Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File:                     ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier:          NGZCXFZW3mBaI6EXkvJoRR0ctfg8OVPneEBRFXiZEtY=
Subject key identifier:   B0:0A:FE:AD:30:C5:B3:D2:70:15:04:79:14:AB:EA:8B:0E:D3:52:DC
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer:       /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial:       018F87B674D85BB578D2E092A2D2A96DBCE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number:          0EF1
Signing time:             Fri 17 May 2024 18:00:32 +0000
Manifest this update:     Fri 17 May 2024 18:00:32 +0000
Manifest next update:     Sat 18 May 2024 18:00:32 +0000
Files and hashes:         1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: R8i0x+k5nYWJ4T089Fy16WhOECsVsT9EVgIhrVWaKq8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:74:d8:5b:b5:78:d2:e0:92:a2:d2:a9:6d:bc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
        Validity
            Not Before: May 17 18:00:32 2024 GMT
            Not After : May 18 18:00:32 2024 GMT
        Subject: CN=b00afead30c5b3d27015047914abea8b0ed352dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7a:c2:f8:2f:aa:3b:bb:6c:1b:c5:65:40:3e:
                    fa:21:f9:e7:e4:8c:25:d9:35:0a:13:82:ca:0b:06:
                    d3:0d:90:a6:ca:dc:dd:03:6f:a8:fe:b2:38:49:c6:
                    36:2e:92:10:31:b0:02:5f:7d:b5:c9:99:9f:af:bd:
                    e6:7c:10:00:24:d9:1a:3a:d7:83:1a:7c:24:6e:67:
                    2b:6c:62:af:ce:60:1f:de:93:93:e4:a8:ba:80:9e:
                    9c:69:84:cb:ed:5d:0a:1f:50:8e:34:63:e0:04:0d:
                    b1:2a:7a:b2:d3:91:bc:85:44:74:1f:fa:00:0e:19:
                    62:1b:e6:c2:47:d2:83:27:34:99:ad:2c:98:b1:b7:
                    1e:56:08:c9:21:55:e1:c4:ce:ce:76:ff:18:db:41:
                    a3:fe:60:df:90:da:d7:d9:e2:6c:1f:83:b2:bd:0a:
                    21:71:1b:b2:60:93:a9:25:3b:5b:1b:40:d1:9b:f5:
                    ed:87:58:17:37:dd:5a:a8:58:5d:47:72:85:53:f5:
                    66:45:37:9f:31:4f:f3:af:48:dc:8e:04:ad:8f:43:
                    72:b9:32:eb:cc:bc:2e:5c:d2:d2:bc:71:ef:81:30:
                    fd:cd:f9:63:d7:90:98:d8:7b:32:e9:96:6c:45:f4:
                    a5:3e:e6:80:66:e9:f8:e6:28:a0:ed:2b:0e:2d:a4:
                    41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0A:FE:AD:30:C5:B3:D2:70:15:04:79:14:AB:EA:8B:0E:D3:52:DC
            X509v3 Authority Key Identifier:
                keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:63:f5:21:02:90:55:01:d3:10:d6:dd:d3:db:7a:ed:f2:b9:
         e5:83:a9:de:3b:8e:cd:d6:c0:c1:8b:66:c2:0e:dc:51:8f:e7:
         08:c6:a5:90:db:67:c7:39:4b:0c:3c:16:ec:c7:8c:5b:f8:0f:
         96:c0:ce:5e:3d:57:49:48:00:13:50:d5:77:83:9d:9a:5a:e4:
         10:f3:34:aa:e6:dc:f8:94:82:19:2e:de:34:7b:20:dc:e1:6c:
         92:5e:95:00:1a:de:1e:9d:cb:bf:8b:f0:fd:6a:b8:11:da:1c:
         40:85:23:37:9c:f8:4c:3b:a8:96:2d:59:44:ff:88:54:d0:65:
         ad:16:ac:13:a1:7f:5b:3b:b2:7a:3c:05:ff:dd:a5:84:b8:57:
         29:5d:5b:b2:35:d9:88:66:1d:9d:a2:82:47:71:97:c7:62:5c:
         be:36:25:86:f3:6e:54:5c:38:ae:9d:39:a8:9d:8e:f3:1d:0a:
         52:1f:f6:d7:03:e9:81:73:ee:61:87:b9:58:b1:85:c2:9c:14:
         50:d0:2f:99:d9:0d:0a:3b:3a:08:33:41:d2:52:20:38:87:18:
         c3:ff:b7:53:d7:b8:a6:82:78:b6:3d:65:cd:48:f8:1d:ed:6a:
         a7:25:cd:a0:76:e2:e7:8e:b9:b8:67:20:46:64:5e:aa:21:f2:
         e3:87:55:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:43 2024 by rpki-client on console-ams.rpki-client.org