Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
File:                     UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft (raw, json)
Hash identifier:          ThsTFKGtyaMzl9udnB3FPN4It9puDczJyvcC7uhTqlA=
Subject key identifier:   F9:03:3B:8B:E8:26:BA:39:01:FF:7B:F9:8B:37:82:F0:26:EF:6D:2F
Authority key identifier: 50:8D:6B:B3:0D:A0:E9:BF:F5:B4:BF:A2:46:21:72:C6:B6:DC:1B:C5
Certificate issuer:       /CN=508d6bb30da0e9bff5b4bfa2462172c6b6dc1bc5
Certificate serial:       018F8635CC3DCA038C5E7567BCF061633299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UI1rsw2g6b_1tL-iRiFyxrbcG8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
Manifest number:          0CE0
Signing time:             Fri 17 May 2024 11:00:23 +0000
Manifest this update:     Fri 17 May 2024 11:00:23 +0000
Manifest next update:     Sat 18 May 2024 11:00:23 +0000
Files and hashes:         1: UI1rsw2g6b_1tL-iRiFyxrbcG8U.crl (hash: bz8fBp8pppiOo9klCokpQzEtSM8UlXmQi2qwx08aCgM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UI1rsw2g6b_1tL-iRiFyxrbcG8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:cc:3d:ca:03:8c:5e:75:67:bc:f0:61:63:32:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=508d6bb30da0e9bff5b4bfa2462172c6b6dc1bc5
        Validity
            Not Before: May 17 11:00:23 2024 GMT
            Not After : May 18 11:00:23 2024 GMT
        Subject: CN=f9033b8be826ba3901ff7bf98b3782f026ef6d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:94:9a:ce:a9:e9:b7:00:71:e1:75:36:5a:3c:
                    34:39:71:51:2a:85:64:72:c0:dd:8c:47:9f:f2:88:
                    7c:99:2b:98:2b:c1:83:4e:30:a9:95:e5:c9:42:e1:
                    d0:c6:c6:70:45:f4:3d:4f:6d:bf:d8:d2:8e:4a:0b:
                    3b:a7:56:34:ae:9f:72:6e:89:2c:c2:a9:fb:3e:18:
                    45:bc:29:b9:2c:63:51:e2:34:33:99:05:61:67:65:
                    41:78:ce:66:8e:df:49:e6:ca:29:f4:9d:af:c2:d5:
                    45:d3:06:83:8a:a0:62:53:bb:1a:18:11:92:a0:85:
                    dd:37:fa:a7:79:a6:e3:1e:09:ca:8f:f7:bb:60:34:
                    4f:c2:a1:a7:c0:0f:1d:49:17:b9:9b:c4:b4:96:ed:
                    31:23:27:3d:81:7b:7e:77:fd:e9:2b:11:5e:d9:6c:
                    8a:c4:32:7e:62:37:e8:4c:d9:ce:37:d6:c5:6a:10:
                    0c:6d:67:2f:3e:4e:6d:fd:53:a4:76:64:b8:61:8b:
                    f8:4c:22:26:ed:ba:14:64:bf:db:df:be:d9:39:85:
                    b1:7b:1f:c9:0e:4b:58:19:ca:a5:49:b3:e7:fb:3f:
                    1a:1e:a7:29:d4:43:0e:72:cd:39:4e:24:cd:5f:7c:
                    28:9a:92:d0:35:4c:66:55:2b:e2:6d:9d:70:05:cf:
                    d8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:03:3B:8B:E8:26:BA:39:01:FF:7B:F9:8B:37:82:F0:26:EF:6D:2F
            X509v3 Authority Key Identifier:
                keyid:50:8D:6B:B3:0D:A0:E9:BF:F5:B4:BF:A2:46:21:72:C6:B6:DC:1B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UI1rsw2g6b_1tL-iRiFyxrbcG8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e2:9e:7c:7a:8c:36:64:08:3c:02:ac:af:87:79:b9:e4:6f:
         cc:ef:76:a4:24:2e:90:b7:19:bf:f9:bb:cf:c2:1d:23:d4:85:
         53:13:73:f8:61:d4:0d:b6:85:f5:0a:e9:35:8a:7d:0a:b6:ea:
         f9:9a:cc:c2:71:e4:20:a5:9c:b7:82:f2:b2:53:e4:92:5c:d0:
         d2:4e:c5:e9:33:13:95:af:3b:46:fe:c9:1f:ec:ee:55:f8:a7:
         10:73:98:e3:99:0b:ee:02:e9:a3:c8:c1:e6:22:63:aa:da:7d:
         0f:78:c2:c5:a5:8c:26:82:19:02:5f:44:11:0b:51:fa:60:a1:
         3e:2e:e0:20:3a:50:6c:a0:f6:0d:02:99:4b:ee:fd:a2:3a:e1:
         ce:fe:00:3f:12:cb:94:83:f9:5d:04:0c:0d:9c:d7:98:40:4a:
         55:b9:63:7d:e9:f3:c0:ce:88:aa:f5:74:b4:f5:08:fa:f8:b6:
         0a:ba:e3:54:0f:e2:58:b3:55:dc:e5:70:72:88:41:ea:7e:2c:
         51:96:12:7d:72:58:7a:1b:65:7e:fe:a3:5e:5f:be:41:44:2e:
         69:36:02:e6:bc:3b:cd:ad:bb:32:bd:d6:ed:52:ca:53:52:45:
         b4:8d:bf:cf:63:48:86:25:37:23:97:ba:ac:e2:bf:b4:33:93:
         e2:cd:4f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:23 2024 by rpki-client on console-fra.rpki-client.org