Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File:                     Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier:          UEq3GvSGKBoh+6KZwO83ZiR9cBdHNnIJj8T5h5YIc5M=
Subject key identifier:   80:63:D0:B2:88:E7:6C:AA:B2:12:EE:8A:AD:03:71:3B:9E:62:47:70
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer:       /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial:       018F874B08D74CEA439A12C72CDE4A791A8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number:          0309
Signing time:             Fri 17 May 2024 16:03:12 +0000
Manifest this update:     Fri 17 May 2024 16:03:12 +0000
Manifest next update:     Sat 18 May 2024 16:03:12 +0000
Files and hashes:         1: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: Xc1E2T231qOMYr9UORDgWtROhTEN73qet6ZE+3lmLjo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:08:d7:4c:ea:43:9a:12:c7:2c:de:4a:79:1a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
        Validity
            Not Before: May 17 16:03:12 2024 GMT
            Not After : May 18 16:03:12 2024 GMT
        Subject: CN=8063d0b288e76caab212ee8aad03713b9e624770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:3d:1f:32:4f:01:9b:b1:15:8e:97:e9:0a:
                    fc:dd:2f:54:58:b6:ac:81:51:f5:d2:8f:18:ba:f4:
                    c7:35:5b:2b:f0:92:86:09:5e:fe:bf:9d:32:60:b1:
                    6a:4f:db:e0:13:4e:fa:06:55:94:c0:34:54:8d:6a:
                    7b:61:e0:5c:41:3a:04:b6:19:ab:0a:dc:4b:65:97:
                    8c:c1:cd:ff:32:55:8d:63:ac:17:80:4d:71:6d:21:
                    d6:91:db:e8:f0:da:d5:e9:cc:d3:30:23:6f:4b:44:
                    50:0b:9f:02:5e:aa:a1:68:0a:4b:fc:47:5e:08:4d:
                    05:bd:c4:d8:0d:dd:47:3f:22:eb:b7:2e:7c:be:67:
                    42:40:53:4e:b7:a7:3e:dc:f3:d2:dd:2f:91:00:3a:
                    6e:7e:3a:fb:90:6a:02:53:b5:fd:86:42:65:fd:13:
                    ef:d5:39:87:60:fb:78:bc:22:52:4c:19:2d:df:42:
                    c5:f9:f4:d0:62:04:a4:c6:de:49:a4:9f:75:3b:ea:
                    36:b0:8b:e9:90:34:c7:96:fc:7b:3a:b2:36:27:45:
                    e7:91:eb:e7:d3:7e:43:50:23:83:d3:64:2c:0b:dc:
                    26:55:5a:cc:81:a9:db:bc:11:14:56:99:c8:7b:8f:
                    32:51:07:fe:48:c1:14:90:e2:f4:8a:d2:ea:28:89:
                    16:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:63:D0:B2:88:E7:6C:AA:B2:12:EE:8A:AD:03:71:3B:9E:62:47:70
            X509v3 Authority Key Identifier:
                keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4f:e1:7d:1c:ad:a9:cc:52:9d:a8:29:71:a5:40:6e:54:5e:
         a2:9c:70:74:e9:41:5d:31:e3:bf:df:18:6e:23:d3:d8:26:8c:
         22:a5:dd:ef:35:01:b8:3e:71:94:2e:09:14:7d:05:b7:71:e4:
         6f:04:64:32:e3:f3:fe:f1:45:09:0e:6b:63:fe:f3:60:00:53:
         dc:8e:2f:92:24:d8:bd:32:13:1c:d6:d8:9c:28:4c:5c:32:12:
         cd:a6:87:47:0b:99:f7:69:92:15:34:e1:54:e4:db:f0:d1:0a:
         64:af:e8:78:83:a6:be:66:27:73:5a:09:fd:b5:41:8b:30:1d:
         5c:76:0f:5a:6f:08:55:e8:9a:b3:b7:60:aa:69:a8:2d:7a:ea:
         30:cc:e9:8e:bb:91:2a:bc:7d:28:9d:ef:58:c3:40:5c:17:6b:
         a8:28:90:8c:af:7b:3b:99:d5:c4:31:ab:6e:b6:45:a8:36:73:
         dd:7b:d0:b6:fc:fa:de:b1:e9:65:31:e3:6b:cc:cf:1e:45:b5:
         95:96:a1:28:62:dd:7c:93:3d:37:ef:d7:95:3a:b3:52:17:12:
         6b:e5:23:29:38:04:97:ac:d1:52:d2:36:78:2f:1b:c6:10:68:
         8f:a4:b6:24:2e:89:4c:55:01:a0:b9:8e:40:cf:81:52:1f:b3:
         b8:36:46:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:38:46 2024 by rpki-client on console-ams.rpki-client.org