3f:
         32:54:7b:a5:5d:e8:a5:99:12:63:f5:2e:34:ac:45:e2:51:2a:
         e1:02:e8:e0:9a:38:ee:44:93:d7:dc:db:ae:86:95:21:93:71:
         39:62:25:b5:87:a4:f3:6b:0a:c5:2a:98:f7:2b:c0:37:34:2f:
         27:ff:5a:34:9f:50:f6:cb:8a:2b:53:0e:ca:fd:82:5f:15:da:
         d5:03:12:3b:53:12:15:f9:33:5b:2c:af:af:1f:91:67:bb:93:
         85:4d:37:f9:03:97:93:4d:93:3d:dc:5e:8b:a5:5d:ae:c4:d0:
         53:77:f3:b1:a7:50:f5:6f:56:20:49:80:f7:38:a3:7d:73:23:
         08:70:7d:33:d6:c9:41:76:f3:27:f7:fa:19:51:f7:71:20:4a:
         40:3d:37:f7:11:9a:60:71:51:fc:f5:ad:1e:3e:e3:6b:14:75:
         6c:fd:68:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----