Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
File:                     Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json)
Hash identifier:          OP+49fKJ2sW588EbzjU9yBHwk2BZv5nSK1nN42i0rLo=
Subject key identifier:   52:AE:35:E4:96:C8:58:FF:08:CB:CF:BB:61:78:9C:6F:11:3A:CB:95
Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
Certificate issuer:       /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Certificate serial:       018F874A4264530E81A41726D8C779D48DE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
Manifest number:          0684
Signing time:             Fri 17 May 2024 16:02:21 +0000
Manifest this update:     Fri 17 May 2024 16:02:21 +0000
Manifest next update:     Sat 18 May 2024 16:02:21 +0000
Files and hashes:         1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: VA31CCHXBJuV0bWvD7LuPDd3lt5Jll5lB24zG+53eCo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:42:64:53:0e:81:a4:17:26:d8:c7:79:d4:8d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
        Validity
            Not Before: May 17 16:02:21 2024 GMT
            Not After : May 18 16:02:21 2024 GMT
        Subject: CN=52ae35e496c858ff08cbcfbb61789c6f113acb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a8:94:ad:eb:67:73:7e:af:26:4f:29:a3:67:
                    ae:b8:64:53:eb:2e:fc:a6:2a:78:37:9f:63:a6:5d:
                    aa:a2:31:eb:b2:df:c0:20:55:7d:b5:f5:07:96:1d:
                    ee:76:96:44:6e:11:3e:8a:51:2c:50:1f:19:de:a4:
                    23:44:9f:b7:c4:58:09:5c:88:8e:f4:a5:7a:04:6e:
                    a2:1c:35:4c:33:e7:3b:9b:f9:eb:eb:e9:24:5e:3d:
                    45:c0:c0:a7:c5:c5:f1:f4:a0:c1:57:70:31:0f:1f:
                    ab:2e:c2:57:1e:4c:2e:0f:c1:13:d6:64:f1:1a:cd:
                    f6:00:29:4f:38:18:d2:65:9a:5f:ea:73:fe:b1:36:
                    07:7f:87:c7:11:f4:05:53:35:43:51:c2:1e:94:6a:
                    3d:2d:3d:b3:8f:12:e6:34:17:fc:be:ca:8a:ff:21:
                    c8:3b:92:27:1c:aa:e5:91:a4:ab:42:b3:a6:3e:4f:
                    5e:9f:54:1f:54:ed:69:6e:65:3e:02:c8:0b:39:05:
                    24:df:aa:03:17:38:24:8b:4e:46:d2:2d:58:85:fe:
                    a8:2c:b3:e1:20:5a:f0:0e:e7:42:35:02:73:10:f3:
                    c3:19:56:48:2a:db:eb:36:a6:9f:12:4c:ce:f9:d3:
                    ba:fe:ac:05:75:b6:76:91:0d:8e:bf:b6:08:f0:bd:
                    27:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AE:35:E4:96:C8:58:FF:08:CB:CF:BB:61:78:9C:6F:11:3A:CB:95
            X509v3 Authority Key Identifier:
                keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:45:04:0d:19:93:61:db:35:3d:ac:59:cc:21:0b:0b:a4:9d:
         9c:a7:53:a8:8d:44:ec:97:f2:a8:a2:ca:ae:fb:24:09:89:06:
         bc:ea:7c:3c:91:8e:2a:b2:60:5f:11:84:f9:57:c0:66:42:14:
         27:36:22:56:47:a4:7c:5a:bb:3b:74:63:0a:2a:99:aa:e5:78:
         43:a9:97:ef:d0:3e:10:f4:1b:15:5e:f8:60:3e:7d:42:02:f4:
         45:60:df:8d:1e:ae:d0:2e:96:10:09:cc:fd:f7:07:f5:e6:30:
         d1:e9:29:cb:a0:2a:57:92:f1:fc:f1:bc:7e:08:14:f1:78:14:
         98:53:c7:d0:e2:59:16:37:b4:a1:05:98:a8:65:59:41:33:39:
         7b:b7:07:47:22:4b:fc:6c:52:de:a1:af:65:07:71:b2:2d:08:
         41:34:af:a1:85:4f:5e:05:83:c1:0b:aa:83:ef:b7:15:8e:90:
         c7:70:e4:72:45:26:d8:a9:cf:98:37:7e:92:cb:32:ef:5b:f3:
         ec:91:19:ef:b6:87:8b:39:38:06:57:21:c4:42:e1:aa:b1:be:
         12:df:09:05:6c:63:b1:42:7b:9a:1f:8c:09:54:d0:c3:6f:ba:
         f4:8a:f5:81:76:53:48:ff:e8:14:8f:2b:c9:27:e5:49:a6:a0:
         44:c6:0f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:49:08 2024 by rpki-client on console-ams.rpki-client.org