Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
File:                     Uylu4zFT725pONV6KhMsHlJtxDA.mft (raw, json)
Hash identifier:          E1eJZXTc7mFXc9ID64T3nPpw/Sxushy46IK9nC3zrEU=
Subject key identifier:   E1:64:48:E3:B4:48:16:47:22:A2:AD:D5:36:C1:52:0F:A0:BC:F0:04
Authority key identifier: 53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
Certificate issuer:       /CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Certificate serial:       018F8749C60F67EDA2E8208F0374AFE2520D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
Manifest number:          104D
Signing time:             Fri 17 May 2024 16:01:49 +0000
Manifest this update:     Fri 17 May 2024 16:01:49 +0000
Manifest next update:     Sat 18 May 2024 16:01:49 +0000
Files and hashes:         1: Uylu4zFT725pONV6KhMsHlJtxDA.crl (hash: tIjol5hWyG0ryJWdA5mZ0NH48EkXRzro2QOd0kg8qmw=)
                          2: kJtiqN21K891TICGGK-28lV_JrI.roa (hash: O5psBc6PpglaqXkVIvC8v+DmQqqWpB0h3k9s6quxWHA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:c6:0f:67:ed:a2:e8:20:8f:03:74:af:e2:52:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53296ee33153ef6e6938d57a2a132c1e526dc430
        Validity
            Not Before: May 17 16:01:49 2024 GMT
            Not After : May 18 16:01:49 2024 GMT
        Subject: CN=e16448e3b448164722a2add536c1520fa0bcf004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:78:53:63:55:ff:85:8a:43:57:c4:b4:89:
                    cd:c6:0c:31:5f:15:e2:34:4a:7b:70:73:5d:c4:83:
                    13:df:ec:a9:de:76:ad:0e:ad:ab:e9:e7:c4:a4:96:
                    58:4e:38:ff:89:81:ab:a9:dc:6e:96:2b:88:0e:c6:
                    b7:b4:6c:45:98:c3:4b:a9:8c:b9:43:37:cf:b4:2f:
                    5a:10:bb:59:19:db:73:fa:7d:d1:ee:57:78:bb:9a:
                    76:df:1a:73:55:f3:46:c9:a5:55:97:79:62:10:f7:
                    da:6b:45:4b:83:e7:08:78:87:b2:55:e4:a4:06:b3:
                    a9:f7:72:03:f6:7f:92:b8:76:7f:e5:d5:73:9d:47:
                    e6:7e:02:c8:75:07:ac:96:5e:57:59:f0:9c:06:ea:
                    86:7e:86:d2:cc:91:3b:de:6b:ff:ae:13:07:b6:1f:
                    e9:11:b3:65:01:3b:29:84:97:dc:a2:b3:3a:ea:d6:
                    1b:ca:c0:dd:25:7a:6b:36:de:5b:35:b3:ff:ae:e3:
                    ad:51:89:06:08:c3:52:99:8b:43:89:b8:a8:9e:cb:
                    b8:de:96:7a:6e:2c:6e:6b:8a:01:3d:ea:be:14:2b:
                    32:be:a5:8b:4f:30:5b:90:ae:1a:11:bc:3a:6f:88:
                    a8:f4:3a:a8:19:54:2f:23:d3:6e:f4:e3:95:e0:ad:
                    b3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:64:48:E3:B4:48:16:47:22:A2:AD:D5:36:C1:52:0F:A0:BC:F0:04
            X509v3 Authority Key Identifier:
                keyid:53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:15:8d:5b:6e:1c:82:ff:50:a6:10:ed:b0:94:a6:98:99:16:
         cd:95:22:94:ab:c3:d3:9c:68:7c:54:c6:e6:16:85:c1:93:dc:
         ba:80:1e:9e:19:b7:ce:f6:8f:dd:4e:cd:b0:b6:3d:90:c6:13:
         cc:b7:da:3f:99:70:3c:68:78:cc:56:2c:5d:4a:d2:6c:0a:fc:
         43:fa:61:34:e3:5a:45:12:fa:eb:d3:92:d5:64:5d:ef:e2:06:
         0d:f0:47:73:a6:9e:69:fd:ca:e6:4b:c6:ca:79:24:86:32:5f:
         c2:b4:da:0b:87:0c:3d:f1:68:7b:95:7b:18:5b:e2:72:19:19:
         19:32:4e:3f:b4:54:b0:5d:34:3b:fa:0f:23:ab:15:a5:20:a9:
         58:30:21:a5:d2:ee:6f:72:6b:f6:88:80:d2:0b:0f:8c:f8:c7:
         13:40:ba:8f:7b:73:f4:af:d9:b2:d4:35:1c:e1:d4:94:28:24:
         d7:73:36:01:35:20:33:1a:be:a0:1f:23:45:91:b1:f5:c1:05:
         9f:35:68:84:d7:66:1f:23:1f:5f:d1:ec:b1:eb:51:19:62:fb:
         46:fd:24:de:49:68:9d:fa:52:1d:bc:41:c4:9a:b7:da:20:dc:
         e4:58:e6:f5:6f:8b:75:33:88:0a:a8:0e:73:b7:62:d0:0b:a0:
         16:fb:58:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:32:39 2024 by rpki-client on console-fra.rpki-client.org