Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
File:                     UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft (raw, json)
Hash identifier:          AUaK1PFtPjQiJv171dcGlidDrv8WanO/fhPfNw9/GBU=
Subject key identifier:   99:B5:D3:F3:D8:2F:B2:4B:E5:D1:0B:24:51:58:EE:2D:3E:C0:D2:95
Authority key identifier: 50:8D:6B:B3:0D:A0:E9:BF:F5:B4:BF:A2:46:21:72:C6:B6:DC:1B:C5
Certificate issuer:       /CN=508d6bb30da0e9bff5b4bfa2462172c6b6dc1bc5
Certificate serial:       01936AB4E10FF8FE7EADB2E7E4BF9D751F2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UI1rsw2g6b_1tL-iRiFyxrbcG8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
Manifest number:          0EE4
Signing time:             Tue 26 Nov 2024 23:00:59 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:59 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:59 +0000
Files and hashes:         1: UI1rsw2g6b_1tL-iRiFyxrbcG8U.crl (hash: 3uNCKQxYzyMPZdL2Zdqm77t7r54zw+XnGB1CBpodbIc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UI1rsw2g6b_1tL-iRiFyxrbcG8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:e1:0f:f8:fe:7e:ad:b2:e7:e4:bf:9d:75:1f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=508d6bb30da0e9bff5b4bfa2462172c6b6dc1bc5
        Validity
            Not Before: Nov 26 23:00:59 2024 GMT
            Not After : Nov 27 23:00:59 2024 GMT
        Subject: CN=99b5d3f3d82fb24be5d10b245158ee2d3ec0d295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:75:ad:74:95:cb:23:32:13:91:b6:83:ab:f4:
                    59:22:84:01:3b:f8:34:35:9d:3c:87:3a:b0:e0:4d:
                    c1:da:bb:10:20:31:26:86:2d:96:91:3d:ac:f1:1f:
                    8f:4b:d6:8e:65:f3:85:82:75:d4:33:64:11:68:24:
                    26:2b:30:ba:65:6d:1c:58:59:a6:32:12:01:9e:1c:
                    84:c0:81:5e:61:ed:9b:63:cf:70:25:1a:69:d6:03:
                    46:fa:65:45:dc:d5:54:6d:ef:49:23:07:16:ba:24:
                    9e:7c:98:4a:aa:92:22:cb:df:6a:75:68:e1:99:04:
                    ab:3f:e4:b3:51:f9:5b:c0:3b:bf:8a:76:c8:f6:ab:
                    d6:5e:61:5b:9c:f6:01:10:01:52:65:f7:fd:cb:fd:
                    20:dd:62:c8:d3:1d:ae:fc:16:7b:34:c2:93:c4:77:
                    fd:30:63:6e:a5:01:14:28:ee:1b:25:0f:90:2c:3a:
                    ac:c6:d3:ec:75:ee:41:a4:95:eb:2b:3b:a2:f6:35:
                    fa:9e:28:ef:07:b3:4e:7d:12:29:4e:f3:9f:93:ea:
                    30:6d:79:66:16:4a:93:78:9d:a5:61:06:65:d1:a9:
                    1b:67:7d:bb:6b:d6:37:50:8f:97:93:69:4b:a8:db:
                    2b:80:40:53:0c:cf:54:c0:14:73:aa:22:6e:a9:93:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B5:D3:F3:D8:2F:B2:4B:E5:D1:0B:24:51:58:EE:2D:3E:C0:D2:95
            X509v3 Authority Key Identifier:
                keyid:50:8D:6B:B3:0D:A0:E9:BF:F5:B4:BF:A2:46:21:72:C6:B6:DC:1B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UI1rsw2g6b_1tL-iRiFyxrbcG8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b7:85:db:92:18:3d:95:c3:bf:df:b5:87:94:18:9b:dd:7f:
         43:af:e7:83:63:04:e7:cf:e5:de:46:60:71:19:9b:1c:d9:fe:
         fd:4b:53:2e:77:b1:e5:91:45:e2:1b:24:c3:67:39:35:39:e0:
         98:76:f1:7c:47:f1:fb:cd:dd:52:e7:fb:0b:c6:c2:e8:d0:a2:
         fd:e4:22:8d:e8:5a:e2:f9:e8:ce:12:fc:23:8e:53:56:fd:d9:
         2c:3a:4d:c5:10:fb:79:54:36:a3:17:61:ff:6f:aa:1b:fb:d3:
         18:d8:0d:6a:22:5d:1e:d8:44:e0:61:cb:e7:35:2f:9d:a0:5f:
         1d:fd:91:02:33:3e:07:ef:47:27:75:be:cf:5e:40:1b:b5:dd:
         1c:15:28:4b:cb:59:4d:9b:cd:4a:cf:25:ab:25:7d:fb:73:4a:
         39:75:1b:10:01:78:b0:7c:06:f7:17:84:88:b8:38:5f:da:30:
         7c:20:16:15:4d:e8:e0:b8:81:db:05:9e:e3:35:08:94:c8:a2:
         9e:20:61:92:84:48:b8:f2:52:b3:79:93:ef:ea:50:2a:4b:06:
         58:6a:56:b0:2a:12:9d:13:95:7c:4d:db:a4:3a:e4:c9:77:0d:
         c2:5a:7d:86:1b:99:5c:d0:90:b6:da:fd:e1:02:5b:94:0d:c6:
         6f:71:6b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----