Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
File:                     UdspKXLBDGn5fs0k8vtptPZ3beg.mft (raw, json)
Hash identifier:          ClUGJEdskya1AGvZGNOAmQ6xAr/N8IQCYMxlJ3T5SF4=
Subject key identifier:   68:EB:57:2A:F8:23:F6:15:59:BA:17:08:1E:B4:98:04:5A:B9:40:D5
Authority key identifier: 51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
Certificate issuer:       /CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
Certificate serial:       018F8748F386B4F136823A273E777BFBB082
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:00:56 +0000
Manifest this update:     Fri 17 May 2024 16:00:56 +0000
Manifest next update:     Sat 18 May 2024 16:00:56 +0000
Files and hashes:         1: UdspKXLBDGn5fs0k8vtptPZ3beg.crl (hash: 3QwcEmeLCN8e9Fwy+7qKqPxrwEyeH27iIP+nsPbSOWo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:f3:86:b4:f1:36:82:3a:27:3e:77:7b:fb:b0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
        Validity
            Not Before: May 17 16:00:56 2024 GMT
            Not After : May 18 16:00:56 2024 GMT
        Subject: CN=68eb572af823f61559ba17081eb498045ab940d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:eb:bd:72:7d:e8:87:85:64:78:c8:26:7e:
                    4e:dd:62:ab:d2:a7:79:a2:b9:0d:fd:49:4f:c9:e2:
                    13:9a:56:76:51:b0:97:72:ba:01:fe:98:2b:1b:60:
                    52:ff:c7:ff:7c:04:e8:ec:83:99:1f:92:75:59:e4:
                    cc:dd:76:87:60:e2:c8:74:e5:e1:db:79:a8:07:09:
                    b6:12:46:22:b0:10:9e:64:7a:82:ff:b7:eb:5b:41:
                    ed:49:d8:cc:46:0c:c8:cf:df:14:54:83:41:25:0a:
                    ab:c9:e7:40:74:5d:33:49:0e:3f:9e:26:8c:12:b7:
                    2e:64:84:1b:dd:7c:3d:1f:f5:f2:42:39:3a:ff:30:
                    21:1c:da:48:fd:1d:37:22:ec:99:77:3c:28:e9:7d:
                    fd:68:83:f1:7e:a5:d8:19:3c:de:9f:98:6f:15:f1:
                    ad:98:f5:02:a3:b8:fd:4c:aa:0e:8c:4e:27:2c:34:
                    d0:26:c8:4b:ea:d2:b0:2f:72:e9:8d:9f:fc:9d:89:
                    ae:05:cc:0b:e6:7e:62:af:c7:42:c6:ef:e9:44:ed:
                    0d:57:a2:76:d8:d1:59:78:65:52:38:3c:07:03:15:
                    6e:5d:7d:e9:40:9e:c6:3e:8b:cf:fe:23:18:03:11:
                    07:b7:27:74:f2:4c:de:95:30:a7:4e:60:17:41:1f:
                    1c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EB:57:2A:F8:23:F6:15:59:BA:17:08:1E:B4:98:04:5A:B9:40:D5
            X509v3 Authority Key Identifier:
                keyid:51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0b:fa:45:c0:82:73:b1:aa:70:51:3b:60:8a:91:c1:ec:51:
         47:2c:69:da:3d:4f:2c:05:7b:27:2c:af:a2:48:50:1a:e7:0d:
         d6:24:38:2d:95:af:50:1e:fc:0c:e9:9a:9e:0b:40:2f:8d:9c:
         2f:6b:da:08:4c:18:28:5e:ad:06:4e:41:81:19:db:14:8d:7a:
         7f:5a:2a:ee:fc:4e:97:18:27:c5:d2:29:cd:c3:19:46:9d:de:
         7f:47:b5:b4:34:e1:93:c3:ee:04:f4:88:af:4e:ad:db:1c:08:
         d2:c3:c3:81:ad:27:4d:0e:3e:85:e3:82:fe:c3:ab:d9:c5:e2:
         d2:a2:a0:84:6a:0c:df:5a:54:99:e5:4c:6d:79:82:f1:49:e0:
         80:ef:36:8a:7f:25:1c:c7:99:9e:4b:d3:2f:dc:12:74:7a:3a:
         48:f6:71:b6:79:1b:70:2b:79:39:1c:76:0f:64:36:f8:68:f1:
         4f:a3:03:de:39:38:ca:49:f6:b4:43:22:e2:23:1c:24:30:06:
         ca:1d:e9:2e:22:2b:d8:3a:58:0d:d1:d9:e2:27:18:94:e7:33:
         01:92:69:bf:61:ef:7f:d8:b5:5e:97:b6:8e:e6:f0:c9:6f:c3:
         19:dc:85:12:85:85:fe:0c:52:70:66:75:0d:ab:e7:75:20:e3:
         e8:66:e5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:52:14 2024 by rpki-client on console-ams.rpki-client.org