Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/351efb-ac27-4957-b896-93b79beccc53/1/USGZZlSgu08AhYxAKoILtkvglUc.mft
File:                     USGZZlSgu08AhYxAKoILtkvglUc.mft (raw, json)
Hash identifier:          72GNoFjLPKo0htmfoYyuvxBnvaUwE0hCe9s7VUIOrf4=
Subject key identifier:   BD:2C:A6:33:BD:0E:B3:5D:A3:B6:D6:C9:35:25:F9:D0:C5:F4:D1:06
Authority key identifier: 51:21:99:66:54:A0:BB:4F:00:85:8C:40:2A:82:0B:B6:4B:E0:95:47
Certificate issuer:       /CN=5121996654a0bb4f00858c402a820bb64be09547
Certificate serial:       018F87495D486D2D73AA661031784397CC8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/USGZZlSgu08AhYxAKoILtkvglUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/351efb-ac27-4957-b896-93b79beccc53/1/USGZZlSgu08AhYxAKoILtkvglUc.mft
Manifest number:          03F7
Signing time:             Fri 17 May 2024 16:01:23 +0000
Manifest this update:     Fri 17 May 2024 16:01:23 +0000
Manifest next update:     Sat 18 May 2024 16:01:23 +0000
Files and hashes:         1: USGZZlSgu08AhYxAKoILtkvglUc.crl (hash: VcRAk8A5oQYiu4YNIeDfIvDwebwggPVpDjQmfO3vDPk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/351efb-ac27-4957-b896-93b79beccc53/1/USGZZlSgu08AhYxAKoILtkvglUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/351efb-ac27-4957-b896-93b79beccc53/1/USGZZlSgu08AhYxAKoILtkvglUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/USGZZlSgu08AhYxAKoILtkvglUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:5d:48:6d:2d:73:aa:66:10:31:78:43:97:cc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5121996654a0bb4f00858c402a820bb64be09547
        Validity
            Not Before: May 17 16:01:23 2024 GMT
            Not After : May 18 16:01:23 2024 GMT
        Subject: CN=bd2ca633bd0eb35da3b6d6c93525f9d0c5f4d106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:a1:59:8a:f5:f9:c7:dd:d2:05:0e:9e:cf:
                    81:b3:f5:d5:84:9a:dd:85:9b:0b:57:d5:40:49:c9:
                    e2:c6:35:ac:2b:23:86:0d:db:3f:73:ce:ed:66:2c:
                    2f:c2:7a:3e:23:8a:a8:79:f8:2f:2d:76:67:bd:96:
                    52:35:6b:4e:06:57:b5:76:51:19:2a:c9:e4:d0:43:
                    c6:9c:1e:b7:97:c5:6b:29:86:7b:0d:ab:d0:ff:36:
                    56:dd:4a:b2:79:9c:52:c0:87:31:7c:48:ee:e9:fb:
                    c1:c7:07:43:64:bf:2a:bd:bf:7b:c8:60:e2:9f:bf:
                    14:01:53:65:cc:86:bc:3f:48:1e:d7:72:40:6a:d8:
                    c4:20:ab:01:2a:5b:b4:cd:00:22:8a:69:c0:a6:3d:
                    4b:f3:d1:3a:fe:44:46:b8:58:d9:b4:11:08:e7:35:
                    03:10:99:7d:2f:e8:7f:87:58:bc:b8:1e:b0:d5:69:
                    c5:81:d1:5a:52:a8:9f:fe:af:b7:de:58:04:af:db:
                    7f:cc:c3:a1:8e:82:cd:e7:52:5c:1a:5b:49:0f:22:
                    11:bf:96:d0:08:68:45:05:bf:23:32:2e:41:76:ce:
                    a6:27:7d:69:7b:76:41:2c:60:d2:9e:1e:8c:8a:2e:
                    da:23:b6:41:f9:cd:41:a2:fe:44:3a:61:34:de:a0:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2C:A6:33:BD:0E:B3:5D:A3:B6:D6:C9:35:25:F9:D0:C5:F4:D1:06
            X509v3 Authority Key Identifier:
                keyid:51:21:99:66:54:A0:BB:4F:00:85:8C:40:2A:82:0B:B6:4B:E0:95:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USGZZlSgu08AhYxAKoILtkvglUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/351efb-ac27-4957-b896-93b79beccc53/1/USGZZlSgu08AhYxAKoILtkvglUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/351efb-ac27-4957-b896-93b79beccc53/1/USGZZlSgu08AhYxAKoILtkvglUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8a:99:55:89:65:ef:37:84:04:4a:eb:d8:10:00:cb:57:7c:
         ce:4e:cf:42:37:21:d3:52:b0:71:b4:19:31:b5:dc:b1:e4:0a:
         4e:22:00:b1:29:b7:50:31:91:ae:1c:cc:34:61:59:c0:c8:3a:
         38:b6:9a:86:20:3e:04:48:87:c2:c4:62:21:73:41:ea:73:cd:
         e4:29:1d:ec:9e:63:d9:82:cc:bd:2b:2f:19:ec:79:6b:07:65:
         34:ba:62:80:94:f9:66:a2:b8:b7:90:e3:da:69:8a:05:fb:a2:
         a9:97:a1:15:cf:9d:69:0a:78:e5:68:ea:5e:d6:1a:57:7f:27:
         ca:13:f4:d5:d9:a6:ff:d0:aa:e5:40:59:7c:4a:a7:31:d3:13:
         f6:05:56:cf:b3:3f:4d:71:cc:71:4b:09:a3:84:f9:f4:de:c7:
         37:8e:80:78:28:b6:b6:ec:7a:64:5d:4a:e2:02:4d:75:50:ac:
         3e:15:fb:d8:32:e8:8f:70:47:16:7b:b7:5e:4e:a7:4a:8a:0d:
         5a:1d:0b:55:24:99:20:41:32:5b:12:fa:f9:b9:16:e8:54:f7:
         88:55:d5:c1:8a:1c:84:d8:47:78:fc:47:e2:bf:13:e2:97:2f:
         14:73:dc:83:bd:83:67:8f:59:d2:af:65:49:7f:94:52:56:01:
         3f:45:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:13:44 2024 by rpki-client on console-fra.rpki-client.org