Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
File:                     uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft (raw, json)
Hash identifier:          jh72VR0isD+gsbkXyZynjm/uZ/JLOSk2HbpY4oQebzQ=
Subject key identifier:   71:07:D6:3C:53:9F:2D:8B:65:7B:47:97:F8:9B:41:40:CD:12:AB:33
Authority key identifier: B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
Certificate issuer:       /CN=b81525ae1a5afcef193f5a40177bf27388831078
Certificate serial:       01936934430739D0F8760969C147D3B45E4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
Manifest number:          96
Signing time:             Tue 26 Nov 2024 16:00:52 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:52 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:52 +0000
Files and hashes:         1: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl (hash: IOA/w9udEOXtpMlke4geyVPppEX6lsaqROS3n5kfJUE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:34:43:07:39:d0:f8:76:09:69:c1:47:d3:b4:5e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b81525ae1a5afcef193f5a40177bf27388831078
        Validity
            Not Before: Nov 26 16:00:52 2024 GMT
            Not After : Nov 27 16:00:52 2024 GMT
        Subject: CN=7107d63c539f2d8b657b4797f89b4140cd12ab33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:39:13:11:1c:bb:e6:78:35:fe:d9:e9:20:c5:
                    e0:aa:3e:23:3a:05:32:d4:1d:60:5d:83:6f:d7:e4:
                    4a:dc:f7:89:1b:17:09:20:46:13:0f:e5:ea:b8:7b:
                    b0:2f:d9:46:b1:1d:23:eb:56:9b:d0:2a:67:68:12:
                    f1:fa:b2:a4:19:a0:71:91:14:19:50:34:18:e3:b7:
                    8f:57:14:a7:08:94:8c:5f:2d:76:d3:0a:e7:41:db:
                    2b:c3:f2:d0:3b:92:43:87:c3:5c:77:7f:7a:17:2f:
                    6b:ee:a6:79:46:b2:18:73:1a:7b:e1:78:0e:8c:c7:
                    06:b8:2a:f7:18:d6:96:14:a7:75:a9:90:45:31:bc:
                    79:97:77:78:13:7c:7e:e8:01:0f:3d:22:19:43:b4:
                    56:4c:a8:a4:23:3c:4e:cf:e5:27:45:fb:d0:1e:b5:
                    df:16:fa:89:ba:58:34:0a:15:f5:78:95:7e:a6:59:
                    a0:1b:42:36:3a:d4:7f:2b:b5:37:9b:c8:79:ed:39:
                    b4:d8:6e:ec:70:e2:43:b2:31:6c:13:fd:73:ff:ae:
                    c4:0b:0d:29:5a:75:b6:d0:ab:64:ea:83:76:67:08:
                    03:26:c3:d1:35:3a:27:7d:53:51:05:8e:b8:82:10:
                    d7:38:ef:79:fd:c0:5b:09:a7:3a:d5:7d:db:ba:dc:
                    1a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:07:D6:3C:53:9F:2D:8B:65:7B:47:97:F8:9B:41:40:CD:12:AB:33
            X509v3 Authority Key Identifier:
