Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
File:                     U-r4Oizdyf0L4onM-vMrMjMEz04.mft (raw, json)
Hash identifier:          b/zuKXK0LVdUGr1PSSeNAXr4ZQnt3B5cMHa7RzfnXy0=
Subject key identifier:   70:5B:BA:6E:E7:25:1B:DD:7F:69:E0:53:23:3C:DB:FF:68:7E:21:CA
Authority key identifier: 53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
Certificate issuer:       /CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Certificate serial:       0193572D7C5C51320982320CC4B848908CD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
Manifest number:          0A3F
Signing time:             Sat 23 Nov 2024 04:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:18 +0000
Files and hashes:         1: U-r4Oizdyf0L4onM-vMrMjMEz04.crl (hash: +/Z6seBQZWMdtZzYeuTSSs5bPvVG9yQCH0yA8aNuw8o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:7c:5c:51:32:09:82:32:0c:c4:b8:48:90:8c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
        Validity
            Not Before: Nov 23 04:00:18 2024 GMT
            Not After : Nov 24 04:00:18 2024 GMT
        Subject: CN=705bba6ee7251bdd7f69e053233cdbff687e21ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:f8:1a:6a:bc:da:77:bf:d7:21:2d:87:52:
                    4a:1d:45:5d:c6:a7:7d:d7:aa:85:46:38:68:b0:1e:
                    9f:d3:0b:cd:b0:09:0b:eb:27:16:85:d7:3c:de:6a:
                    45:28:39:6e:ae:e5:3b:ed:fa:1e:69:65:a7:81:13:
                    3b:53:27:54:b8:c4:e7:e8:81:79:08:b6:3a:43:07:
                    48:d0:92:ff:fd:9f:5c:fa:dc:22:ee:6c:a8:a6:4f:
                    44:84:08:62:bf:ff:5a:b9:24:66:16:15:cd:70:d6:
                    29:34:57:17:43:3d:d9:d6:e5:2d:49:38:a7:d5:e0:
                    03:b5:e0:02:c4:ee:4b:ff:b7:5a:b7:0f:a7:43:6d:
                    7e:26:7b:f4:91:49:8a:84:d9:ae:15:4d:5c:db:e8:
                    a8:56:d5:1a:3a:af:2d:69:e8:d3:65:9f:49:b7:6b:
                    99:0f:68:56:02:c5:35:18:d9:27:37:bf:47:3b:8f:
                    df:e1:3b:f1:22:0d:1b:4e:dd:49:77:06:cf:79:60:
                    55:95:2f:ef:16:dc:68:2b:8a:6a:05:51:bf:84:60:
                    f9:6b:6f:c6:47:1b:8a:16:f0:3e:92:86:db:86:b9:
                    24:7a:04:bb:c7:27:1a:ac:3c:42:fe:18:b5:5d:5e:
                    0e:11:0b:0f:de:63:90:1a:15:ca:fc:d1:70:23:f5:
                    47:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5B:BA:6E:E7:25:1B:DD:7F:69:E0:53:23:3C:DB:FF:68:7E:21:CA
            X509v3 Authority Key Identifier:
                keyid:53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ba:6e:c3:f0:ee:d8:62:4d:be:5a:68:62:f2:5d:4b:a0:94:
         63:9c:3f:65:09:f1:3c:7a:cd:f0:2a:80:2b:ed:09:ba:04:77:
         cd:fb:5c:f4:5b:7f:85:f6:05:4c:01:e8:69:c8:21:27:60:3c:
         a9:85:ed:8d:90:be:7b:bb:26:d9:8d:a1:77:43:5d:6c:97:19:
         ac:0e:ac:db:6f:19:52:6b:70:ea:66:ea:01:d9:08:e7:97:e2:
         bd:27:4d:77:6d:67:c1:04:f9:ff:13:cb:9e:c4:f1:18:18:6d:
         cc:26:b7:93:18:bf:44:68:a4:93:83:2c:88:d7:3f:1c:40:dd:
         af:46:2f:55:d8:f8:5b:20:a8:ad:2d:24:b7:30:98:ee:3c:93:
         e5:e7:6b:bb:99:5b:23:f5:05:3b:74:c2:00:25:d1:fc:cb:42:
         02:b3:e3:1e:15:a6:a1:bd:b6:a5:61:60:49:3f:a1:86:d1:8a:
         8a:eb:dc:eb:f4:53:7d:7c:59:7e:f3:9e:07:f1:bc:25:f1:ff:
         79:3d:47:00:60:2a:6e:a7:1d:88:52:cd:3a:4e:64:4d:7a:ad:
         0e:45:30:f2:da:40:fc:e4:e4:c7:ea:1e:33:be:bc:f3:98:24:
         6f:28:64:d9:76:49:2b:ba:fb:08:48:35:56:86:31:32:69:c2:
         24:0c:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:28 2024 by rpki-client on console-fra.rpki-client.org