Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
File:                     uq_lp700ifDcc4TIjZWJVDfPxMQ.mft (raw, json)
Hash identifier:          IaKjQA3xawGiLw0npMLv1wDKp67bu5fpIh4ar7mk6P8=
Subject key identifier:   82:B0:2F:19:A1:F3:16:F2:6F:EB:48:D2:76:2E:5E:6A:88:D6:D5:22
Authority key identifier: BA:AF:E5:A7:BD:34:89:F0:DC:73:84:C8:8D:95:89:54:37:CF:C4:C4
Certificate issuer:       /CN=baafe5a7bd3489f0dc7384c88d95895437cfc4c4
Certificate serial:       01974C69EA1D7D0A28869C42595D5F1F7A7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
Manifest number:          098A
Signing time:             Sat 07 Jun 2025 22:01:38 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:38 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:38 +0000
Files and hashes:         1: uq_lp700ifDcc4TIjZWJVDfPxMQ.crl (hash: JIine0PM9fisqv4t9SlurrEiLQLTeJtBY6ZBEDQmq/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:ea:1d:7d:0a:28:86:9c:42:59:5d:5f:1f:7a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baafe5a7bd3489f0dc7384c88d95895437cfc4c4
        Validity
            Not Before: Jun  7 22:01:38 2025 GMT
            Not After : Jun  8 22:01:38 2025 GMT
        Subject: CN=82b02f19a1f316f26feb48d2762e5e6a88d6d522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1a:0a:f0:18:b6:f1:c9:27:ef:da:c9:9b:09:
                    b0:42:fe:c1:e2:43:b8:6b:42:c2:8a:ac:45:33:3d:
                    43:9d:e7:f4:c0:20:ff:80:4a:62:05:44:ca:57:01:
                    df:75:ec:10:ad:0f:3a:3c:5c:48:9c:42:9a:a2:e5:
                    6c:05:38:06:14:6e:7b:2c:38:ff:7d:42:26:fb:20:
                    99:d1:1c:35:d0:a7:81:76:db:46:ac:b4:ae:72:e3:
                    bf:8e:4b:5e:a6:6c:d2:a1:4f:d9:2a:85:c0:1b:6a:
                    fa:6e:ca:e4:cc:19:33:dc:1e:8e:89:59:07:10:3b:
                    43:da:73:84:e4:53:11:65:9a:6d:54:c2:1f:48:c4:
                    57:1a:96:93:2a:5b:fb:9d:8b:df:81:ac:26:88:1e:
                    1f:ad:f0:c9:5e:e0:5a:91:ae:96:20:84:5f:16:60:
                    9b:00:46:73:b9:90:9c:45:d2:ec:ae:e5:5c:70:67:
                    21:a6:aa:40:af:1a:f3:08:79:ac:2d:b9:e2:25:e2:
                    ec:dc:a0:22:58:03:95:90:6b:30:3e:19:e7:80:ac:
                    7e:18:77:74:a7:cd:38:dc:9f:7e:ed:ca:6a:fb:06:
                    67:7b:4f:c3:fe:28:5c:0d:56:43:54:72:8d:03:d1:
                    32:b0:b3:9b:45:d0:39:e0:28:22:90:8b:2f:9b:7a:
                    8e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B0:2F:19:A1:F3:16:F2:6F:EB:48:D2:76:2E:5E:6A:88:D6:D5:22
            X509v3 Authority Key Identifier:
                keyid:BA:AF:E5:A7:BD:34:89:F0:DC:73:84:C8:8D:95:89:54:37:CF:C4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e7:79:0a:e4:28:6e:ba:d8:a2:c6:fc:8b:38:b1:90:3b:dd:
         af:88:77:38:4f:7d:51:1d:87:d5:c4:be:45:f4:dc:af:23:2f:
         1a:10:be:c2:d1:13:b1:ad:44:9f:3e:32:cc:04:5f:f4:82:42:
         c7:0b:64:50:a6:af:63:24:5b:7f:c5:52:83:81:26:5a:d5:0a:
         8b:50:82:e9:ff:d9:eb:f4:56:01:78:00:15:1c:0f:df:10:02:
         c5:17:53:64:05:b4:97:50:d5:56:33:7a:69:ca:5c:97:34:58:
         af:e8:8e:35:13:8a:e5:ad:0b:d5:b2:a8:50:17:3a:a2:04:96:
         c9:ef:1c:21:7b:2b:ff:c9:8f:a9:b0:13:54:3b:c8:ce:f9:19:
         39:10:c2:a9:b1:f9:03:01:dd:6a:94:83:61:fc:8a:0d:06:3d:
         33:5b:41:36:43:47:67:a5:f7:dd:f4:5f:77:4f:66:66:3b:42:
         c3:13:ae:11:07:de:3f:ad:a3:35:d7:6f:1c:6c:aa:a7:24:63:
         1c:fa:2c:f5:58:a0:b3:6f:aa:37:d6:43:17:6a:6b:94:06:78:
         0a:47:8e:69:a1:b7:6d:7e:3e:6a:b0:e9:73:6a:2a:7e:a7:4a:
         0a:39:76:da:d8:43:e7:a4:33:b7:1d:f3:77:91:f0:79:13:29:
         3c:23:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:12:02 2025 by rpki-client