Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
File:                     e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json)
Hash identifier:          incADUmJR9KL3I2N1ot5S8lWbIlbhOXHDyuXT0zQwC4=
Subject key identifier:   DC:F8:EA:D0:B8:8A:34:82:37:F5:7A:11:1C:EF:A9:B9:AD:09:A1:87
Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
Certificate issuer:       /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Certificate serial:       01901DECB7E994B6B80EB2A79989F87B6908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
Manifest number:          11C0
Signing time:             Sat 15 Jun 2024 22:02:51 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:51 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:51 +0000
Files and hashes:         1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: y+IfL7zMIMUV+SH+6UgM3zQe0435LC5bk5NbhCh0i34=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:b7:e9:94:b6:b8:0e:b2:a7:99:89:f8:7b:69:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
        Validity
            Not Before: Jun 15 22:02:51 2024 GMT
            Not After : Jun 16 22:02:51 2024 GMT
        Subject: CN=dcf8ead0b88a348237f57a111cefa9b9ad09a187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f2:92:6a:19:94:d0:32:fb:d7:ae:27:92:fc:
                    12:0b:ce:80:10:46:79:eb:8e:36:cf:f1:9a:a3:04:
                    6e:47:0d:fc:f8:28:5f:2f:00:e0:57:b5:51:57:8a:
                    f4:ce:63:6c:a8:4d:70:ca:1e:dd:51:ad:e2:af:ca:
                    d1:08:d9:20:30:16:44:8b:90:85:26:87:c3:b3:7e:
                    8c:6e:0a:b5:f4:d3:06:e4:82:df:51:c3:e4:a9:c5:
                    0c:3a:55:1c:27:51:9c:e1:5d:33:6d:22:a4:2d:14:
                    d5:64:62:1c:13:20:28:5d:8c:73:6e:e4:24:ea:80:
                    2c:d1:ab:b4:0c:51:9d:2e:18:b8:1f:ca:75:01:95:
                    ce:19:91:06:cf:c8:93:d1:fc:45:57:8d:fc:13:ed:
                    de:b2:c9:64:48:65:d0:1e:cb:19:90:b3:c2:c6:de:
                    92:52:e7:6a:0e:d9:08:1c:51:8a:40:74:b4:b8:d3:
                    02:50:4e:78:ca:e0:22:d9:48:64:0f:0f:b8:9a:19:
                    ce:33:5a:5c:a2:b7:ad:79:34:27:ad:8f:20:a2:7e:
                    75:3c:8a:15:66:09:48:e9:e8:51:6d:14:84:f2:28:
                    34:19:b0:ca:57:65:c9:2d:a4:49:c2:bb:8c:18:82:
                    fa:73:1f:c4:fe:ad:b0:a0:03:ef:77:cd:fc:f7:17:
                    40:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F8:EA:D0:B8:8A:34:82:37:F5:7A:11:1C:EF:A9:B9:AD:09:A1:87
            X509v3 Authority Key Identifier:
                keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:1f:f5:33:42:0b:c9:87:2e:d7:b1:9d:9c:bb:47:d4:9d:e8:
         0c:6f:13:9f:af:82:7a:92:90:07:24:54:7b:10:72:4b:0a:46:
         7c:ae:a0:67:e3:d9:4a:de:02:09:14:cf:a8:5b:e1:37:79:9e:
         1a:06:35:3c:f9:39:d0:a4:c3:1c:8a:f4:3c:19:7e:ce:f3:fa:
         b9:00:c4:c5:fb:65:d7:7f:06:ec:66:33:f6:c5:24:bf:ce:de:
         5f:86:65:56:96:6f:c3:17:18:84:ce:db:28:32:72:f6:50:5e:
         19:d3:f6:fa:39:b1:89:65:4a:9e:a7:48:41:4a:78:63:b8:5b:
         bc:e2:0b:82:29:be:3b:b9:49:8f:3b:0c:83:d3:78:54:94:55:
         5b:24:56:c1:1c:be:60:d8:19:60:9b:63:16:1c:07:43:15:4f:
         49:fa:00:22:47:38:a7:67:83:34:05:7e:43:91:9a:44:eb:f1:
         06:03:ad:b5:d7:11:52:0a:ed:94:d3:a9:2f:d1:13:a6:92:a8:
         37:c9:69:61:8c:e7:42:e8:15:04:ed:a1:c1:ed:c8:58:c9:e1:
         0d:03:90:5f:87:c0:dd:41:dc:25:df:2f:6c:01:6f:09:fb:00:
         ec:2a:f6:14:e8:a5:1c:be:0c:85:07:02:04:17:5f:b8:f2:d9:
         10:86:9f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----