Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/833795-4df3-4850-bd99-8e8bac4cf18b/1/UUq20WoLF2_UBlXhf73mUrwh1FM.mft
File:                     UUq20WoLF2_UBlXhf73mUrwh1FM.mft (raw, json)
Hash identifier:          mUuZBXEClVJiwDoNRPAnABw4kms4aSY9SsTPLG9wWm8=
Subject key identifier:   2C:3D:22:D8:87:BA:06:8F:20:69:04:F5:71:D1:E3:88:C4:BB:3A:E5
Authority key identifier: 51:4A:B6:D1:6A:0B:17:6F:D4:06:55:E1:7F:BD:E6:52:BC:21:D4:53
Certificate issuer:       /CN=514ab6d16a0b176fd40655e17fbde652bc21d453
Certificate serial:       019073883EB526E1DE355B9769CC21B9503B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUq20WoLF2_UBlXhf73mUrwh1FM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/833795-4df3-4850-bd99-8e8bac4cf18b/1/UUq20WoLF2_UBlXhf73mUrwh1FM.mft
Manifest number:          0E80
Signing time:             Tue 02 Jul 2024 13:00:26 +0000
Manifest this update:     Tue 02 Jul 2024 13:00:26 +0000
Manifest next update:     Wed 03 Jul 2024 13:00:26 +0000
Files and hashes:         1: UUq20WoLF2_UBlXhf73mUrwh1FM.crl (hash: 1BinlPLQ3Dr6lCXykx6Fdu9U4y12dCL5q6573SBYIFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/833795-4df3-4850-bd99-8e8bac4cf18b/1/UUq20WoLF2_UBlXhf73mUrwh1FM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/833795-4df3-4850-bd99-8e8bac4cf18b/1/UUq20WoLF2_UBlXhf73mUrwh1FM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUq20WoLF2_UBlXhf73mUrwh1FM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:73:88:3e:b5:26:e1:de:35:5b:97:69:cc:21:b9:50:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514ab6d16a0b176fd40655e17fbde652bc21d453
        Validity
            Not Before: Jul  2 13:00:26 2024 GMT
            Not After : Jul  3 13:00:26 2024 GMT
        Subject: CN=2c3d22d887ba068f206904f571d1e388c4bb3ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:af:ff:eb:b1:48:96:4d:af:0d:06:13:01:87:
                    bc:c6:55:24:27:b5:79:90:0f:54:83:c8:94:35:af:
                    55:d2:09:21:3f:88:10:e3:f8:bc:a0:86:68:8a:50:
                    5e:f7:40:56:c5:5e:f3:68:cc:36:48:3e:b6:87:3e:
                    9f:01:67:5e:eb:97:66:b8:bd:0a:6d:60:43:b5:14:
                    a3:97:f1:b9:96:7f:a3:c8:c6:b6:47:41:84:9d:96:
                    05:bd:6f:41:6a:c2:c1:6a:e3:a2:99:a6:16:15:de:
                    5f:c5:2a:dc:52:a3:a3:d6:f4:06:d4:05:c6:64:50:
                    f9:83:40:d7:b8:bd:98:1d:7c:14:06:39:cf:be:5e:
                    fe:70:6a:21:31:46:40:d8:49:90:ee:9f:6f:16:65:
                    7c:76:cf:45:f6:b5:95:68:44:a7:da:e7:e2:28:8a:
                    01:3a:e4:96:95:15:22:03:32:3f:ee:94:44:3d:23:
                    db:da:3a:b1:49:19:dc:02:9b:4f:1c:a2:a8:e3:00:
                    7f:30:4c:b6:69:33:e8:b1:e1:72:62:b7:42:92:29:
                    21:8c:d4:0f:54:f7:81:c6:02:e8:4f:a8:8a:3a:35:
                    0d:2e:ce:4c:01:4e:c2:5d:41:35:05:90:cd:48:f9:
                    49:55:ba:e1:54:60:a6:c2:e4:99:75:23:8d:06:be:
                    b2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3D:22:D8:87:BA:06:8F:20:69:04:F5:71:D1:E3:88:C4:BB:3A:E5
            X509v3 Authority Key Identifier:
                keyid:51:4A:B6:D1:6A:0B:17:6F:D4:06:55:E1:7F:BD:E6:52:BC:21:D4:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUq20WoLF2_UBlXhf73mUrwh1FM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/833795-4df3-4850-bd99-8e8bac4cf18b/1/UUq20WoLF2_UBlXhf73mUrwh1FM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/833795-4df3-4850-bd99-8e8bac4cf18b/1/UUq20WoLF2_UBlXhf73mUrwh1FM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ec:0f:fc:86:6d:7b:ad:0e:86:a4:d2:48:50:42:d2:d8:eb:
         75:8e:6f:a7:75:91:27:fc:59:48:33:cf:c0:46:1c:b6:27:3d:
         34:80:90:cf:d6:ae:2c:5f:dd:b6:31:ba:ef:4d:43:be:ff:9a:
         ce:61:19:e3:af:f3:b6:30:34:04:eb:ae:69:ee:a3:e5:67:b8:
         85:84:98:3e:f9:03:db:21:6a:b7:a3:c3:ad:24:7e:a4:e2:44:
         47:ac:79:8e:84:dc:58:b5:1f:8b:d4:09:bf:30:1c:77:fb:8e:
         4e:86:cd:23:a2:28:33:51:00:ca:9e:49:10:54:2e:76:4a:41:
         0c:35:ca:7f:6f:4e:81:26:4a:cd:12:1a:34:a7:64:4b:76:fc:
         ad:0e:7c:e7:c9:27:3a:4a:52:83:41:f4:36:ab:a0:01:07:53:
         5c:69:cb:9d:cb:42:dd:77:1e:f6:64:4b:e2:86:16:32:34:ae:
         f8:6f:67:4e:b2:01:49:a8:02:93:0b:0c:f3:1c:a6:a1:67:b1:
         64:ac:2e:70:91:61:7c:7d:5d:86:31:da:65:39:04:6b:34:7f:
         a5:16:d3:a0:dd:b3:b0:fd:a6:55:14:5f:b8:13:ed:6d:06:4c:
         70:97:9e:53:73:eb:5c:83:16:12:1d:59:46:73:f1:f4:70:fb:
         35:41:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 22:17:44 2024 by rpki-client on console-fra.rpki-client.org