Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
File:                     UQzngdsNx-T59JQUWileTMsSHK4.mft (raw, json)
Hash identifier:          WqBbjKN6iftkL6k/crPt/zPqbfDyRVncBkJ9uFmCrFM=
Subject key identifier:   1E:2C:5B:73:EC:D1:28:C3:66:25:9E:E7:AC:86:E7:F8:1C:1C:FC:F5
Authority key identifier: 51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
Certificate issuer:       /CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Certificate serial:       0191FA47AC4272DBBE68AC2F8305D5EDF41D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
Manifest number:          D9
Signing time:             Mon 16 Sep 2024 10:01:26 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:26 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:26 +0000
Files and hashes:         1: UQzngdsNx-T59JQUWileTMsSHK4.crl (hash: 59wEzrthRw0OmxurUmrIJxSI8QxLV9Wrm4TR1tVk0lk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:ac:42:72:db:be:68:ac:2f:83:05:d5:ed:f4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
        Validity
            Not Before: Sep 16 10:01:26 2024 GMT
            Not After : Sep 17 10:01:26 2024 GMT
        Subject: CN=1e2c5b73ecd128c366259ee7ac86e7f81c1cfcf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:71:2c:4d:2b:d1:52:a8:85:e6:58:3b:52:
                    54:20:ca:08:4f:0f:eb:79:05:2d:5e:20:56:0d:ab:
                    ee:a7:ed:b4:31:77:7e:ef:d1:df:d5:b2:4e:93:12:
                    a8:f3:eb:c4:31:4d:61:51:81:f9:ad:a6:54:f1:64:
                    dd:0d:3a:a4:ad:5e:8a:fc:0d:cd:0d:d3:68:87:7b:
                    a0:d2:9a:10:a8:a2:92:73:73:38:c8:07:8e:33:33:
                    75:77:b3:6d:c4:16:4b:59:86:2f:50:13:c0:a5:bb:
                    1a:e8:df:7e:20:9b:aa:2b:63:ee:b3:2a:c9:d5:53:
                    70:4f:2f:53:b7:8e:e9:9c:0f:ee:6f:28:a5:a6:04:
                    13:a2:a8:34:c6:80:cb:88:a9:80:3b:9c:fe:4a:4d:
                    eb:67:30:8c:c8:8b:93:01:e6:ae:3b:0c:09:8a:08:
                    9e:4b:12:20:a2:92:e5:98:95:8b:fd:6a:ec:61:c5:
                    59:01:0e:de:3b:d4:82:f5:7b:5c:25:a2:7e:12:d7:
                    74:dd:c2:e1:40:25:71:c8:4c:8a:53:f0:bc:66:9f:
                    2b:0a:97:46:dd:6d:2b:58:0e:c1:c5:c6:02:6b:65:
                    bf:d0:7c:17:58:35:44:c4:ee:86:a1:88:45:b1:d7:
                    f6:2c:97:15:e9:45:0a:6d:ab:44:6c:c7:2e:49:9c:
                    67:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2C:5B:73:EC:D1:28:C3:66:25:9E:E7:AC:86:E7:F8:1C:1C:FC:F5
            X509v3 Authority Key Identifier:
                keyid:51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2e:5d:98:1b:d4:5d:e6:79:10:85:b6:ca:8e:50:c6:c5:dd:
         9f:1e:58:43:ba:52:76:99:91:e8:89:5f:eb:c4:ca:ab:23:98:
         b1:2e:d9:ce:d0:13:0e:39:1f:a9:62:af:00:2a:21:4d:de:92:
         46:78:4e:32:c8:6e:76:aa:93:4b:b3:15:ae:36:02:04:38:c0:
         c1:9e:ee:48:b6:b4:5e:1c:aa:c1:16:97:87:b9:8a:13:34:cb:
         8b:70:46:21:de:30:bd:58:2f:1d:4a:19:27:e9:9d:c7:d9:68:
         37:f4:d8:01:29:77:f2:a7:ac:9b:75:00:6a:79:d6:1d:aa:b7:
         99:2e:3a:e2:18:a0:a1:d3:8b:a1:81:6b:6e:d6:1d:9a:0a:62:
         48:d4:08:94:55:c5:6c:74:f1:fc:77:5b:b7:96:10:fa:47:e1:
         8b:e7:fc:3b:af:91:91:8f:88:45:b3:c1:6f:77:98:b2:d1:ce:
         93:13:ab:e9:43:5d:50:54:8d:47:21:d8:37:5b:4a:91:db:77:
         42:02:2b:0e:09:72:55:df:63:eb:2a:25:0d:5d:75:ef:c3:96:
         39:e7:f0:1a:c8:52:72:20:4a:b9:bd:56:a0:21:a4:58:2e:c2:
         aa:85:f6:63:e3:cf:ed:d5:9d:43:cb:ba:20:e7:8b:cf:d4:85:
         15:7e:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----