Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File:                     ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier:          jiEjfwNIVAyiLShxhKux6d4DM8tmqgLXJ3UHmdCXc+A=
Subject key identifier:   62:C4:F9:A6:EF:3F:C8:FD:3E:F1:75:86:6F:3E:A9:45:AC:3D:B1:08
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer:       /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial:       0196AC55E34846E338F3EC9147F96638DF12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number:          12A4
Signing time:             Wed 07 May 2025 20:00:31 +0000
Manifest this update:     Wed 07 May 2025 20:00:31 +0000
Manifest next update:     Thu 08 May 2025 20:00:31 +0000
Files and hashes:         1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: M6x9ntMuxG6pF39iURV8rh+ifbcmxswaUVKP9Eld2T0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:55:e3:48:46:e3:38:f3:ec:91:47:f9:66:38:df:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
        Validity
            Not Before: May  7 20:00:31 2025 GMT
            Not After : May  8 20:00:31 2025 GMT
        Subject: CN=62c4f9a6ef3fc8fd3ef175866f3ea945ac3db108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:f8:9b:73:ac:53:67:90:ac:ef:2d:1b:91:
                    8e:4a:2c:f2:75:8c:fd:1f:69:13:58:cc:b3:ca:91:
                    e7:2d:f5:12:37:28:28:c6:9f:9a:44:18:83:ce:b5:
                    df:da:b2:1f:09:46:51:b5:53:3a:bf:ae:3a:6d:5e:
                    c1:6f:72:d7:f1:62:22:72:be:49:f1:98:b5:5f:3e:
                    41:05:f9:ed:1d:f7:dc:c6:16:b0:1f:5c:f3:23:37:
                    90:ee:c9:89:df:5d:ce:ac:e4:f0:6f:66:1c:d7:92:
                    5d:6f:63:20:29:d9:3a:3f:79:dd:11:ee:9d:d3:19:
                    0b:69:21:58:ec:01:a2:90:fc:a0:55:bc:6b:2a:42:
                    55:67:2b:35:d3:d4:e3:ae:f5:9c:c4:d9:a5:25:82:
                    50:bb:db:3d:c5:6d:f4:d3:f6:f3:b9:c4:fd:18:c2:
                    f4:22:54:d9:67:5a:75:7a:bc:26:9d:2b:5c:50:d2:
                    8c:47:56:64:52:e5:a3:b8:46:77:52:06:2b:06:25:
                    91:98:69:db:31:1a:f2:58:f1:83:91:96:91:d7:04:
                    4d:12:25:23:ba:be:be:17:8f:db:fe:fb:b6:4b:6f:
                    b7:8e:75:b8:20:71:69:ee:ad:30:82:7d:71:88:af:
                    2a:c1:10:2a:d7:90:35:97:3e:9f:25:dc:ea:15:af:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C4:F9:A6:EF:3F:C8:FD:3E:F1:75:86:6F:3E:A9:45:AC:3D:B1:08
            X509v3 Authority Key Identifier:
                keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:09:4e:49:a8:ae:56:0c:97:0a:e5:c6:29:78:d3:5b:7d:4f:
         7a:22:c8:86:f2:fb:ce:53:e9:61:64:8d:ad:ed:dd:b5:b6:25:
         02:b8:d8:12:53:fd:ce:8f:56:7a:60:a8:a2:44:c6:f5:3c:b1:
         8c:ad:39:c6:95:77:1f:af:0e:39:a0:fd:0c:49:24:a7:68:2f:
         2b:97:10:42:4c:1b:d2:57:59:4f:d6:4d:66:35:6f:19:82:87:
         54:3c:8a:09:59:c8:86:97:15:e7:bb:61:a9:7a:79:b6:cb:72:
         3e:05:25:1d:d4:8a:79:f7:83:9e:95:f3:13:8d:e4:76:78:e1:
         69:eb:df:67:fa:c0:4b:ee:e7:b9:d7:2e:71:a1:2e:bb:da:0b:
         28:87:1f:4d:91:90:dd:29:79:e4:16:d8:3c:8a:86:a2:61:47:
         ad:17:c9:71:74:c9:b0:f1:e7:a0:00:e3:23:f4:8e:41:c6:65:
         72:6f:c8:51:47:99:d2:78:35:46:e3:5c:85:2f:95:fc:aa:fe:
         2b:9d:97:8b:d8:06:67:89:9f:1a:a1:c3:ff:9d:4b:2c:ad:60:
         92:79:80:23:e0:a9:4d:a4:13:5d:c5:95:85:6c:0a:35:34:de:
         58:1c:d7:a9:a9:d0:41:5d:db:f0:56:1b:60:a8:b4:10:5b:5e:
         e2:9d:45:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:34:57 2025 by rpki-client