Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
File:                     uq_lp700ifDcc4TIjZWJVDfPxMQ.mft (raw, json)
Hash identifier:          +KLtI3qh6GFzsVHZqJ0JhvM5agWlkYQKHaSUshSJbiM=
Subject key identifier:   9B:E5:B4:E9:A9:3A:90:3F:2A:88:97:91:34:1C:5C:62:57:E8:35:34
Authority key identifier: BA:AF:E5:A7:BD:34:89:F0:DC:73:84:C8:8D:95:89:54:37:CF:C4:C4
Certificate issuer:       /CN=baafe5a7bd3489f0dc7384c88d95895437cfc4c4
Certificate serial:       01967DC5BF323FB14EDAC053911B14AB7A5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
Manifest number:          091F
Signing time:             Mon 28 Apr 2025 19:00:33 +0000
Manifest this update:     Mon 28 Apr 2025 19:00:33 +0000
Manifest next update:     Tue 29 Apr 2025 19:00:33 +0000
Files and hashes:         1: uq_lp700ifDcc4TIjZWJVDfPxMQ.crl (hash: 3LXf/7PvgcAO7wj1TOgwa8f37oIUpBURMQdUWAW0cVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7d:c5:bf:32:3f:b1:4e:da:c0:53:91:1b:14:ab:7a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baafe5a7bd3489f0dc7384c88d95895437cfc4c4
        Validity
            Not Before: Apr 28 19:00:33 2025 GMT
            Not After : Apr 29 19:00:33 2025 GMT
        Subject: CN=9be5b4e9a93a903f2a889791341c5c6257e83534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:00:12:85:a7:ad:fb:2d:ac:17:1e:f6:dc:
                    96:fa:d6:99:b0:7a:fa:17:93:5a:7a:90:71:1f:bb:
                    3f:ef:83:dc:1e:7f:e8:eb:94:67:f3:08:fe:31:1d:
                    a1:7b:ec:9a:ee:94:ea:76:6d:bc:b3:83:ae:5c:45:
                    c9:b6:83:6c:88:24:28:37:7d:12:42:75:b2:ae:10:
                    d8:0f:20:75:67:35:3a:40:a4:0f:41:89:5a:0c:cf:
                    f5:e1:22:ba:65:77:ff:fa:97:e9:04:71:e5:31:73:
                    6f:e7:81:16:64:5b:9b:ce:d7:3d:1b:47:ef:6b:d1:
                    44:d4:57:01:93:46:ad:2c:08:42:9a:ae:e8:e6:47:
                    9a:81:c0:0e:00:c4:3a:74:90:5e:a5:b3:eb:80:7a:
                    b7:f1:d2:c9:ec:ef:a1:68:83:50:e8:cd:e7:6f:1f:
                    fb:1e:26:6c:ab:13:58:df:af:a8:2d:57:f4:a0:29:
                    7d:93:1e:43:1a:aa:07:87:10:cb:1d:94:be:90:12:
                    8f:a9:54:36:13:1a:62:01:40:3d:c6:60:61:1e:da:
                    a9:ed:8d:9e:5d:16:21:8a:f4:4c:66:80:7f:dd:9f:
                    48:27:06:0e:cb:d5:7d:83:65:5b:dc:a3:71:f4:7c:
                    20:ed:63:9c:04:a4:02:54:50:5f:ce:0c:5b:6e:78:
                    fb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E5:B4:E9:A9:3A:90:3F:2A:88:97:91:34:1C:5C:62:57:E8:35:34
            X509v3 Authority Key Identifier:
                keyid:BA:AF:E5:A7:BD:34:89:F0:DC:73:84:C8:8D:95:89:54:37:CF:C4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f0:79:eb:69:39:b8:71:16:31:24:de:37:5e:36:cd:56:0d:2f:
         10:2e:f6:da:a6:ba:5c:37:c2:bc:47:05:df:14:62:ab:96:55:
         39:ea:44:87:e5:e0:de:33:2a:46:f2:25:a4:71:79:33:d6:79:
         98:4a:6b:1a:d8:b4:49:e7:31:6a:83:f6:8c:d2:69:de:bc:29:
         37:81:88:eb:75:c7:8a:5a:15:45:c8:1b:8f:00:d5:cd:c0:25:
         71:12:be:72:84:1c:01:2a:d8:ad:66:9d:5e:32:85:62:ff:9d:
         73:26:43:ff:39:21:80:ee:84:da:49:af:3b:77:98:27:2b:4e:
         d3:1d:5f:2f:c2:b1:1c:63:e5:08:5c:b2:f4:87:e6:e4:6e:83:
         d3:1e:db:77:29:cc:d1:b5:dc:db:e9:8a:49:4a:ab:07:ac:ad:
         21:76:65:d7:f2:a8:e0:f5:9e:5d:f8:ea:8e:7b:f1:a0:0c:e6:
         d1:d2:44:0a:ba:9a:8a:4e:8b:9c:8b:fc:64:82:8f:c6:88:37:
         17:bd:b3:5f:28:c4:64:ab:fa:80:10:84:bb:6f:ab:5f:ed:9f:
         fc:65:2b:fb:31:57:0a:df:da:80:2a:26:c7:b3:f8:cf:e3:47:
         1b:fb:f1:78:de:6d:85:f2:78:11:9b:13:98:47:98:ba:e1:e2:
         ee:e0:e8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:05 2025 by rpki-client