Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
File:                     uq_lp700ifDcc4TIjZWJVDfPxMQ.mft (raw, json)
Hash identifier:          ACkPl98SHI7TMv0CSHZgD10+41rEzYfk4L5BdZuzouQ=
Subject key identifier:   73:FF:07:C1:61:78:03:A4:0F:2A:82:81:A8:D5:F6:E3:50:F4:82:93
Authority key identifier: BA:AF:E5:A7:BD:34:89:F0:DC:73:84:C8:8D:95:89:54:37:CF:C4:C4
Certificate issuer:       /CN=baafe5a7bd3489f0dc7384c88d95895437cfc4c4
Certificate serial:       019769611FBF0874CAB2470D39B34A6B10FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
Manifest number:          0999
Signing time:             Fri 13 Jun 2025 13:01:02 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:02 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:02 +0000
Files and hashes:         1: uq_lp700ifDcc4TIjZWJVDfPxMQ.crl (hash: ndrqlOu4JPjoKZD+YxVzOjXaNnG0lJkVJfyI/HtTiEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:1f:bf:08:74:ca:b2:47:0d:39:b3:4a:6b:10:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baafe5a7bd3489f0dc7384c88d95895437cfc4c4
        Validity
            Not Before: Jun 13 13:01:02 2025 GMT
            Not After : Jun 14 13:01:02 2025 GMT
        Subject: CN=73ff07c1617803a40f2a8281a8d5f6e350f48293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:17:22:b3:09:c7:76:df:17:04:0a:a0:57:
                    0f:6a:6f:af:ef:a0:48:fd:21:2e:d0:38:ad:01:82:
                    17:91:e7:e4:2a:cc:45:ef:1b:ce:b7:a5:2d:8e:c9:
                    8f:1f:45:9f:ac:cc:f0:66:35:e7:66:10:71:ac:ea:
                    fa:0d:99:3e:77:53:db:24:e9:66:06:0f:50:57:79:
                    34:2e:d3:41:f1:2c:79:2f:b0:b5:30:d8:1d:4e:9e:
                    59:09:28:0c:92:05:6a:d8:1c:f7:5e:fc:c4:15:1d:
                    52:db:be:c6:d5:13:9f:81:28:33:18:89:cd:32:53:
                    32:08:20:35:4d:53:37:9f:72:66:af:f6:9c:d9:1c:
                    0d:30:d6:cf:5f:30:8c:85:db:a5:c5:62:be:61:c4:
                    dd:9a:79:26:66:0e:44:82:cd:23:3c:68:c6:67:5d:
                    38:8f:10:50:9f:12:e5:54:34:ae:42:48:95:52:7e:
                    03:cc:5a:4c:17:d7:cd:b7:8f:85:d6:f5:b6:23:a5:
                    b0:c8:89:6c:41:7f:20:2c:20:35:2d:69:de:8f:86:
                    d1:4e:0a:b5:c9:ac:b4:4f:f8:f2:60:f2:92:d7:b1:
                    18:cd:63:24:36:0f:2c:04:ab:5b:24:37:df:12:31:
                    35:9e:99:4f:98:18:69:67:72:38:45:6f:d8:2d:1e:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FF:07:C1:61:78:03:A4:0F:2A:82:81:A8:D5:F6:E3:50:F4:82:93
            X509v3 Authority Key Identifier:
                keyid:BA:AF:E5:A7:BD:34:89:F0:DC:73:84:C8:8D:95:89:54:37:CF:C4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:3a:93:e8:93:7f:27:5b:f7:29:d2:94:d3:75:51:65:96:d1:
         80:f9:d0:af:91:a3:84:d6:64:b8:47:b9:f0:55:f3:43:57:ce:
         06:60:2f:c7:85:38:b8:a5:84:57:48:7b:44:dd:15:d9:07:ae:
         74:e6:d4:a0:b1:3b:d6:b1:42:6b:bb:5f:94:f2:82:d8:63:a2:
         6d:23:44:ff:87:dc:a0:77:a3:5b:93:66:9a:2c:7a:c4:78:b2:
         ab:20:1e:e8:cc:de:6f:eb:b9:e6:f1:e4:08:15:7b:5b:2d:92:
         64:63:10:66:38:d3:0b:54:94:19:4d:fb:ac:12:72:7d:fb:70:
         0c:0b:3f:66:45:db:a0:8e:eb:1d:fe:4e:d7:63:4c:7c:b5:6e:
         45:4a:e5:d3:5b:36:f2:71:e1:85:de:2e:74:ae:7b:95:26:54:
         60:48:d6:07:2c:50:88:dd:b0:06:d3:c6:ba:fd:a0:a6:fa:14:
         d6:0f:94:45:9d:b2:37:86:29:e6:c4:45:e4:ef:59:f2:df:4a:
         10:aa:5d:0b:db:b7:32:b5:25:85:17:7e:5c:d3:e9:dd:d4:12:
         50:7d:46:7a:84:63:97:d4:fb:72:f0:1d:df:e1:86:74:95:7c:
         91:08:76:e2:38:87:da:ed:74:58:05:0c:a6:2d:2b:c6:6e:95:
         17:67:99:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:37 2025 by rpki-client