Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
File:                     E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft (raw, json)
Hash identifier:          iRcU9F0sBuCTs2CZN2gOiOiLlRcpl1BUqY1kp4zvgLk=
Subject key identifier:   0D:D7:39:21:84:12:D0:31:A1:FF:84:AA:3A:0B:1A:C7:58:A0:5A:3A
Authority key identifier: 13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
Certificate issuer:       /CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
Certificate serial:       01901CA1444E95926E724F47C77A7D996138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
Manifest number:          05E6
Signing time:             Sat 15 Jun 2024 16:00:49 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:49 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:49 +0000
Files and hashes:         1: E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl (hash: Cdj6ltPn/6InN/1V02y7K+eCge7QOF2uIw8W0336QSY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:44:4e:95:92:6e:72:4f:47:c7:7a:7d:99:61:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
        Validity
            Not Before: Jun 15 16:00:49 2024 GMT
            Not After : Jun 16 16:00:49 2024 GMT
        Subject: CN=0dd739218412d031a1ff84aa3a0b1ac758a05a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9a:ae:fa:4d:0d:3a:11:fe:7c:a0:4d:dd:26:
                    3a:fc:a0:91:a6:3e:a0:a5:6d:70:05:ff:fe:af:e7:
                    04:a5:63:dd:d6:39:da:9f:04:dd:aa:32:98:2c:6b:
                    27:9d:49:b8:d4:51:9b:2d:14:da:a8:eb:6d:dc:9b:
                    0c:de:4f:0b:f6:80:8c:69:e2:ce:5d:ce:87:ae:eb:
                    78:a1:65:9b:55:0f:0a:06:9f:3c:3f:e1:df:a2:54:
                    20:df:16:c9:76:30:f3:f5:06:49:be:03:65:c0:e2:
                    d5:69:4f:29:b1:3e:c6:46:c5:42:1e:b4:e4:0a:a2:
                    66:db:1f:f7:68:99:52:60:a4:be:0d:11:57:f4:22:
                    bf:77:3c:af:b8:63:26:c3:ad:8d:23:46:83:89:06:
                    65:3d:71:e7:c9:b4:40:e7:9d:7c:2e:77:d6:3d:21:
                    74:24:8d:7c:c7:35:d9:e0:d7:34:64:08:d9:fe:5f:
                    5a:85:73:a5:a5:a5:11:c7:2f:30:bf:67:8a:10:d4:
                    fb:af:b0:cb:09:6d:af:88:9a:c2:25:0a:44:25:9e:
                    70:60:26:22:0b:bb:e7:69:69:08:85:8c:90:13:ff:
                    57:77:4b:28:4c:9f:a5:0e:93:d1:96:ce:e9:da:6d:
                    a6:9e:26:86:50:82:d3:88:63:bb:0b:db:43:24:35:
                    60:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D7:39:21:84:12:D0:31:A1:FF:84:AA:3A:0B:1A:C7:58:A0:5A:3A
            X509v3 Authority Key Identifier:
                keyid:13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:af:96:f4:42:f8:c3:a6:1a:a3:0d:08:ed:59:e9:01:66:cf:
         5d:5c:0f:04:db:75:ab:b3:70:24:c0:cb:34:37:88:b5:60:de:
         5b:e5:07:f9:20:49:e8:f7:1d:ab:ba:8a:c7:60:a7:e0:43:d8:
         29:8b:c7:de:b6:71:6d:d0:99:c9:07:58:0a:2b:e8:63:12:fa:
         95:e5:67:fa:fa:fc:ff:8a:23:c9:a6:7c:82:ec:d1:d2:5f:30:
         5a:38:54:d3:89:37:23:55:a4:0f:75:a3:cb:89:8a:60:55:c3:
         0d:6e:e3:29:e4:f7:89:a7:60:45:3f:46:02:f8:5d:43:04:36:
         9b:d7:f7:a0:b1:5d:dc:c7:3a:42:5b:8e:5b:92:ce:68:d0:e9:
         f7:c0:aa:e4:6c:51:07:35:12:20:66:27:69:70:fb:2e:51:f2:
         9c:cf:8a:b2:bf:99:64:a0:8c:bc:70:d3:82:3d:42:eb:3f:71:
         05:5e:5d:d1:51:ee:c2:b3:72:c5:59:fa:e4:4b:d4:a8:a1:a9:
         75:5b:db:fa:f1:50:1e:c7:09:e8:51:6f:d3:b3:1a:e9:f9:a4:
         33:12:a7:c4:92:7a:ce:12:f9:a0:47:85:da:f0:b2:ef:17:06:
         fd:7b:7f:63:0b:37:c2:1d:b7:19:41:39:dc:54:d2:de:88:a3:
         72:fd:22:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----