Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
File:                     uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft (raw, json)
Hash identifier:          a0O2Uc/FKxCaHjyaetzxi29z+VoCL+TQK2dXms6xf5c=
Subject key identifier:   8F:18:FF:F4:B0:89:63:44:4F:CC:C3:D0:66:25:76:EB:64:7D:3D:9C
Authority key identifier: BA:AF:6C:08:BC:A3:08:C1:C7:8B:0E:ED:8E:F3:0B:4A:04:68:11:8E
Certificate issuer:       /CN=baaf6c08bca308c1c78b0eed8ef30b4a0468118e
Certificate serial:       018F866CE2C898A549926E88731E92002BD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
Manifest number:          F9
Signing time:             Fri 17 May 2024 12:00:33 +0000
Manifest this update:     Fri 17 May 2024 12:00:33 +0000
Manifest next update:     Sat 18 May 2024 12:00:33 +0000
Files and hashes:         1: uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl (hash: RzAWLOE6VU30nv5UDcjxVdDNdEDD2Pkdx4tDF5H0+hg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:e2:c8:98:a5:49:92:6e:88:73:1e:92:00:2b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaf6c08bca308c1c78b0eed8ef30b4a0468118e
        Validity
            Not Before: May 17 12:00:33 2024 GMT
            Not After : May 18 12:00:33 2024 GMT
        Subject: CN=8f18fff4b08963444fccc3d0662576eb647d3d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2b:8c:0f:d1:8d:44:df:a6:78:19:1d:f7:7e:
                    98:b7:14:17:da:ae:d2:5e:c0:3f:b6:76:a0:ab:0c:
                    8c:ca:1a:24:93:8b:89:a4:20:6e:18:a2:f2:65:24:
                    7f:bd:99:d6:95:e5:cf:67:0a:4c:be:17:c1:e2:cf:
                    5b:d2:cc:0a:1a:8a:b2:e1:cc:51:98:c3:45:c6:3e:
                    c6:61:2e:ad:f0:04:6e:e9:5c:6d:c2:aa:39:a3:ed:
                    3c:a7:d9:33:55:9c:2c:07:60:da:b4:73:78:d2:3d:
                    b7:e2:e5:a1:b3:d5:d9:8d:c7:c5:07:84:71:c6:c2:
                    77:e6:be:da:06:ce:cf:5e:08:d2:7f:a9:84:a6:ab:
                    f6:3b:2a:7c:cf:74:87:56:d2:df:47:46:4a:5c:f9:
                    92:79:90:8d:9f:79:8e:a5:d2:a7:de:bf:64:bf:1d:
                    16:79:05:f0:72:ca:21:93:a5:6a:09:70:6a:1a:b9:
                    a5:b4:7c:a4:ba:a9:c2:d4:fa:55:25:de:b8:4f:00:
                    c7:de:5e:bc:77:f2:ab:4e:4d:95:96:78:a8:90:7a:
                    25:6a:4b:dd:b7:86:e6:35:ef:d2:0a:e0:e1:c7:2d:
                    23:b5:77:dc:97:3a:41:b6:d8:85:1e:12:89:60:d6:
                    bf:b0:08:22:57:b3:40:cc:05:e4:60:69:7a:ef:e2:
                    e1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:18:FF:F4:B0:89:63:44:4F:CC:C3:D0:66:25:76:EB:64:7D:3D:9C
            X509v3 Authority Key Identifier:
                keyid:BA:AF:6C:08:BC:A3:08:C1:C7:8B:0E:ED:8E:F3:0B:4A:04:68:11:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d3:18:93:35:a8:5e:f5:09:be:d1:69:21:aa:7b:0d:b9:5f:
         09:a8:d2:20:e7:18:9d:4d:90:b7:dc:8c:2b:53:01:e2:40:3d:
         8c:c1:98:1d:63:f2:8f:c1:71:ce:01:3f:0b:dd:c8:72:59:1c:
         ba:c8:2c:cd:5d:3f:9f:73:66:c4:94:3d:59:87:fb:d5:b2:c3:
         1d:b6:b6:10:54:5a:50:75:f1:da:5d:83:e0:2a:c2:42:6a:91:
         99:5c:8b:df:b7:22:68:39:e2:c3:93:50:9f:c6:f4:94:57:80:
         f1:9c:c4:28:9e:79:10:3c:2e:9b:b8:4f:39:94:ad:69:62:ef:
         5b:f4:e8:52:1c:08:44:0d:bd:18:06:d5:8e:e1:35:e1:07:af:
         87:f6:b7:ce:bd:36:79:e6:8d:0b:e9:31:1d:c0:bd:77:9f:c9:
         4b:17:eb:5b:7e:7a:12:3b:d4:e3:54:81:4b:2c:69:73:5b:26:
         ad:9f:7d:b7:7f:e5:5a:28:b2:01:1a:28:4b:cd:36:fe:2c:7f:
         e2:5b:3e:8f:78:fc:af:bf:cf:df:c6:40:28:47:f6:d5:a4:90:
         b9:0c:4e:da:74:cd:89:9c:10:b6:be:2e:b9:06:e5:e1:aa:57:
         cf:b0:b4:62:91:1c:e0:99:70:7a:40:0a:6b:9d:b6:7b:22:23:
         ef:e7:f8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:12:29 2024 by rpki-client on console-fra.rpki-client.org