Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
File:                     UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft (raw, json)
Hash identifier:          wLRsWcnSBfYo954hx0YPKteWx9dhter64Q4W7wwyzRg=
Subject key identifier:   1D:F1:ED:DF:24:C4:52:EF:A6:72:23:15:90:7F:B1:90:34:37:32:AB
Authority key identifier: 52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16
Certificate issuer:       /CN=52b8d3d330bd6620bb17d487e4055d95b274af16
Certificate serial:       018F8749D5E53E244CE06FE17621D3A48A7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
Manifest number:          0B5E
Signing time:             Fri 17 May 2024 16:01:54 +0000
Manifest this update:     Fri 17 May 2024 16:01:54 +0000
Manifest next update:     Sat 18 May 2024 16:01:54 +0000
Files and hashes:         1: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl (hash: uQrf67YwQ2W5wK36wivPwHU8bnU1OSH/b/KyyzLz1ys=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:d5:e5:3e:24:4c:e0:6f:e1:76:21:d3:a4:8a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52b8d3d330bd6620bb17d487e4055d95b274af16
        Validity
            Not Before: May 17 16:01:54 2024 GMT
            Not After : May 18 16:01:54 2024 GMT
        Subject: CN=1df1eddf24c452efa6722315907fb190343732ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:7e:03:cf:16:51:a0:bd:0f:94:e4:e7:4e:
                    30:1f:67:3a:10:4e:89:ce:73:66:10:e7:c6:88:e5:
                    b3:a8:c0:57:42:9b:28:70:ae:b8:e2:a5:12:a6:57:
                    e4:2f:bc:f8:b9:5c:3f:cb:df:a4:b1:8e:1e:d8:93:
                    44:08:18:18:d1:0e:7c:cc:c2:05:b1:4b:14:15:b1:
                    04:e8:7e:20:c8:21:e4:5f:5d:73:31:99:09:e4:a5:
                    2c:44:cd:f6:18:21:f9:33:e5:5f:bc:13:4e:88:d7:
                    72:e0:63:1d:70:a4:0b:95:9c:2f:49:e8:c7:bd:41:
                    33:2d:b1:ea:36:51:3c:48:0a:3b:b7:83:7f:99:8e:
                    f5:9f:dc:70:9a:33:5a:57:ce:e7:54:56:7f:4d:72:
                    76:1c:05:93:bc:42:64:a1:10:04:0b:fa:62:c2:18:
                    af:ca:20:63:98:eb:7a:6c:d8:94:ef:37:1f:15:9f:
                    99:23:37:db:e9:2b:43:ee:a6:3b:00:75:0c:92:06:
                    8d:e6:c8:57:76:02:a9:c3:57:5c:4b:11:ae:66:91:
                    46:a5:86:56:7c:07:28:b2:f1:d1:60:a4:16:52:65:
                    78:69:28:9c:68:93:92:53:99:a2:15:b5:5d:de:4d:
                    25:89:8b:6b:99:95:92:10:ca:46:86:25:ef:a6:0f:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F1:ED:DF:24:C4:52:EF:A6:72:23:15:90:7F:B1:90:34:37:32:AB
            X509v3 Authority Key Identifier:
