Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
File:                     UJVwBFEY_ttvz2G1lCDIc7cVh78.mft (raw, json)
Hash identifier:          G2AYEyxoSXnvB3tp0EH4IyImAcGoBijILQLLEx0OQz8=
Subject key identifier:   EE:7C:54:F8:16:5A:F2:A4:ED:8E:6D:C9:3C:CF:6E:F9:5B:27:B3:5E
Authority key identifier: 50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF
Certificate issuer:       /CN=509570045118fedb6fcf61b59420c873b71587bf
Certificate serial:       0194C42C36EA4B3CA1C607870B80F9A45161
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
Manifest number:          142B
Signing time:             Sun 02 Feb 2025 01:00:19 +0000
Manifest this update:     Sun 02 Feb 2025 01:00:19 +0000
Manifest next update:     Mon 03 Feb 2025 01:00:19 +0000
Files and hashes:         1: UJVwBFEY_ttvz2G1lCDIc7cVh78.crl (hash: 6RLwsjEASqWLjHeSlaVhaNQV4ZFDfdxBWBSJTkGWOjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:2c:36:ea:4b:3c:a1:c6:07:87:0b:80:f9:a4:51:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509570045118fedb6fcf61b59420c873b71587bf
        Validity
            Not Before: Feb  2 01:00:19 2025 GMT
            Not After : Feb  3 01:00:19 2025 GMT
        Subject: CN=ee7c54f8165af2a4ed8e6dc93ccf6ef95b27b35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:a5:71:dc:d8:25:db:ec:ec:fc:20:9d:a8:
                    d6:7f:7a:87:f9:c7:fc:f1:84:bf:ea:6a:68:a1:bd:
                    f2:02:a6:d3:77:cc:35:76:04:aa:bd:50:dd:c5:b7:
                    e4:e0:41:8f:b6:83:60:68:d1:ca:e9:d1:b8:f1:13:
                    3c:04:fd:87:24:fd:da:c0:8f:e4:39:33:56:e4:61:
                    a7:b4:32:ee:a6:29:2b:22:0b:4e:ef:2d:7a:38:54:
                    89:f9:1f:5d:b5:6f:58:c6:7d:14:df:ce:fb:31:f9:
                    8a:4b:cc:6c:dd:96:6e:fe:cc:19:27:e2:a2:93:a9:
                    3f:8f:48:e8:4b:6d:e1:d3:1f:74:da:67:17:cc:e1:
                    6c:f1:89:2b:d9:98:b6:88:db:c6:88:a7:5d:02:db:
                    be:91:91:71:60:54:42:d9:9b:20:a4:5f:b2:07:66:
                    ec:69:20:f0:66:ee:b4:bf:7e:fe:21:a0:79:6a:c0:
                    33:d8:8c:40:2d:b9:97:5d:fd:2f:29:58:2c:de:3e:
                    cd:8b:d1:7f:5d:61:a0:6c:22:43:bb:ab:9f:62:c0:
                    4a:94:ea:34:db:c2:0b:e3:72:4d:b2:28:6b:71:65:
                    fd:a3:4f:56:16:13:e5:b0:71:a3:c7:61:35:c9:bf:
                    f6:95:54:34:eb:ff:8d:df:ed:1e:55:fd:2a:f0:d0:
                    9c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7C:54:F8:16:5A:F2:A4:ED:8E:6D:C9:3C:CF:6E:F9:5B:27:B3:5E
            X509v3 Authority Key Identifier:
                keyid:50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e4:88:76:02:da:f9:89:82:cd:10:e5:20:b2:7d:f4:e0:3f:
         9f:f9:f8:32:c1:5e:4e:1d:67:3c:8c:40:c9:60:22:6e:3f:3b:
         fe:a5:c4:79:80:32:f9:22:e5:c2:2e:6b:73:44:7d:87:9d:21:
         b4:80:06:93:17:88:45:ca:43:4b:4e:e7:56:2c:c8:8a:6d:dd:
         ae:d0:df:8a:a9:73:09:07:8d:76:8d:7f:c9:0b:18:eb:f9:4b:
         36:37:3c:1d:55:a7:3b:12:7f:35:0e:a3:66:fa:b6:8a:1b:97:
         47:fc:ba:f7:37:f8:73:34:44:51:0a:7f:c0:8a:cc:e7:b1:1f:
         10:f4:c2:09:4d:6b:7b:6d:38:e6:71:4e:54:c3:94:4a:ee:1e:
         32:05:95:d1:1c:03:a7:ed:cb:9f:cc:bb:a2:cf:5a:be:08:c9:
         fb:05:17:ae:7c:14:28:f7:ae:3d:d6:ae:81:2e:71:c4:6e:18:
         b4:16:8b:5f:3b:14:27:27:1f:0a:98:6a:39:f1:83:d1:17:5a:
         23:6f:ec:a2:f9:08:e8:83:5c:20:e6:1a:06:ca:32:a1:27:4e:
         41:c6:7d:2a:d9:91:6c:13:6e:2f:e2:ff:a8:b2:6e:ff:9b:96:
         71:64:5a:74:21:73:87:d8:4d:41:d8:0f:bb:d4:c8:5f:88:59:
         0a:15:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:38 2025 by rpki-client