Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
File:                     UTIqxJAgylfHTzsUi8BBAsq63IM.mft (raw, json)
Hash identifier:          BxZBCaZVyAn6nDa5zmbCTFrV0WiUXb4hGrUZHWyG/eU=
Subject key identifier:   71:FB:C4:6B:CB:6E:B4:22:03:94:7C:A6:70:65:12:33:9E:EA:72:0F
Authority key identifier: 51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
Certificate issuer:       /CN=51322ac49020ca57c74f3b148bc04102cabadc83
Certificate serial:       0193693462F51C28E135FB3F70B145E66B84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
Manifest number:          0E56
Signing time:             Tue 26 Nov 2024 16:01:01 +0000
Manifest this update:     Tue 26 Nov 2024 16:01:01 +0000
Manifest next update:     Wed 27 Nov 2024 16:01:01 +0000
Files and hashes:         1: UTIqxJAgylfHTzsUi8BBAsq63IM.crl (hash: 4tBz2nXH/6lp/eJ5D9bZVWV98dYpM48fXJ44o1tiX4w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:34:62:f5:1c:28:e1:35:fb:3f:70:b1:45:e6:6b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51322ac49020ca57c74f3b148bc04102cabadc83
        Validity
            Not Before: Nov 26 16:01:01 2024 GMT
            Not After : Nov 27 16:01:01 2024 GMT
        Subject: CN=71fbc46bcb6eb42203947ca6706512339eea720f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:e4:17:a9:b0:d8:a7:d0:a6:44:b0:12:e2:
                    7f:d2:ff:f2:0a:95:6f:0c:7e:fa:32:3d:c9:6e:ad:
                    ad:07:4d:16:d1:a2:d9:3f:42:60:63:57:4b:9c:69:
                    a1:0c:3a:7a:1f:0f:99:05:18:dd:f7:7a:08:33:b1:
                    4e:e2:37:7b:e5:5d:45:3b:64:59:40:c9:c4:48:7b:
                    e5:94:0c:46:4f:d4:d5:ef:2d:8e:1e:a6:44:37:24:
                    f9:1e:10:30:1a:d0:39:42:cd:d8:02:9b:e6:17:78:
                    ee:e5:08:75:7f:d6:74:0a:7a:4b:d4:ed:15:13:e5:
                    ce:55:67:3c:92:de:a3:f5:67:4b:f6:62:55:86:47:
                    9b:a8:a9:e3:52:30:63:82:44:b6:99:05:71:41:2e:
                    5b:6a:73:bd:56:4f:80:bb:3b:f6:22:2b:8f:ed:39:
                    56:2b:4a:d4:8b:16:04:03:41:8a:a2:35:b4:ba:e3:
                    6a:fe:f9:bc:99:5d:69:ff:1e:ff:fe:c8:3e:da:81:
                    4a:e7:9d:23:fe:20:46:11:d1:a4:d8:9d:c7:90:0b:
                    49:8b:17:37:41:a1:e0:0f:5c:6e:10:7b:b6:93:5e:
                    88:15:69:e0:3a:28:bf:d7:cc:60:83:bf:b0:cc:24:
                    fe:00:75:23:ba:a7:b4:32:da:de:60:22:96:6c:1d:
                    a1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FB:C4:6B:CB:6E:B4:22:03:94:7C:A6:70:65:12:33:9E:EA:72:0F
            X509v3 Authority Key Identifier:
