Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fb4991-4a83-4d0b-8204-d1046b144092/1/z727p6-4lqBfaa3SSw-XI5LjMjI.mft
File:                     z727p6-4lqBfaa3SSw-XI5LjMjI.mft (raw, json)
Hash identifier:          nctIt3+kmUs0f4qHMD03I/iuA9N4lKe1mxIrWEvgKfY=
Subject key identifier:   AA:51:CB:6E:D5:47:64:05:A1:D0:E7:64:DC:01:1D:BA:04:2C:E9:E9
Authority key identifier: CF:BD:BB:A7:AF:B8:96:A0:5F:69:AD:D2:4B:0F:97:23:92:E3:32:32
Certificate issuer:       /CN=cfbdbba7afb896a05f69add24b0f972392e33232
Certificate serial:       01901DEB0EBB2C24C6B3EAC51D16A2BFCEB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z727p6-4lqBfaa3SSw-XI5LjMjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/fb4991-4a83-4d0b-8204-d1046b144092/1/z727p6-4lqBfaa3SSw-XI5LjMjI.mft
Manifest number:          1170
Signing time:             Sat 15 Jun 2024 22:01:02 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:02 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:02 +0000
Files and hashes:         1: z727p6-4lqBfaa3SSw-XI5LjMjI.crl (hash: izQWQhQBAkFZ2TlA0wxFW5lj+DcLWkEXkjAna+/8seI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/fb4991-4a83-4d0b-8204-d1046b144092/1/z727p6-4lqBfaa3SSw-XI5LjMjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/fb4991-4a83-4d0b-8204-d1046b144092/1/z727p6-4lqBfaa3SSw-XI5LjMjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z727p6-4lqBfaa3SSw-XI5LjMjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:0e:bb:2c:24:c6:b3:ea:c5:1d:16:a2:bf:ce:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfbdbba7afb896a05f69add24b0f972392e33232
        Validity
            Not Before: Jun 15 22:01:02 2024 GMT
            Not After : Jun 16 22:01:02 2024 GMT
        Subject: CN=aa51cb6ed5476405a1d0e764dc011dba042ce9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c4:e1:87:7a:68:ef:89:bf:32:eb:38:e1:01:
                    2a:76:69:99:5c:d3:28:33:ec:06:f4:92:f2:09:e1:
                    8e:b7:a7:8e:c0:7e:2b:8e:31:49:45:2d:4d:2c:3a:
                    74:2f:16:6a:af:f1:de:e9:b8:e9:2a:d1:e2:fb:0b:
                    3a:66:4c:a6:f9:9c:3c:d4:de:1f:1d:6b:52:d0:f3:
                    77:18:3e:97:94:93:ea:93:c9:d8:34:ac:3f:4f:ae:
                    ac:2a:5b:48:54:98:69:0d:5b:c8:c9:01:fd:0f:1b:
                    24:e9:02:90:28:f7:17:ec:d4:6a:36:82:3c:32:13:
                    b5:b1:e7:b4:26:1e:6e:80:28:fd:22:1d:3c:db:7e:
                    cf:81:2b:4b:0f:53:f9:1b:dd:11:6b:c8:29:7f:ab:
                    da:87:84:f7:22:fb:c7:4e:b8:d6:d9:6f:93:fa:27:
                    8f:e4:f7:f4:67:5c:ce:75:b2:cb:40:a9:ff:ac:88:
                    3f:3e:30:1a:7f:ac:9e:7d:8a:03:75:e0:af:3a:e4:
                    e6:8d:35:74:dd:86:f7:f4:66:62:65:74:a0:d4:70:
                    d5:43:91:1c:83:e9:43:8a:3a:ec:82:e1:51:c6:78:
                    4a:05:e1:35:8d:0b:7e:8c:37:09:f4:f3:63:db:64:
                    80:ba:53:ec:69:1a:db:48:2b:89:be:3c:fa:4f:d0:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:51:CB:6E:D5:47:64:05:A1:D0:E7:64:DC:01:1D:BA:04:2C:E9:E9
            X509v3 Authority Key Identifier:
                keyid:CF:BD:BB:A7:AF:B8:96:A0:5F:69:AD:D2:4B:0F:97:23:92:E3:32:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z727p6-4lqBfaa3SSw-XI5LjMjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fb4991-4a83-4d0b-8204-d1046b144092/1/z727p6-4lqBfaa3SSw-XI5LjMjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fb4991-4a83-4d0b-8204-d1046b144092/1/z727p6-4lqBfaa3SSw-XI5LjMjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:76:00:4d:32:13:c0:7f:43:8c:a7:15:32:1a:18:17:ab:9f:
         7f:20:c7:d8:c9:bc:20:a9:30:c7:d4:1f:19:c2:a8:e3:35:73:
         13:8b:08:04:89:75:71:bc:09:9a:d0:21:20:ca:ba:f0:09:04:
         38:4c:0c:02:a9:fa:b2:61:62:be:26:90:1a:78:d8:e4:3c:7c:
         b5:05:79:1f:ed:87:fa:12:6b:f8:0a:87:c5:bc:ac:a4:37:af:
         40:73:ab:16:d3:71:99:7b:1f:65:5a:0a:89:79:50:6f:48:3c:
         ff:7a:e8:b1:31:7f:e7:13:01:6d:b6:4d:38:06:f6:9a:c3:ff:
         32:d3:0c:19:8c:cd:8f:31:db:52:94:03:5c:2f:33:04:f8:6c:
         8e:69:8a:0f:27:47:2a:15:f7:05:d9:2f:68:03:1e:2f:02:de:
         93:d7:d4:64:ec:45:92:4e:60:95:26:3a:c1:ae:ff:6d:fc:c3:
         36:6e:5e:17:60:93:60:4c:a4:78:db:99:49:98:07:52:65:d3:
         7f:88:fc:f3:59:13:f2:af:4e:81:d0:f3:42:37:28:92:11:d5:
         13:fb:bd:6c:11:de:77:7f:1b:42:f7:ce:dc:dc:48:b7:16:46:
         ab:84:2b:cd:c0:23:80:66:cd:c5:c9:94:22:73:54:d7:ca:8e:
         45:f3:b1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----