Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
File:                     eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft (raw, json)
Hash identifier:          tqIXy2i/fsb8srOjfHYZRcuDedDaWapvB+FFUzE7IWU=
Subject key identifier:   FF:1C:A9:C3:E5:EA:89:7A:A3:B0:E2:3F:75:26:C2:59:83:3D:A8:15
Authority key identifier: 79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F
Certificate issuer:       /CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
Certificate serial:       01901C6AA86431744E66C864412AE563037F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 15:01:10 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:10 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:10 +0000
Files and hashes:         1: eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl (hash: 9P65NKi3rQsfISwehHEzjqsSv9YtubXQhaBjDsvQMDk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:a8:64:31:74:4e:66:c8:64:41:2a:e5:63:03:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
        Validity
            Not Before: Jun 15 15:01:10 2024 GMT
            Not After : Jun 16 15:01:10 2024 GMT
        Subject: CN=ff1ca9c3e5ea897aa3b0e23f7526c259833da815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:ee:1c:31:33:ff:e6:5e:42:ca:1a:aa:4f:
                    8c:f3:b3:c5:c6:60:47:d3:27:c6:11:d7:f8:b9:31:
                    2f:24:46:ee:05:ec:fb:64:f0:ec:67:18:34:26:ac:
                    79:29:00:1f:5d:bb:62:70:78:90:f4:ec:51:54:39:
                    1f:a3:c2:64:62:3c:cb:6c:f0:a8:19:5b:df:e9:b6:
                    19:dc:58:6b:0e:44:4f:dc:05:7d:5d:fe:0c:c5:e1:
                    69:34:03:64:4b:11:a5:e0:21:d4:13:33:46:ee:d1:
                    3e:c8:ab:c4:a2:66:f0:5e:ba:28:66:4d:91:61:bc:
                    69:bc:10:ef:62:2c:2d:5f:91:02:74:52:a7:ac:63:
                    7a:26:28:57:02:c9:90:93:9b:31:0a:a5:77:c3:db:
                    b5:4f:e6:06:52:d2:3e:b0:d9:e5:1b:4e:fa:e6:eb:
                    8f:30:9e:bd:19:4c:64:24:f9:e5:9b:92:22:be:e2:
                    8e:8c:57:8a:0a:7e:fc:f3:4d:49:23:d0:cc:fa:81:
                    7d:ef:7f:e2:c4:53:d9:af:2d:d8:cf:d3:4a:61:ee:
                    b5:2c:9d:08:c0:6a:71:37:d6:53:90:8c:32:b8:8f:
                    dc:67:57:25:17:2c:2a:c6:b1:59:4f:19:57:a6:18:
                    28:7e:e2:72:aa:03:5f:e5:3c:06:ac:10:62:d3:32:
                    2f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1C:A9:C3:E5:EA:89:7A:A3:B0:E2:3F:75:26:C2:59:83:3D:A8:15
            X509v3 Authority Key Identifier:
                keyid:79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:03:7a:64:df:c8:7f:6c:4c:46:08:0b:fa:05:6f:00:83:80:
         c8:d9:d9:e0:26:a8:46:ae:9a:44:76:4d:65:77:27:e6:2c:97:
         f1:34:b1:00:9d:f6:d5:9b:c1:15:15:4d:43:dd:3f:77:52:6d:
         dc:68:75:88:79:07:ac:7c:4b:bf:6b:89:4f:d4:e4:99:9f:ec:
         3d:41:f0:b5:86:1c:e8:7d:fc:bc:79:37:3e:15:a4:32:ce:db:
         18:17:b0:9d:fb:50:a8:57:fa:0a:4c:9a:5c:b8:93:fc:5f:46:
         bc:12:6f:74:ea:10:f1:cc:5d:1c:83:62:39:65:07:85:d5:e0:
         fd:15:7f:14:85:f9:35:43:b7:29:71:4b:8d:ff:10:45:b3:83:
         e9:86:1c:ea:b0:6d:85:0c:d8:11:75:7d:70:80:3d:36:74:c4:
         df:aa:11:bc:4a:4d:c7:8d:80:50:7e:24:68:14:c7:d1:9d:7b:
         77:c2:7d:16:94:c0:6d:b4:b8:99:22:8c:55:98:38:a8:6c:16:
         09:07:57:62:f3:09:b9:7b:c2:ff:a9:64:28:00:cf:6d:a2:ca:
         ef:92:d1:f5:aa:9f:04:41:7d:63:45:a2:1e:d6:0d:ce:7a:7f:
         d7:8e:d0:4c:2b:19:ec:f0:a7:05:85:7b:bd:c9:0d:49:e4:9e:
         5b:70:a3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----