Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File:                     0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier:          k9gFiqRD7jjnKmLFnFX4CROJlBbQFtKSPUpSC2mTT/o=
Subject key identifier:   BF:AD:09:4A:60:F1:2E:6A:44:C4:82:D6:77:AB:72:30:38:26:31:30
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer:       /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial:       018F4EA34EDA021AC52E6AFEEDAD70117005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number:          07D6
Signing time:             Mon 06 May 2024 16:01:16 +0000
Manifest this update:     Mon 06 May 2024 16:01:16 +0000
Manifest next update:     Tue 07 May 2024 16:01:16 +0000
Files and hashes:         1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: +m4NqdKNnba0FC6xDZoGIDmwRm6bVVIaKsRtBNm+Tcs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 16:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:a3:4e:da:02:1a:c5:2e:6a:fe:ed:ad:70:11:70:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
        Validity
            Not Before: May  6 16:01:16 2024 GMT
            Not After : May  7 16:01:16 2024 GMT
        Subject: CN=bfad094a60f12e6a44c482d677ab723038263130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:15:41:c4:45:b2:e9:f4:f3:f5:81:6f:e9:15:
                    70:2c:45:4f:c5:d7:92:88:78:50:c8:8e:87:98:6d:
                    d4:dc:80:9d:47:02:de:42:1c:d5:3d:80:55:89:e2:
                    1a:ff:bf:cb:8d:94:a6:f4:eb:14:b0:f1:1c:cd:7a:
                    c5:ed:a9:8b:03:ad:20:90:0e:4b:b8:ad:c7:31:21:
                    cf:04:ec:88:29:ee:50:78:52:43:7d:75:07:57:37:
                    7a:ad:af:39:89:c4:af:17:31:f4:eb:5c:19:f4:6b:
                    48:4e:de:29:14:1b:09:c6:11:c7:00:cf:db:3a:e4:
                    59:ec:84:bc:c6:6c:2e:b2:a6:c6:7a:cc:bb:6a:f5:
                    03:b2:47:93:7b:b6:b1:20:3d:7f:3b:99:b9:d3:c1:
                    e2:13:e0:78:bd:6e:90:c0:52:07:c1:10:a5:a0:0e:
                    14:03:6b:fd:e0:ce:64:d5:ec:9d:75:b2:f6:d4:3b:
                    8b:50:eb:58:5a:e5:0d:42:47:42:e9:4a:ec:0a:35:
                    44:83:4d:a0:3d:53:3f:c5:45:f4:ba:a2:a7:76:eb:
                    25:db:bb:1e:45:46:be:96:0b:13:cf:ae:2d:53:7f:
                    ad:98:bd:43:01:b4:77:5d:91:fe:06:d7:0a:88:93:
                    76:2c:08:c3:09:1f:1a:70:65:00:c6:e6:a9:5a:d6:
                    1f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AD:09:4A:60:F1:2E:6A:44:C4:82:D6:77:AB:72:30:38:26:31:30
            X509v3 Authority Key Identifier:
                keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:32:9f:2c:34:26:cb:5c:ca:0b:29:96:74:c8:40:ff:67:e1:
         44:6e:19:d5:16:8c:5a:7a:72:e7:bd:0f:be:9d:a4:bd:38:56:
         60:fd:4a:4e:4a:ea:be:c8:e6:c8:2a:b6:09:5b:32:0c:d0:3e:
         09:65:1f:47:06:5e:ae:37:0d:63:d8:69:f3:bd:df:30:c5:4d:
         e7:bc:72:3c:09:3c:23:74:58:41:8c:45:32:53:c5:ab:89:ce:
         a1:a8:da:51:4c:d6:77:43:d7:da:eb:ba:81:35:02:7e:92:99:
         8c:a2:40:2e:59:5e:cc:1a:cf:aa:50:a2:8f:ba:30:d0:ae:4e:
         2c:00:71:1b:64:48:67:21:b2:88:90:56:94:07:d7:15:e7:d3:
         84:db:33:83:3d:7a:ab:f4:90:64:c6:bb:a0:55:ec:1d:8f:a2:
         c0:dc:22:49:f0:55:54:38:dc:94:64:ca:9b:49:c5:21:de:78:
         0f:49:80:91:ee:05:e7:1b:1d:b2:ce:c7:f2:41:6d:36:93:d8:
         63:0e:0a:f4:8a:6a:45:1b:74:3e:cb:27:4f:bb:38:f5:74:45:
         4f:91:39:a6:55:38:d9:e8:63:be:91:73:f4:e7:e3:32:26:43:
         e2:2b:4d:00:9a:ed:06:2d:69:56:c8:32:c3:ab:c3:81:22:8c:
         00:39:e0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:41:13 2024 by rpki-client on console-fra.rpki-client.org