Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a64013-27a5-4721-a020-b9a3ef3a5856/1/UJKqDg2tUDywaBdnSNbSG-ylISM.mft
File:                     UJKqDg2tUDywaBdnSNbSG-ylISM.mft (raw, json)
Hash identifier:          JPBGRo91a+R7gHtuIxh9CtWqrccqocIOMEZj2hum6OU=
Subject key identifier:   81:59:E3:78:71:4E:99:9D:7C:AC:DB:F3:3F:2A:02:7A:5F:AE:C4:F2
Authority key identifier: 50:92:AA:0E:0D:AD:50:3C:B0:68:17:67:48:D6:D2:1B:EC:A5:21:23
Certificate issuer:       /CN=5092aa0e0dad503cb068176748d6d21beca52123
Certificate serial:       01904CE910D8F94A247678F5B408FE9E89D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJKqDg2tUDywaBdnSNbSG-ylISM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/a64013-27a5-4721-a020-b9a3ef3a5856/1/UJKqDg2tUDywaBdnSNbSG-ylISM.mft
Manifest number:          0115
Signing time:             Tue 25 Jun 2024 01:01:00 +0000
Manifest this update:     Tue 25 Jun 2024 01:01:00 +0000
Manifest next update:     Wed 26 Jun 2024 01:01:00 +0000
Files and hashes:         1: UJKqDg2tUDywaBdnSNbSG-ylISM.crl (hash: uZaNj19EacJMJXSX08WXfADdOKEbDfDCRFx+YiQanT8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/a64013-27a5-4721-a020-b9a3ef3a5856/1/UJKqDg2tUDywaBdnSNbSG-ylISM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/a64013-27a5-4721-a020-b9a3ef3a5856/1/UJKqDg2tUDywaBdnSNbSG-ylISM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJKqDg2tUDywaBdnSNbSG-ylISM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4c:e9:10:d8:f9:4a:24:76:78:f5:b4:08:fe:9e:89:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5092aa0e0dad503cb068176748d6d21beca52123
        Validity
            Not Before: Jun 25 01:01:00 2024 GMT
            Not After : Jun 26 01:01:00 2024 GMT
        Subject: CN=8159e378714e999d7cacdbf33f2a027a5faec4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:00:93:2b:b0:13:64:af:4c:3b:3c:a5:3c:02:
                    b6:6f:69:51:ff:ae:f2:8e:c4:0b:6d:af:82:9c:17:
                    30:4f:60:fc:c8:10:4f:41:b0:f6:95:b0:d4:6c:fc:
                    ce:70:4e:31:ef:26:55:ed:52:af:c3:23:0a:bf:47:
                    79:60:0f:55:c7:bb:c6:ba:3b:b4:48:f3:51:49:f1:
                    e8:79:f7:b9:a2:02:5f:9b:b3:9f:82:48:18:2b:44:
                    4c:18:a5:13:b7:88:20:c0:41:f5:f1:c9:ec:f3:10:
                    78:41:76:ea:b4:60:83:fc:fc:e5:e3:91:09:b2:63:
                    e8:c3:61:e8:f9:99:9a:3d:4c:a3:03:78:a5:f2:9c:
                    5e:98:0a:d4:f0:2f:ae:51:83:02:15:c1:33:eb:17:
                    a8:1c:a0:a6:6d:e2:15:d8:52:25:6a:84:e8:82:36:
                    26:e6:d6:c6:12:5e:ec:f1:9c:c4:43:d3:41:2f:3e:
                    b9:73:18:de:67:fd:9e:c3:4a:35:48:f6:27:0c:be:
                    a8:2b:00:8a:10:e2:80:e4:55:52:91:e2:51:fd:17:
                    1f:35:95:e8:71:c9:73:6d:b5:86:c2:b9:08:06:4e:
                    f6:65:21:25:e1:89:27:d8:07:e1:0f:1b:94:d4:a1:
                    9f:39:8f:be:17:67:10:80:6f:62:9c:2f:db:d2:8c:
                    30:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:59:E3:78:71:4E:99:9D:7C:AC:DB:F3:3F:2A:02:7A:5F:AE:C4:F2
            X509v3 Authority Key Identifier:
                keyid:50:92:AA:0E:0D:AD:50:3C:B0:68:17:67:48:D6:D2:1B:EC:A5:21:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJKqDg2tUDywaBdnSNbSG-ylISM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a64013-27a5-4721-a020-b9a3ef3a5856/1/UJKqDg2tUDywaBdnSNbSG-ylISM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a64013-27a5-4721-a020-b9a3ef3a5856/1/UJKqDg2tUDywaBdnSNbSG-ylISM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6f:13:0b:f3:79:36:06:49:95:72:8a:68:0c:67:1c:c6:9c:
         52:18:35:ec:42:2d:59:05:23:8e:70:99:92:6a:db:88:52:4b:
         f7:bb:ed:fe:46:2c:3d:ea:68:4e:a4:c1:e9:bd:40:15:68:b1:
         c3:8f:c6:cd:6d:5c:25:ec:98:ae:61:cf:18:64:8d:78:ba:f3:
         06:46:88:64:f0:cb:40:19:7a:1a:66:24:cb:07:b0:65:c5:42:
         a0:55:7f:a4:d6:0b:80:3a:d3:8b:08:f3:47:3a:ea:7a:6f:27:
         4f:0c:92:89:57:a1:84:47:47:1d:1b:16:90:41:6d:57:1d:24:
         dc:3b:e2:72:06:c6:df:0c:e1:1b:e0:af:79:04:c7:fa:0c:03:
         cb:96:9b:2e:50:6e:76:99:90:d5:3e:96:88:32:73:03:77:79:
         0c:d2:a2:1a:9b:87:6d:5d:72:da:90:c7:f3:3c:fc:e3:48:5c:
         0b:16:00:72:68:0d:48:77:85:2a:e1:41:e5:f5:18:70:f9:77:
         f4:69:29:18:19:cb:50:32:7a:26:4f:6e:ec:7b:7f:49:71:fe:
         2a:72:d9:18:50:4c:9a:8a:76:79:09:38:b8:25:50:82:c2:e6:
         00:03:d7:71:4f:79:68:26:ec:85:b0:45:63:e2:a2:f3:db:fe:
         3c:1f:ea:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 10:31:05 2024 by rpki-client on console.sobornost.net