                keyid:B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b0:a2:ff:ce:fb:0d:b5:5c:fe:29:81:40:5d:8c:b0:aa:08:
         92:99:a7:4f:a7:54:90:9e:89:29:a0:cc:5c:02:dd:a4:bc:5b:
         a0:68:d3:78:0f:b7:23:89:fb:db:15:53:1c:9a:6f:ec:3a:85:
         87:dc:ce:ea:e3:00:10:43:db:4d:49:91:b5:e9:4c:8c:c4:42:
         55:e7:42:fe:2c:75:a7:bb:7e:ab:34:65:24:b2:94:1c:6e:ec:
         aa:d7:63:00:69:71:06:50:57:92:31:23:c3:71:7e:88:ca:a3:
         55:db:c3:04:c6:01:2f:aa:6c:49:bb:48:93:9c:bd:01:74:0b:
         44:fd:2c:de:58:05:cb:85:3d:2e:58:97:29:b4:0c:3a:64:fe:
         08:88:21:2c:21:4d:af:69:9c:3b:ad:7f:36:81:77:60:7e:5b:
         44:6c:e0:f8:48:8e:cf:a0:6b:e9:bc:d8:56:df:b8:9d:80:92:
         b7:04:bb:cd:aa:58:74:36:ce:81:3e:0d:6a:88:cd:a9:9b:21:
         6a:4f:45:ae:6d:60:1d:e1:ad:0e:73:89:3b:d8:1f:40:5e:4d:
         a7:cf:2f:5a:ac:1d:86:a3:c4:67:36:32:19:65:37:d2:b0:05:
         cc:04:eb:e7:2a:7c:85:09:47:d5:8a:35:4d:77:7e:ff:a5:a5:
         a3:32:fc:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNpNEMHOdD4dglpwUfTtF5OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MTUyNWFlMWE1YWZjZWYxOTNmNWE0MDE3N2JmMjczODg4
MzEwNzgwHhcNMjQxMTI2MTYwMDUyWhcNMjQxMTI3MTYwMDUyWjAzMTEwLwYDVQQD
Eyg3MTA3ZDYzYzUzOWYyZDhiNjU3YjQ3OTdmODliNDE0MGNkMTJhYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTkTERy75ng1/tnpIMXgqj4jOgUy
1B1gXYNv1+RK3PeJGxcJIEYTD+XquHuwL9lGsR0j61ab0CpnaBLx+rKkGaBxkRQZ
UDQY47ePVxSnCJSMXy120wrnQdsrw/LQO5JDh8Ncd396Fy9r7qZ5RrIYcxp74XgO
jMcGuCr3GNaWFKd1qZBFMbx5l3d4E3x+6AEPPSIZQ7RWTKikIzxOz+UnRfvQHrXf
FvqJulg0ChX1eJV+plmgG0I2OtR/K7U3m8h57Tm02G7scOJDsjFsE/1z/67ECw0p
WnW20Ktk6oN2ZwgDJsPRNTonfVNRBY64ghDXOO95/cBbCac61X3butwaNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEH1jxTny2LZXtHl/ibQUDNEqszMB8GA1UdIwQY
MBaAFLgVJa4aWvzvGT9aQBd78nOIgxB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJVbHJocGFfTzhaUDFwQUYzdnljNGlERUhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mNzA0YTgtOGQ3Ni00MjJlLWI5NjAt
OWVmODM4NDkwMDQyLzEvdUJVbHJocGFfTzhaUDFwQUYzdnljNGlERUhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mNzA0YTgtOGQ3Ni00MjJlLWI5NjAtOWVmODM4NDkwMDQy
LzEvdUJVbHJocGFfTzhaUDFwQUYzdnljNGlERUhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLCi/877
DbVc/imBQF2MsKoIkpmnT6dUkJ6JKaDMXALdpLxboGjTeA+3I4n72xVTHJpv7DqF
h9zO6uMAEEPbTUmRtelMjMRCVedC/ix1p7t+qzRlJLKUHG7sqtdjAGlxBlBXkjEj
w3F+iMqjVdvDBMYBL6psSbtIk5y9AXQLRP0s3lgFy4U9LliXKbQMOmT+CIghLCFN
r2mcO61/NoF3YH5bRGzg+EiOz6Br6bzYVt+4nYCStwS7zapYdDbOgT4NaojNqZsh
ak9Frm1gHeGtDnOJO9gfQF5Np88vWqwdhqPEZzYyGWU30rAFzATr5yp8hQlH1Yo1
TXd+/6WlozL89g==
-----END CERTIFICATE-----
Generated at Tue Nov 26 22:23:17 2024 by rpki-client on console-ams.rpki-client.org