Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.mft
File:                     UZAPFNiJz2-neRaxmjkeLA0fgM4.mft (raw, json)
Hash identifier:          3Z2GQtF5lhB/RRYDKy1bV0BA3RLYhSCWoDj4zBFX0i4=
Subject key identifier:   8C:7A:BD:14:D6:FA:5E:CE:8F:E6:7B:23:BF:87:40:ED:E2:9D:37:20
Authority key identifier: 51:90:0F:14:D8:89:CF:6F:A7:79:16:B1:9A:39:1E:2C:0D:1F:80:CE
Certificate issuer:       /CN=51900f14d889cf6fa77916b19a391e2c0d1f80ce
Certificate serial:       018F89383D91727D9A25A5B98C718C463856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZAPFNiJz2-neRaxmjkeLA0fgM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.mft
Manifest number:          0834
Signing time:             Sat 18 May 2024 01:01:55 +0000
Manifest this update:     Sat 18 May 2024 01:01:55 +0000
Manifest next update:     Sun 19 May 2024 01:01:55 +0000
Files and hashes:         1: UZAPFNiJz2-neRaxmjkeLA0fgM4.crl (hash: 6m+R+lv+caGFw8ME2SwTqiu9T1w3FPb15jFDSetyaUM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UZAPFNiJz2-neRaxmjkeLA0fgM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:3d:91:72:7d:9a:25:a5:b9:8c:71:8c:46:38:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51900f14d889cf6fa77916b19a391e2c0d1f80ce
        Validity
            Not Before: May 18 01:01:55 2024 GMT
            Not After : May 19 01:01:55 2024 GMT
        Subject: CN=8c7abd14d6fa5ece8fe67b23bf8740ede29d3720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:08:1c:86:b6:1b:09:9b:32:2b:cb:a6:61:
                    b6:5b:b0:ed:7e:57:0d:8b:65:80:9c:f7:17:cf:1c:
                    ab:10:f5:55:c2:0b:5a:e1:eb:66:ff:14:e5:e3:05:
                    c3:91:1a:97:3e:51:ea:e5:8c:ec:13:f6:a0:bc:97:
                    d6:2f:15:fe:c2:a9:7a:73:87:64:32:93:aa:9c:ca:
                    35:9b:be:8b:8c:4a:94:a7:98:a6:5d:8d:56:71:97:
                    67:5e:89:e2:84:8b:14:50:20:65:e1:28:f2:53:3f:
                    bc:2f:fc:be:eb:c1:90:06:75:29:24:86:5b:bc:65:
                    a7:52:4d:f1:b7:b8:ba:22:c4:c8:79:a0:db:66:3d:
                    db:07:df:45:f6:ba:cc:28:81:aa:41:91:05:48:b3:
                    3c:21:a2:e8:68:80:6f:bf:b1:b6:66:6c:48:da:41:
                    eb:6c:9a:c2:49:fe:3d:3e:5e:35:de:9e:07:9d:e9:
                    25:06:f6:02:45:f0:46:88:93:ec:3f:f4:e3:f3:42:
                    3d:98:ee:52:47:6d:70:1e:b5:d0:64:86:50:e7:cf:
                    4c:75:99:03:96:15:33:41:c9:e5:1b:50:5c:b5:ab:
                    87:7a:51:6d:05:ee:12:54:5c:75:4a:94:62:e0:05:
                    63:33:9e:55:94:e4:9e:65:72:e5:e8:49:a3:38:bb:
                    4d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7A:BD:14:D6:FA:5E:CE:8F:E6:7B:23:BF:87:40:ED:E2:9D:37:20
            X509v3 Authority Key Identifier:
                keyid:51:90:0F:14:D8:89:CF:6F:A7:79:16:B1:9A:39:1E:2C:0D:1F:80:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZAPFNiJz2-neRaxmjkeLA0fgM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ce:66:80:98:da:36:f0:ee:6d:6f:df:7e:2c:a8:b5:af:db:
         f8:ff:a4:17:ec:a7:2a:4a:97:b6:41:2f:3e:ca:0e:55:69:94:
         85:2a:66:8d:91:a2:05:62:96:eb:a3:fe:74:2c:fc:ee:00:99:
         79:a0:71:bf:f3:2b:c9:ab:57:d6:b4:1c:69:a6:df:00:e6:bc:
         d5:78:8a:07:47:c2:a5:2b:c0:83:7a:62:4d:ba:e1:28:ea:4f:
         8b:b0:90:a1:dd:ad:f3:b1:ef:fe:b7:62:1b:e2:84:ef:7f:16:
         bb:dd:b7:f8:71:84:61:d1:7b:e8:96:01:9e:08:60:6d:55:7a:
         ff:6f:1d:bd:72:99:79:fd:e9:95:29:67:1e:2c:43:3d:f2:2d:
         2f:97:cb:08:66:37:5b:b9:30:f4:95:52:6a:10:84:f3:6c:6c:
         0c:8a:e9:40:1b:37:63:a5:a0:68:be:0f:bd:7c:3b:cb:c8:38:
         64:77:47:94:12:42:4e:05:b6:7f:49:ad:58:30:df:16:f2:e6:
         1b:66:49:e3:d4:d0:60:1e:0b:e5:e2:4a:12:f3:bb:c6:94:44:
         67:52:78:81:9e:bd:03:8e:27:b7:54:93:09:7d:0c:2a:1c:94:
         86:3b:7c:ce:cd:3d:ff:12:79:9b:bf:c6:d8:20:2d:62:77:a1:
         97:6b:6d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:51:49 2024 by rpki-client on console-fra.rpki-client.org