Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File:                     1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier:          fPB0HsGVMnzzUgHpPoPp/Z0uUPyT1imPaySAEcQwm20=
Subject key identifier:   6D:27:F7:2C:B0:AB:4C:8C:83:4D:FC:E7:64:91:84:00:76:F4:67:4C
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer:       /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial:       0192395D643A3AB96B20B7DAB69520762707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number:          044E
Signing time:             Sat 28 Sep 2024 16:01:14 +0000
Manifest this update:     Sat 28 Sep 2024 16:01:14 +0000
Manifest next update:     Sun 29 Sep 2024 16:01:14 +0000
Files and hashes:         1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: dhWkrdUo+ZXUUwcbuTwF2B8vt8WHlLrpRwJY5Ok6m8A=)
                          2: QAkhNLz7xm6REE-Jy0cObIMU4r8.roa (hash: GvXLn7SvDQzpC8hucjbJzmib5RjLx/+KpVBvV1FPqCg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:5d:64:3a:3a:b9:6b:20:b7:da:b6:95:20:76:27:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
        Validity
            Not Before: Sep 28 16:01:14 2024 GMT
            Not After : Sep 29 16:01:14 2024 GMT
        Subject: CN=6d27f72cb0ab4c8c834dfce76491840076f4674c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:f7:64:d7:de:75:87:8a:48:fd:97:ea:76:
                    c3:e1:fc:c3:49:ec:c5:3c:41:7a:30:03:cc:b7:41:
                    72:b6:ad:60:34:e3:96:b3:c2:5b:2a:32:97:0f:44:
                    d1:7a:eb:5b:a1:dc:71:90:e8:8b:c3:8e:f6:d9:6d:
                    db:43:42:cd:b9:bb:56:95:03:46:fa:8e:79:3c:73:
                    6b:83:2b:91:84:70:e5:39:90:47:83:6c:da:fc:61:
                    3e:93:92:8b:cc:ed:98:7a:00:54:43:9a:8a:f7:25:
                    61:8a:55:43:f6:3f:ca:62:d1:3f:64:0c:d5:bb:d2:
                    5b:69:92:e7:5f:04:53:c7:99:cc:e7:ba:10:10:7d:
                    21:76:71:27:28:8f:33:4c:3c:87:da:d7:fd:b8:af:
                    25:24:54:a2:81:e0:8b:69:f0:0b:70:8c:5a:b9:ff:
                    1e:35:84:3b:34:56:dc:b7:8b:17:89:c2:00:ba:a3:
                    75:86:bd:a9:e9:bf:27:da:51:f4:fb:96:14:54:40:
                    64:92:af:67:61:24:05:f3:d8:c6:d6:5d:5a:fb:50:
                    ef:95:56:26:19:70:34:0c:5a:ad:79:15:85:2e:25:
                    1e:a3:d8:d8:bb:b0:02:7e:b2:29:57:27:dd:85:5d:
                    11:8e:f7:87:d0:65:6e:95:16:ec:37:47:0c:01:cc:
                    a8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:27:F7:2C:B0:AB:4C:8C:83:4D:FC:E7:64:91:84:00:76:F4:67:4C
            X509v3 Authority Key Identifier:
                keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:07:51:90:7b:fd:65:88:2c:77:f7:03:60:de:8f:36:a5:2d:
         d7:75:6e:67:bc:f0:95:7a:d6:13:88:50:80:ac:eb:5c:be:1b:
         74:4a:86:28:07:7d:8c:a4:69:08:44:45:f3:8d:11:67:20:71:
         19:31:79:14:7d:ef:55:3b:ee:d2:a4:cf:f4:3d:b7:5a:ca:2a:
         10:c6:a0:16:d3:c4:5a:9d:b5:21:3e:8e:06:03:5f:4a:14:f9:
         d2:11:c9:d8:69:f1:91:be:dc:13:74:77:25:11:05:bd:e7:27:
         f8:b2:fc:60:c1:ae:2b:79:0e:9c:53:ea:38:b5:05:29:10:4b:
         8f:91:24:6e:88:14:2a:d1:a1:2c:e8:c8:24:a8:35:f6:06:6d:
         da:75:30:ce:38:c6:5d:a6:ca:51:79:67:2c:2d:fd:cd:1e:6f:
         c7:25:89:d5:fc:5f:4b:27:c9:5a:37:a1:b4:cd:e8:91:93:09:
         f4:da:99:ab:9d:71:4a:47:7a:2e:82:ce:f1:8f:23:4d:ef:0e:
         11:04:9d:d0:66:35:0a:74:d7:66:95:0f:fa:7a:11:c0:0a:a7:
         9c:da:b2:72:9b:58:88:d6:d1:3c:91:bc:7c:6b:62:cb:a5:b8:
         c5:26:34:4c:97:6e:e0:93:2e:5f:fd:20:68:6a:06:df:34:6c:
         e6:b8:7f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:20:41 2024 by rpki-client on console-ams.rpki-client.org