Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
File:                     i_UbRkYUeZl2V31e96gHjqgMF0M.mft (raw, json)
Hash identifier:          r4WkQVBqweR79HozMj7kTRWkg+DIqVuV9mvPongzcPc=
Subject key identifier:   A9:2A:4A:B1:6E:4C:2E:AE:0A:12:60:4F:C0:1E:A8:AA:EA:BC:FE:70
Authority key identifier: 8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
Certificate issuer:       /CN=8bf51b464614799976577d5ef7a8078ea80c1743
Certificate serial:       018F87ED7638F6137D4CCA99D73CDD180460
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
Manifest number:          65
Signing time:             Fri 17 May 2024 19:00:37 +0000
Manifest this update:     Fri 17 May 2024 19:00:37 +0000
Manifest next update:     Sat 18 May 2024 19:00:37 +0000
Files and hashes:         1: i_UbRkYUeZl2V31e96gHjqgMF0M.crl (hash: GjJbJDW5IcRUXPC3i6UOv7ucLoAp2pTg/ErKnIJaxng=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:76:38:f6:13:7d:4c:ca:99:d7:3c:dd:18:04:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bf51b464614799976577d5ef7a8078ea80c1743
        Validity
            Not Before: May 17 19:00:37 2024 GMT
            Not After : May 18 19:00:37 2024 GMT
        Subject: CN=a92a4ab16e4c2eae0a12604fc01ea8aaeabcfe70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:7c:78:b6:48:b5:7e:cf:5b:5c:cd:ee:7e:
                    14:06:2c:9a:0e:13:43:96:b3:26:35:4f:e2:9c:f0:
                    85:f6:a6:56:5d:4c:74:48:51:d0:ac:34:6c:ea:d2:
                    45:df:65:a1:86:ac:ad:fd:60:c1:99:3a:bd:76:6b:
                    3b:f3:fe:2d:ef:1d:89:73:7e:ce:b2:50:d4:ad:23:
                    41:25:7f:1d:33:a7:18:cb:be:cc:54:4a:a8:a5:85:
                    d4:6d:32:73:ee:7c:ec:58:eb:e6:7a:fd:0e:7b:3a:
                    38:6b:46:00:79:56:8f:8a:26:d3:93:ff:f3:2b:0a:
                    4b:df:14:ec:2b:cb:04:e8:92:2e:f2:c6:52:43:50:
                    59:73:e4:ba:75:2a:df:0c:b9:e6:ad:db:e1:0b:b3:
                    ee:f0:b9:68:fa:68:02:7e:06:dd:15:d0:6b:d1:60:
                    d2:ef:8d:2b:bc:fe:d2:0c:34:6f:cc:c5:60:d1:49:
                    8e:e4:34:6d:fc:03:78:1e:05:c0:27:82:b8:ec:13:
                    cf:48:20:4e:75:10:cd:de:9f:11:80:62:72:b0:ce:
                    53:f5:c1:be:6b:da:92:f5:98:95:25:da:45:20:d4:
                    d5:e1:e9:e5:6f:44:ff:05:83:0d:38:b3:ce:50:59:
                    fe:24:b7:28:36:84:b1:18:7d:8f:59:66:85:da:77:
                    68:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2A:4A:B1:6E:4C:2E:AE:0A:12:60:4F:C0:1E:A8:AA:EA:BC:FE:70
            X509v3 Authority Key Identifier:
                keyid:8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:26:b9:f6:ba:de:47:af:a4:a1:b7:01:bf:fd:52:b1:d0:44:
         60:bb:4b:62:c4:bf:73:4a:41:b1:54:5c:1f:9f:b5:57:6e:12:
         ef:fa:2e:00:9d:55:7c:98:03:90:0e:90:ee:71:4c:d2:c5:17:
         b7:7d:05:72:f7:e2:2d:81:19:fc:d2:8f:39:30:94:e5:14:4b:
         20:29:15:ee:6b:57:7b:75:68:88:a1:6a:c0:5a:fc:95:6b:f0:
         56:34:13:cf:38:44:a8:69:8a:0c:8a:1f:5a:9d:e8:75:55:77:
         98:05:33:5c:cc:33:3f:4d:0b:b0:23:ca:65:2b:0a:6d:29:46:
         99:d4:49:f4:66:02:28:7b:55:f1:b5:a4:0c:86:57:e3:f9:85:
         65:b9:e9:70:62:69:56:0c:2a:11:4b:99:31:05:f3:4a:b3:8a:
         71:70:ea:ef:b1:16:b5:93:53:8b:ab:de:b9:f4:b1:ef:8d:3b:
         54:4b:52:d9:4a:58:8f:e5:9e:db:ca:f2:13:6d:6c:7d:1d:37:
         d9:2e:78:b1:12:fd:ed:44:42:91:b3:3d:c0:34:89:cc:6d:e9:
         c6:21:50:47:82:ab:80:02:89:d9:28:06:b1:53:6d:4c:53:e5:
         46:a2:a4:39:84:b1:03:41:a7:58:3c:53:53:ac:a4:5e:2d:bb:
         26:91:a6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:20:35 2024 by rpki-client on console-fra.rpki-client.org