Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
File:                     ujSP3hs60izyj-ZAMK4v5PIst_s.mft (raw, json)
Hash identifier:          S6UUbgZmAPRFcqJKc/RCu0sNBrlvOvbloyDcS3PstNg=
Subject key identifier:   BE:EE:33:81:4F:FA:E6:55:9A:E5:D0:92:B3:DC:E8:81:88:C0:16:CC
Authority key identifier: BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
Certificate issuer:       /CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Certificate serial:       018F874AE1C9CD079D595D9F2FF2FB20B117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
Manifest number:          0E57
Signing time:             Fri 17 May 2024 16:03:02 +0000
Manifest this update:     Fri 17 May 2024 16:03:02 +0000
Manifest next update:     Sat 18 May 2024 16:03:02 +0000
Files and hashes:         1: ujSP3hs60izyj-ZAMK4v5PIst_s.crl (hash: r3Biehrq0KRO8Okjp6e6/blMrr52N3DjwBD15Ep3r7g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:e1:c9:cd:07:9d:59:5d:9f:2f:f2:fb:20:b1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
        Validity
            Not Before: May 17 16:03:02 2024 GMT
            Not After : May 18 16:03:02 2024 GMT
        Subject: CN=beee33814ffae6559ae5d092b3dce88188c016cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:27:df:40:2c:dd:02:22:f7:77:bc:ae:cc:04:
                    76:09:92:13:43:19:bc:d4:c5:2b:3a:c3:47:3e:15:
                    69:97:85:79:3c:da:6d:8d:f2:78:d5:cb:6f:05:93:
                    6d:40:9f:3c:10:e4:e8:91:d8:eb:ad:c8:2c:0f:9d:
                    bc:e5:a5:8c:6f:9c:70:39:5d:71:f3:58:62:5f:71:
                    79:f1:fa:12:78:2b:36:fb:00:d6:a2:16:bf:32:ad:
                    34:5d:1b:c0:2e:83:31:e4:f7:5a:77:c3:32:1e:79:
                    90:61:3a:26:e7:d9:c6:01:4f:a7:97:cf:b6:0b:8a:
                    09:4f:c9:1f:1a:94:e5:28:49:82:94:19:df:67:3b:
                    2c:ea:20:64:5b:3d:ff:2a:5d:72:aa:ef:55:cf:8a:
                    69:64:4e:29:f6:d5:e9:15:9d:fe:32:a1:aa:c0:db:
                    86:dd:93:0a:0e:ea:93:4c:52:73:f9:c4:fd:ba:f6:
                    63:61:14:da:e4:25:88:32:e2:cf:fc:46:45:40:41:
                    47:4b:de:e9:1f:2c:f8:fe:6c:1f:dc:92:ee:fd:82:
                    40:8a:03:6a:22:09:70:5e:e8:f1:af:96:e4:75:1e:
                    a3:d8:0f:6e:fe:4d:e4:73:0c:a5:f8:bd:17:86:cd:
                    08:2f:02:ca:4a:c6:19:77:1f:a1:70:58:b6:fc:dd:
                    29:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EE:33:81:4F:FA:E6:55:9A:E5:D0:92:B3:DC:E8:81:88:C0:16:CC
            X509v3 Authority Key Identifier:
                keyid:BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f7:b3:c3:e2:52:c6:b6:45:de:00:92:c7:2e:86:06:94:6f:
         36:2b:4a:0d:87:c4:f7:a0:c8:b0:2d:b2:6c:73:4a:95:6c:f6:
         c4:fa:5c:2d:70:50:f5:90:97:5d:0f:74:95:64:d9:e9:b0:4f:
         23:c3:6b:c4:5f:35:68:17:8c:6c:38:b2:34:45:5c:6a:b3:98:
         49:a2:56:da:00:79:ff:eb:84:9e:d0:bd:6c:96:d6:5c:23:cd:
         00:2e:ec:b7:f0:54:6d:4d:da:3e:3c:26:ef:03:0c:22:a7:cf:
         ed:fb:ba:0a:f9:73:c6:96:fe:60:ef:b2:16:e5:cd:dd:90:43:
         b2:5f:33:66:9d:b0:f4:3f:ea:a2:52:92:14:d8:7e:d2:07:5d:
         f9:1a:f9:5f:eb:17:42:1a:8d:b6:f0:4b:ae:03:2f:e2:81:8a:
         fc:65:8d:ae:af:2d:f3:b3:80:27:1e:8a:12:4e:d5:a0:b2:5a:
         cf:d7:a9:74:21:4c:5e:8a:3a:00:85:26:90:14:32:a3:15:7d:
         71:b6:46:4b:00:18:dc:b8:6a:12:1a:a4:62:b1:02:d2:0d:04:
         73:d8:6e:1b:12:71:15:9a:89:44:80:6e:79:1b:b3:1b:a8:c0:
         92:af:d7:c6:af:1f:4a:42:92:35:7f:52:66:cd:01:3c:89:7d:
         a0:c8:33:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:29:47 2024 by rpki-client on console-fra.rpki-client.org