Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
File:                     uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json)
Hash identifier:          MA7gsuFZui6ZrGCR5BhK0QF1Ex/IYMlOb/wUsXnBYZ8=
Subject key identifier:   B9:F4:BF:A4:8E:3D:64:71:4F:14:3A:9F:40:3B:0C:19:A9:B1:B0:5D
Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
Certificate issuer:       /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Certificate serial:       019357D2385AD253A89731B7B1E720DFFF20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
Manifest number:          1259
Signing time:             Sat 23 Nov 2024 07:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:14 +0000
Files and hashes:         1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: iYQW2xXGUT3GoPS0DKwOSbbJzKnQaf8qLoQ1tC3Crno=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:38:5a:d2:53:a8:97:31:b7:b1:e7:20:df:ff:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
        Validity
            Not Before: Nov 23 07:00:14 2024 GMT
            Not After : Nov 24 07:00:14 2024 GMT
        Subject: CN=b9f4bfa48e3d64714f143a9f403b0c19a9b1b05d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:58:cc:af:d2:46:0c:2f:c5:da:c2:b5:b0:04:
                    84:5b:1c:4c:99:c8:c8:1f:14:28:4f:be:59:11:99:
                    27:0d:2e:34:93:6f:2b:f0:02:b4:44:1a:60:d9:a6:
                    50:91:40:3a:2f:74:17:7e:3d:8d:6f:21:68:c0:07:
                    56:48:fb:7f:e6:28:41:77:d1:2b:26:ea:93:cd:0c:
                    8f:d9:d2:08:a4:05:9a:00:47:ba:e9:24:b5:75:a9:
                    e4:73:46:81:96:ec:f4:6c:b4:48:36:83:07:81:a6:
                    63:8b:84:8a:6d:e0:45:58:54:23:c2:f7:24:80:0c:
                    80:32:13:e7:bd:ce:7b:62:ec:3b:41:cd:55:b8:9b:
                    5e:bd:be:50:1d:20:b6:99:5e:d7:fc:e0:08:2f:62:
                    5d:ea:e3:0b:89:1a:f2:5a:08:60:3b:9d:94:16:32:
                    76:e6:f5:5e:05:7d:e3:69:06:d8:01:a3:67:8d:dd:
                    3b:67:21:04:66:14:aa:f8:3a:b1:63:5a:52:97:ad:
                    93:97:db:e5:04:75:fa:95:69:78:c3:33:9b:c0:6b:
                    a5:71:14:d1:dc:0f:3d:b8:2b:ff:a8:d9:da:7b:25:
                    76:c5:4b:55:94:6a:15:67:be:b7:23:37:59:7a:4c:
                    e1:b9:8b:bd:cf:66:e3:81:fa:89:ab:df:27:e4:9d:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F4:BF:A4:8E:3D:64:71:4F:14:3A:9F:40:3B:0C:19:A9:B1:B0:5D
            X509v3 Authority Key Identifier:
                keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:7d:2e:f8:1f:ea:5f:79:2e:1b:18:3d:c4:1f:5e:0f:43:05:
         76:e7:0f:13:8f:47:30:b7:9c:e9:de:85:53:1c:6c:10:fc:dc:
         21:32:26:aa:b2:e1:f2:55:06:9e:af:0d:81:dc:ef:8e:8b:58:
         be:94:8c:32:52:46:43:92:7b:1e:b5:80:6c:f9:a8:05:fa:e2:
         43:9f:3c:ee:08:f5:76:d4:67:2b:a4:a0:82:4a:3f:51:42:b2:
         06:24:65:59:de:ef:64:15:e4:d0:fe:04:03:4f:fc:57:b1:d5:
         99:c1:21:01:0e:bf:f1:bc:48:bd:7b:9a:71:0a:a1:93:02:91:
         d7:ad:01:ce:cf:b7:a3:4e:19:b3:0c:63:23:a7:11:e5:be:f0:
         7e:b5:40:8e:1e:6f:84:8c:b2:4c:c5:4e:00:d0:f2:0d:4b:82:
         f8:f7:91:2e:cd:ae:00:4c:4f:8d:cf:cf:f6:b6:f3:29:48:f4:
         fa:37:84:05:43:27:01:6c:56:af:b6:ad:61:c3:dc:af:a8:e1:
         64:eb:34:ab:ff:fa:af:bd:52:c2:be:d9:98:b3:38:92:91:ff:
         92:c3:f4:13:f6:87:0f:ae:09:ae:6c:94:56:f8:0d:b5:e9:bf:
         c9:01:6d:45:ff:44:e3:f4:d6:b5:15:12:d2:a2:6f:08:64:9a:
         24:31:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:12:19 2024 by rpki-client on console-ams.rpki-client.org