Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
File:                     uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json)
Hash identifier:          0Ymj14qwUu94x+EYtUmJlcWBrXNGPq8rE67ndZqLqas=
Subject key identifier:   13:AC:8D:A9:54:FA:8D:B0:DF:23:D7:89:67:B8:4F:8F:87:71:94:74
Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
Certificate issuer:       /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Certificate serial:       018F87B620C00E72484DB538F2592753E8A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 18:00:11 +0000
Manifest this update:     Fri 17 May 2024 18:00:11 +0000
Manifest next update:     Sat 18 May 2024 18:00:11 +0000
Files and hashes:         1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: Kw5LfvL1zOEI/ZtmipDa2tslA2TbA7v2FTEIt2MElcw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:20:c0:0e:72:48:4d:b5:38:f2:59:27:53:e8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
        Validity
            Not Before: May 17 18:00:11 2024 GMT
            Not After : May 18 18:00:11 2024 GMT
        Subject: CN=13ac8da954fa8db0df23d78967b84f8f87719474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:7f:9e:01:ce:5e:83:03:4d:95:a4:32:17:e2:
                    6d:7a:d7:b6:7e:42:78:e1:d4:e5:d6:44:a7:77:b4:
                    6a:34:bc:00:d4:d8:91:4f:31:c0:7e:91:d1:c2:77:
                    6f:d6:c5:1f:df:cd:69:0f:4a:f3:00:33:ab:cd:bc:
                    a5:05:9e:08:8e:10:3a:98:24:16:47:86:8a:59:87:
                    7a:13:0f:69:83:3e:ef:6a:a5:37:7b:87:a7:56:c2:
                    17:0a:bb:f4:6c:85:ca:73:5c:43:fe:92:29:18:da:
                    b2:bb:bf:96:c3:f7:ee:a0:f9:1e:ce:7a:36:fe:16:
                    23:87:be:95:4f:c4:17:25:8b:80:cf:b5:b5:64:42:
                    9a:88:95:56:29:77:29:29:88:18:48:c6:d6:ec:b7:
                    58:b1:ec:88:b2:ac:ed:15:2d:68:5f:11:ae:d9:a1:
                    06:ac:0e:57:9a:02:f9:88:0b:97:18:5c:fb:81:6e:
                    db:4b:08:b9:18:92:3a:b3:ef:aa:23:e7:15:f3:e9:
                    d9:35:5b:09:d6:b8:2b:94:28:30:8f:cd:58:b2:b7:
                    1f:c3:d1:dd:95:9b:c7:4c:ec:2b:e0:e3:ba:4e:94:
                    bb:ca:f1:de:70:01:cf:6f:52:90:af:7e:3b:3a:63:
                    df:0d:44:22:4d:fa:6b:53:68:af:72:c1:f0:55:ea:
                    f6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AC:8D:A9:54:FA:8D:B0:DF:23:D7:89:67:B8:4F:8F:87:71:94:74
            X509v3 Authority Key Identifier:
                keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7c:be:f2:ea:29:95:af:93:71:a3:61:83:24:1a:95:0a:df:
         36:a6:c2:ea:7c:53:c8:5b:0f:6f:e3:00:09:6c:4d:a1:c7:d6:
         1c:4b:a7:0d:a5:4e:80:2f:54:75:6f:7e:3a:bf:e9:9c:2c:de:
         f1:23:49:12:04:2d:66:ae:4e:45:44:0d:9d:6f:fb:3a:84:1b:
         22:c0:43:34:ae:f6:32:16:a3:d3:d6:01:00:d5:1c:b9:a9:3c:
         b0:5c:a9:c4:e0:96:a1:8a:69:b1:a2:24:9a:50:5f:36:38:da:
         ae:c6:fc:03:dc:c2:88:98:34:3d:3f:60:56:5d:57:d5:4e:f0:
         11:13:a3:2f:31:9f:93:cc:93:7f:02:91:35:81:dd:36:36:c3:
         6a:22:3b:ce:03:0c:d4:78:df:da:25:5e:df:ca:0e:56:b7:f0:
         1f:8f:06:02:7f:6f:50:c7:0b:e4:bf:1d:9b:7c:7e:68:f4:0b:
         39:e4:be:0b:50:53:be:c6:df:e7:92:77:20:da:53:c3:51:68:
         49:cc:98:16:ef:84:05:26:9c:dc:20:42:1d:10:e5:4b:d5:63:
         33:06:d8:fe:2c:b5:c8:d3:7d:af:c2:8c:bb:1b:4d:22:d6:d1:
         98:40:27:0e:ec:5b:d8:18:78:e8:06:20:0a:f8:22:66:0f:a9:
         a8:0b:7b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:44:55 2024 by rpki-client on console-fra.rpki-client.org