                keyid:52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:56:f6:4f:ca:c7:3c:34:b7:2c:f9:18:25:f2:e1:6c:17:d9:
         8d:bb:1e:cc:d8:b4:55:74:c6:cb:bf:3a:2a:71:53:aa:b4:38:
         47:1b:1e:66:73:7d:33:88:66:27:7a:83:8f:87:91:68:e3:da:
         8a:9c:da:7f:79:c4:8f:04:cb:7f:fb:f3:d7:a3:6a:a4:fa:50:
         72:66:00:17:dc:84:3b:f7:35:33:a9:fc:c8:26:95:5b:a5:d0:
         70:23:03:ab:a8:f6:31:e8:dc:38:4b:d9:31:0e:7e:75:95:05:
         0a:5e:92:a6:21:ec:28:d6:11:c8:26:a5:75:f6:0f:e5:4d:5a:
         f6:f5:08:fb:2c:2a:95:15:ae:f5:79:68:ba:a1:2b:df:9b:f7:
         d8:70:9b:30:d4:04:67:5c:05:ef:dc:2e:ce:8b:04:b5:d3:f0:
         25:6b:42:a3:2f:d6:93:b6:0b:7a:d9:ff:2e:99:3e:aa:a4:ea:
         4c:a9:84:bb:a2:fb:f3:f3:d4:ad:87:3a:39:23:d2:ab:ea:9b:
         b5:67:10:72:6c:4a:10:3d:d1:5b:c3:14:ea:e6:ad:46:bb:0f:
         02:6e:70:81:22:e1:26:3e:10:2e:58:07:2a:eb:b1:e8:57:89:
         de:2f:aa:5e:3a:dd:74:04:66:64:93:34:ce:61:7f:c1:35:a3:
         d1:18:05:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSdXlPiRM4G/hdiHTpIp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYjhkM2QzMzBiZDY2MjBiYjE3ZDQ4N2U0MDU1ZDk1YjI3
NGFmMTYwHhcNMjQwNTE3MTYwMTU0WhcNMjQwNTE4MTYwMTU0WjAzMTEwLwYDVQQD
EygxZGYxZWRkZjI0YzQ1MmVmYTY3MjIzMTU5MDdmYjE5MDM0MzczMmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxJ+A88WUaC9D5Tk504wH2c6EE6J
znNmEOfGiOWzqMBXQpsocK644qUSplfkL7z4uVw/y9+ksY4e2JNECBgY0Q58zMIF
sUsUFbEE6H4gyCHkX11zMZkJ5KUsRM32GCH5M+VfvBNOiNdy4GMdcKQLlZwvSejH
vUEzLbHqNlE8SAo7t4N/mY71n9xwmjNaV87nVFZ/TXJ2HAWTvEJkoRAEC/piwhiv
yiBjmOt6bNiU7zcfFZ+ZIzfb6StD7qY7AHUMkgaN5shXdgKpw1dcSxGuZpFGpYZW
fAcosvHRYKQWUmV4aSicaJOSU5miFbVd3k0liYtrmZWSEMpGhiXvpg9ubwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3x7d8kxFLvpnIjFZB/sZA0NzKrMB8GA1UdIwQY
MBaAFFK409MwvWYguxfUh+QFXZWydK8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXJqVDB6QzlaaUM3RjlTSDVBVmRsYkowcnhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80Y2E4ZmEtNmMxNS00YjQ3LWFiOTMt
YmJiZWI2MDkwNTIxLzEvVXJqVDB6QzlaaUM3RjlTSDVBVmRsYkowcnhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80Y2E4ZmEtNmMxNS00YjQ3LWFiOTMtYmJiZWI2MDkwNTIx
LzEvVXJqVDB6QzlaaUM3RjlTSDVBVmRsYkowcnhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFb2T8rH
PDS3LPkYJfLhbBfZjbsezNi0VXTGy786KnFTqrQ4RxseZnN9M4hmJ3qDj4eRaOPa
ipzaf3nEjwTLf/vz16NqpPpQcmYAF9yEO/c1M6n8yCaVW6XQcCMDq6j2MejcOEvZ
MQ5+dZUFCl6SpiHsKNYRyCaldfYP5U1a9vUI+ywqlRWu9XlouqEr35v32HCbMNQE
Z1wF79wuzosEtdPwJWtCoy/Wk7YLetn/Lpk+qqTqTKmEu6L78/PUrYc6OSPSq+qb
tWcQcmxKED3RW8MU6uatRrsPAm5wgSLhJj4QLlgHKuux6FeJ3i+qXjrddARmZJM0
zmF/wTWj0RgFUA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:14:09 2024 by rpki-client on console-ams.rpki-client.org