Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
File:                     U5UGCcqN1_bG-jzsrHeUIexsAQA.mft (raw, json)
Hash identifier:          GDYEG10ZEdrNYX1wRW1GgWyuXhBV/K5YIFmi9D0Us3g=
Subject key identifier:   0B:EB:3C:17:50:6D:0E:87:B8:8C:F3:6A:60:BD:1C:95:E7:94:91:E3
Authority key identifier: 53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00
Certificate issuer:       /CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
Certificate serial:       0193580944D7DF20933BB85D6300C7CED1F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
Manifest number:          0233
Signing time:             Sat 23 Nov 2024 08:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:22 +0000
Files and hashes:         1: U5UGCcqN1_bG-jzsrHeUIexsAQA.crl (hash: 3nTEWaKLEZ4owiu0jKbk3LZVvrk3TR2XTgvdKXjT58U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:44:d7:df:20:93:3b:b8:5d:63:00:c7:ce:d1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
        Validity
            Not Before: Nov 23 08:00:22 2024 GMT
            Not After : Nov 24 08:00:22 2024 GMT
        Subject: CN=0beb3c17506d0e87b88cf36a60bd1c95e79491e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:f1:e5:f8:28:bf:6b:64:9f:14:5f:68:2e:
                    12:d1:47:98:b4:1a:bd:4b:07:4c:09:b4:d5:9a:b7:
                    3a:46:ce:69:5e:c6:e6:27:0e:55:c8:de:2c:f2:d0:
                    6d:bc:77:85:56:6b:21:ee:6e:7f:d7:ea:8f:7c:53:
                    81:fd:95:e5:40:ca:97:23:ec:8d:18:8f:8e:1e:45:
                    de:09:d3:2f:0f:41:2b:77:29:a3:a6:9a:45:b7:3e:
                    53:e9:d8:93:31:ee:ec:43:7d:85:e6:be:7e:47:7f:
                    eb:8b:8e:5e:24:30:24:5a:3a:8a:30:bf:77:94:e3:
                    f3:1f:b1:4f:76:b7:2a:73:ea:b0:14:b5:3c:fb:0d:
                    ae:3d:ce:d9:87:04:4a:e1:c4:e7:69:4f:62:fe:cc:
                    92:0d:6a:d0:19:c9:7a:75:4e:43:2b:e1:9e:e9:d6:
                    65:0c:3a:b3:f1:25:68:c0:55:c1:df:bd:41:80:76:
                    4a:6f:07:d8:2f:4b:34:bd:94:e8:b5:53:33:84:12:
                    a2:40:9f:d9:60:a7:3b:05:f4:1a:a7:a7:98:33:2b:
                    f2:dc:27:c9:9d:8b:c4:88:39:52:88:46:df:c4:69:
                    4d:b2:c2:a4:d7:24:26:86:64:84:aa:1a:b8:33:b1:
                    19:cb:b0:43:a7:97:5b:6c:0d:89:5a:ab:a0:f9:39:
                    a4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EB:3C:17:50:6D:0E:87:B8:8C:F3:6A:60:BD:1C:95:E7:94:91:E3
            X509v3 Authority Key Identifier:
                keyid:53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:5d:40:44:11:c0:03:67:a6:c2:6d:75:32:a4:d3:e6:2b:26:
         ac:cb:3a:ce:5c:17:ba:b4:f6:e7:cc:b4:dd:29:72:03:c6:17:
         28:c5:a1:be:2a:0a:ca:af:ed:5d:48:e1:ad:32:78:5b:35:c1:
         f7:9a:17:f9:f6:f1:06:cf:86:68:f1:fc:07:ca:a2:27:95:ac:
         78:be:fe:26:27:06:76:fc:87:4a:ad:aa:cf:c5:70:6a:00:b9:
         a6:25:28:d1:d4:9a:f0:fc:d6:45:f5:1d:0f:2a:6f:0e:0b:b0:
         0a:d3:06:6c:97:12:f4:51:73:c2:e2:76:a2:88:05:d0:7a:e3:
         2e:aa:3a:a8:62:1d:f7:43:96:09:90:2d:fe:3b:82:ff:ed:07:
         e4:e8:87:51:2f:d3:31:75:87:1a:88:c2:e1:ec:15:4b:26:0b:
         d1:f9:2a:70:e2:34:ea:05:f3:0e:da:bc:c6:95:cf:38:29:bb:
         43:ac:bf:46:27:da:d8:9e:bd:a8:29:f7:bf:25:34:b9:71:38:
         7e:59:2e:55:18:63:e6:28:e3:a2:92:37:ac:dc:67:40:9f:a7:
         ed:66:bf:69:a8:07:90:88:8f:43:6b:d0:af:c4:10:20:e1:d4:
         2b:13:a1:b3:3e:7b:ac:9e:13:7b:18:91:4a:65:22:a5:ef:c0:
         e1:53:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:30 2024 by rpki-client on console-fra.rpki-client.org