Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File:                     1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier:          XUb5WWki+J2phNBGQnykMUa/Z0MLx7c9iLbgJHqJmCY=
Subject key identifier:   77:6F:4B:E8:D4:09:9B:18:57:BB:46:F2:B8:41:CB:CB:0E:C9:81:DD
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer:       /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial:       01901CD877657DA87907AF8393DE32C846B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 17:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:06 +0000
Files and hashes:         1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: 8m4XDLH6N9mK4FN8Tk3lcKv+7Y+b8IQyBfxguWqCX7k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:77:65:7d:a8:79:07:af:83:93:de:32:c8:46:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
        Validity
            Not Before: Jun 15 17:01:06 2024 GMT
            Not After : Jun 16 17:01:06 2024 GMT
        Subject: CN=776f4be8d4099b1857bb46f2b841cbcb0ec981dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d0:ed:9e:07:3a:e3:14:70:b3:02:f8:46:1b:
                    87:31:82:54:e6:5e:a7:80:e4:3e:1e:b3:c3:7c:60:
                    87:9b:6d:da:42:a7:f2:a4:5b:f9:79:9f:66:99:d5:
                    83:81:82:07:20:e4:db:e9:14:ca:18:70:5a:b6:18:
                    99:26:e6:00:1a:10:29:48:12:12:5d:f9:bb:7f:61:
                    e3:2b:be:9d:90:1c:7f:34:69:b2:ae:fa:5c:77:01:
                    b1:d1:93:88:44:8d:f0:31:28:cf:e8:24:6f:95:f8:
                    68:0b:1c:6a:c6:69:d0:11:1f:2e:f3:6a:0c:34:5c:
                    72:25:b9:2d:a9:f0:1a:e2:58:db:22:a4:24:a7:18:
                    6a:d8:a0:b8:a7:4c:d9:14:08:bb:32:b6:dd:9f:20:
                    8f:dd:03:fe:2b:d3:ce:16:05:87:ae:c8:24:74:95:
                    a8:18:fc:a6:57:f5:f5:6c:a0:01:51:9c:96:c7:6e:
                    78:52:de:06:44:9c:19:19:1c:dd:7c:2a:fb:fb:ed:
                    e8:97:93:9c:b2:78:a0:c8:82:97:63:89:0a:fd:94:
                    c1:24:c2:2d:24:6a:2d:fb:f0:bf:22:8d:9f:8d:ce:
                    bb:5c:ee:48:00:d5:d8:23:95:03:83:b7:88:a3:c5:
                    88:0e:81:e0:86:25:ef:c1:5c:05:a8:d3:0d:6e:79:
                    d2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6F:4B:E8:D4:09:9B:18:57:BB:46:F2:B8:41:CB:CB:0E:C9:81:DD
            X509v3 Authority Key Identifier:
                keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a0:d5:ce:03:e6:2e:d4:a8:24:50:16:ce:c8:73:1d:6e:8f:
         55:5a:2e:ed:7f:97:8f:88:23:7c:4a:4c:61:09:93:93:db:f9:
         9d:d3:7d:d5:1f:f7:a4:23:ab:dc:ca:43:6e:fb:3a:a8:e9:01:
         4a:ff:af:6d:a9:88:33:d1:86:af:74:47:6f:cb:25:f9:fb:9b:
         56:5a:c0:bd:5f:2c:bc:71:7f:87:4d:43:33:37:2a:41:18:1a:
         ac:67:a2:98:5b:39:d3:0b:de:7c:61:bb:41:a8:dd:0b:fe:bc:
         ac:30:ab:7f:74:c0:3f:55:cf:3f:1d:8e:16:b1:a9:01:ac:c2:
         fa:96:d9:b2:f3:26:fc:62:96:5b:08:93:5c:f7:19:9a:76:37:
         3e:68:fc:6e:82:6c:46:7f:b5:df:a8:27:86:d6:a6:97:63:a7:
         2a:28:d1:de:01:35:97:ef:28:35:8c:25:5d:fd:f0:28:a8:1e:
         6a:f7:14:3c:ff:7c:42:a0:db:16:ac:e2:f3:1d:ee:59:e0:65:
         f0:3d:2b:a0:52:b9:be:32:89:de:e6:fd:9d:79:ad:c0:8e:5b:
         d8:c0:a4:b1:d0:a8:0e:66:88:6a:2a:b3:64:fd:9f:e1:4e:f8:
         c1:76:0f:5e:d0:f3:de:f7:36:02:c2:69:73:36:a8:91:66:5f:
         11:cf:81:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----