Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
File:                     ulnZ9a887kQgFLc1lhxzuWkmDhk.mft (raw, json)
Hash identifier:          1b9KPJh0XZPd/XKF950CsCTDMqcjD1iwNmj6JsYjTk8=
Subject key identifier:   33:57:CD:F2:B7:97:FF:44:DB:40:CC:DE:FE:E9:C7:C8:ED:0F:CC:C9
Authority key identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
Certificate issuer:       /CN=ba59d9f5af3cee442014b735961c73b969260e19
Certificate serial:       018F87488DA773BC452920DAA83AAA996A65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 16:00:29 +0000
Manifest this update:     Fri 17 May 2024 16:00:29 +0000
Manifest next update:     Sat 18 May 2024 16:00:29 +0000
Files and hashes:         1: ulnZ9a887kQgFLc1lhxzuWkmDhk.crl (hash: cNLYKWxa6kYvB5D1bKCieRhUpqtBIgMnsaQEpPRMEX8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:8d:a7:73:bc:45:29:20:da:a8:3a:aa:99:6a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba59d9f5af3cee442014b735961c73b969260e19
        Validity
            Not Before: May 17 16:00:29 2024 GMT
            Not After : May 18 16:00:29 2024 GMT
        Subject: CN=3357cdf2b797ff44db40ccdefee9c7c8ed0fccc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:c5:04:9a:fc:5a:1a:d9:f9:84:57:04:fe:
                    01:51:5a:0b:fe:13:aa:72:f3:70:d4:ce:da:b1:74:
                    6b:1a:60:47:ce:30:b4:19:09:37:3a:8a:ae:46:22:
                    0c:f1:cd:1d:f3:4d:eb:11:12:d4:f1:f9:32:d5:b3:
                    c4:6f:bb:4e:6c:51:17:64:98:34:91:f0:e7:c9:5f:
                    2a:f7:32:34:b9:ba:75:51:03:35:30:20:a6:db:9f:
                    d2:40:b2:89:4b:1a:94:ec:78:a7:7e:76:1b:6b:08:
                    a7:8e:5d:e0:fb:02:54:b0:b1:a0:95:db:f3:44:02:
                    cc:29:f2:e4:0f:53:1a:95:c1:cb:ea:b1:8f:5b:05:
                    4c:ac:42:62:0c:39:19:1f:63:2e:11:be:ec:06:ce:
                    5b:db:24:69:66:37:e5:51:ac:93:5f:15:bf:37:8b:
                    bb:b0:ce:b3:07:0b:04:57:39:c4:69:c6:3a:de:ff:
                    df:4f:49:c1:4a:7f:8e:05:98:ab:d6:21:b2:ba:02:
                    f6:4e:58:ec:4a:8a:08:d3:be:f5:d4:16:61:b2:cf:
                    f3:6e:08:b5:61:e2:2a:a1:8c:d5:30:2b:82:a0:17:
                    e2:ff:72:28:e3:f7:64:65:fc:bd:4c:e6:21:8a:ce:
                    77:c2:96:34:43:f1:25:10:08:2f:e5:f9:e5:1f:0c:
                    6a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:57:CD:F2:B7:97:FF:44:DB:40:CC:DE:FE:E9:C7:C8:ED:0F:CC:C9
            X509v3 Authority Key Identifier:
                keyid:BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e0:74:e0:e6:54:4b:08:11:7a:67:f2:41:bc:a2:d9:09:41:
         3f:bf:1d:fd:22:1e:4d:10:c7:9c:de:69:36:10:bb:b8:ba:89:
         48:30:dc:c7:65:af:97:13:2c:68:26:e0:b5:fd:44:4e:35:95:
         61:08:f5:34:46:4d:f5:f5:3c:1d:07:a7:42:27:08:40:97:48:
         ad:b6:b2:13:66:4e:6f:51:3c:20:2c:23:e7:63:0f:08:d8:9b:
         60:7b:3e:ca:48:a8:e4:05:f6:7f:12:5d:7c:21:ec:f6:5b:72:
         be:af:eb:64:63:22:e0:e0:15:f0:31:69:e4:50:54:0f:1a:73:
         6f:70:ae:6f:dd:c3:e0:df:dd:35:aa:df:22:17:27:79:1c:da:
         3a:37:50:95:bc:6c:10:70:2e:63:10:97:e1:c0:e4:ba:2d:b5:
         bb:a8:12:f8:6c:e9:90:56:1c:93:eb:44:18:a8:ea:58:51:ac:
         91:bd:26:ba:47:91:84:50:6c:21:7e:51:ae:5a:23:fd:f3:f0:
         5b:fd:22:2e:cd:f4:2a:dd:ac:e7:98:23:8d:05:43:8b:43:47:
         aa:6f:b3:33:73:f7:3f:bf:94:2c:44:c4:19:db:10:9a:ec:4a:
         98:9d:3c:c8:2e:30:03:a3:c0:eb:7b:f7:3a:16:f4:b0:b6:fa:
         2f:5a:30:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:06:08 2024 by rpki-client on console-fra.rpki-client.org