Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft
File:                     uvzQImt58j3kemr95RRLGynii1w.mft (raw, json)
Hash identifier:          B/O2F4mG+DZOfvZhG0EYm9CCSA5Trvav8r8t54MUMxI=
Subject key identifier:   79:C2:D4:3F:2E:76:D8:6D:0F:8A:1B:39:8E:ED:DC:1C:6B:3D:8C:67
Authority key identifier: BA:FC:D0:22:6B:79:F2:3D:E4:7A:6A:FD:E5:14:4B:1B:29:E2:8B:5C
Certificate issuer:       /CN=bafcd0226b79f23de47a6afde5144b1b29e28b5c
Certificate serial:       018F87ED64E853C459F4BEE83CAB643489D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft
Manifest number:          034F
Signing time:             Fri 17 May 2024 19:00:32 +0000
Manifest this update:     Fri 17 May 2024 19:00:32 +0000
Manifest next update:     Sat 18 May 2024 19:00:32 +0000
Files and hashes:         1: uvzQImt58j3kemr95RRLGynii1w.crl (hash: 2JwgCazbAXKlgUgtV5Tvr5mfD1ULmtggf6p7YhbAr38=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:64:e8:53:c4:59:f4:be:e8:3c:ab:64:34:89:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bafcd0226b79f23de47a6afde5144b1b29e28b5c
        Validity
            Not Before: May 17 19:00:32 2024 GMT
            Not After : May 18 19:00:32 2024 GMT
        Subject: CN=79c2d43f2e76d86d0f8a1b398eeddc1c6b3d8c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:f4:b6:3d:ab:59:1f:5e:8b:3c:7a:d0:46:
                    1d:ab:f9:46:b5:75:c9:15:76:08:35:b7:01:12:dc:
                    51:10:0e:c0:7c:81:cb:44:73:95:95:31:24:91:c4:
                    1a:c1:a7:fb:d9:27:ce:20:f0:b8:36:d0:23:69:d6:
                    0f:f4:5f:e2:22:0c:0d:d5:1a:ef:3f:f4:99:5d:65:
                    56:c0:4b:0e:eb:9a:3e:ab:ff:a8:32:1f:4d:19:9c:
                    f9:ff:d7:8e:2d:27:26:70:4c:17:60:58:04:3d:f6:
                    0c:42:f4:e3:3d:48:94:08:c6:72:97:46:4a:05:71:
                    b6:69:e5:cc:fc:b4:05:64:fd:b2:e4:94:7c:4a:50:
                    4e:ca:26:e8:a8:65:f0:74:eb:58:00:fe:44:e9:f5:
                    8f:39:13:e5:74:ff:02:cc:aa:a8:8c:6f:02:c0:0d:
                    78:f7:83:49:4c:2a:a8:e3:8c:f9:bc:30:18:e8:b9:
                    59:e6:8a:8f:d2:ee:67:c2:c5:27:dd:c2:00:1c:bf:
                    e7:fd:5c:33:52:1d:1e:61:50:ef:2e:37:51:2b:ec:
                    85:5f:74:68:3b:5c:5d:2c:48:a5:06:53:25:4e:78:
                    d5:9f:40:c9:19:e5:6c:c5:ba:4c:19:39:0e:20:6a:
                    ad:f3:f1:a8:8a:9c:00:9e:91:e8:3f:ae:40:52:d7:
                    60:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C2:D4:3F:2E:76:D8:6D:0F:8A:1B:39:8E:ED:DC:1C:6B:3D:8C:67
            X509v3 Authority Key Identifier:
                keyid:BA:FC:D0:22:6B:79:F2:3D:E4:7A:6A:FD:E5:14:4B:1B:29:E2:8B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:aa:5f:74:85:ff:25:7f:f1:d7:1d:cd:c2:1d:6b:d5:12:09:
         a5:fe:3a:5b:da:44:60:fc:49:d9:19:1a:18:b1:4e:42:aa:20:
         40:89:ee:7b:05:f8:4e:3e:c0:11:52:5d:f6:ae:1a:3f:7d:1a:
         82:81:d6:94:de:37:e3:b0:71:14:b2:47:49:6c:d4:fb:ce:2d:
         c7:2b:71:5f:1c:19:6b:d5:ce:86:6e:21:66:05:b9:9f:c0:ea:
         a0:7e:88:d4:df:96:b5:ca:86:e6:a7:64:87:b4:98:6e:ed:a3:
         a1:e6:c8:44:3f:a7:9c:5a:92:7e:22:52:17:ba:9b:ab:7c:78:
         81:2f:79:8a:a6:c8:04:09:28:0d:17:3f:92:33:4a:ad:fe:5c:
         9b:42:12:2f:ad:a3:f1:72:cf:c8:f2:f0:b1:2b:7b:80:b0:6e:
         02:73:fc:fe:6a:36:e2:de:7f:6f:ec:a8:c5:27:cf:1c:95:f3:
         e0:32:ec:56:ce:d2:af:59:23:17:28:41:da:ee:26:37:c5:09:
         95:63:ef:3d:a6:cc:11:c7:a6:ed:22:c7:b3:62:90:c2:18:ed:
         e3:2a:2c:7d:ef:47:9c:d5:9f:d5:fb:99:9c:dc:d1:ac:36:80:
         9a:b7:52:9e:80:e2:c0:bc:4c:c4:ab:ad:e9:66:f3:db:99:b0:
         90:1f:a6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:39:17 2024 by rpki-client on console-ams.rpki-client.org