                keyid:51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:9d:7b:2a:98:7a:b6:d2:a1:d3:33:db:44:16:fe:59:a9:3f:
         66:61:f6:33:69:83:3c:1d:8f:18:3c:19:54:87:81:86:c7:aa:
         19:4f:1a:f6:80:09:6e:bf:d4:d7:1b:a1:d8:33:b3:9f:dd:50:
         94:4c:a6:f7:bf:22:1c:93:39:dc:03:50:2e:8c:6a:83:83:26:
         11:c2:8c:2c:7c:ad:9e:10:10:be:6f:07:6e:cc:b2:c1:df:e0:
         ea:c6:32:64:6c:35:ab:c5:4d:ef:38:82:75:ad:6c:a5:b7:09:
         8a:ae:78:c8:4d:da:14:86:46:9b:30:6f:ea:50:72:70:be:c3:
         96:8a:ca:a3:4f:38:3a:37:be:96:74:b7:e3:c5:28:9b:03:2e:
         76:3c:46:3d:2c:8f:76:86:9d:d9:be:0b:14:10:44:6c:a8:b2:
         1f:9e:c7:8c:79:d8:a2:df:56:1a:74:cb:0e:37:06:6d:05:28:
         ed:37:5f:f8:fa:00:15:a8:93:30:bc:ac:52:1c:a7:10:bd:9d:
         34:a8:a9:a7:32:5e:24:4b:db:14:c0:9d:01:31:8d:c2:d1:1e:
         92:19:64:b1:5f:a7:90:7d:82:b9:6f:55:08:60:2e:f9:52:86:
         2d:41:a2:05:81:08:74:a0:9a:8f:37:bd:93:54:ff:8e:bf:e8:
         60:e1:ec:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNpNGL1HCjhNfs/cLFF5muEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMzIyYWM0OTAyMGNhNTdjNzRmM2IxNDhiYzA0MTAyY2Fi
YWRjODMwHhcNMjQxMTI2MTYwMTAxWhcNMjQxMTI3MTYwMTAxWjAzMTEwLwYDVQQD
Eyg3MWZiYzQ2YmNiNmViNDIyMDM5NDdjYTY3MDY1MTIzMzllZWE3MjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH7kF6mw2KfQpkSwEuJ/0v/yCpVv
DH76Mj3Jbq2tB00W0aLZP0JgY1dLnGmhDDp6Hw+ZBRjd93oIM7FO4jd75V1FO2RZ
QMnESHvllAxGT9TV7y2OHqZENyT5HhAwGtA5Qs3YApvmF3ju5Qh1f9Z0CnpL1O0V
E+XOVWc8kt6j9WdL9mJVhkebqKnjUjBjgkS2mQVxQS5banO9Vk+Auzv2IiuP7TlW
K0rUixYEA0GKojW0uuNq/vm8mV1p/x7//sg+2oFK550j/iBGEdGk2J3HkAtJixc3
QaHgD1xuEHu2k16IFWngOii/18xgg7+wzCT+AHUjuqe0MtreYCKWbB2h8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHH7xGvLbrQiA5R8pnBlEjOe6nIPMB8GA1UdIwQY
MBaAFFEyKsSQIMpXx087FIvAQQLKutyDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVRJcXhKQWd5bGZIVHpzVWk4QkJBc3E2M0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNThjZjMtNjkwOS00NThhLWE1MWEt
NTkxNGY5ZDMzNzhiLzEvVVRJcXhKQWd5bGZIVHpzVWk4QkJBc3E2M0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9mNThjZjMtNjkwOS00NThhLWE1MWEtNTkxNGY5ZDMzNzhi
LzEvVVRJcXhKQWd5bGZIVHpzVWk4QkJBc3E2M0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMp17Kph6
ttKh0zPbRBb+Wak/ZmH2M2mDPB2PGDwZVIeBhseqGU8a9oAJbr/U1xuh2DOzn91Q
lEym978iHJM53ANQLoxqg4MmEcKMLHytnhAQvm8Hbsyywd/g6sYyZGw1q8VN7ziC
da1spbcJiq54yE3aFIZGmzBv6lBycL7DlorKo084Oje+lnS348UomwMudjxGPSyP
doad2b4LFBBEbKiyH57HjHnYot9WGnTLDjcGbQUo7Tdf+PoAFaiTMLysUhynEL2d
NKippzJeJEvbFMCdATGNwtEekhlksV+nkH2CuW9VCGAu+VKGLUGiBYEIdKCajze9
k1T/jr/oYOHsKA==
-----END CERTIFICATE-----