Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
File:                     duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json)
Hash identifier:          UP39u0yuQ8tn1OMMwnFGg8lyvIfNlwl0ABRWaBZypZk=
Subject key identifier:   B9:46:1E:54:EE:F6:C9:0F:DC:9F:B2:2D:AB:FD:92:8B:A9:CB:D4:59
Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
Certificate issuer:       /CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Certificate serial:       01901CD8AA7C52E63B5638CE60182720F5F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
Manifest number:          1153
Signing time:             Sat 15 Jun 2024 17:01:19 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:19 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:19 +0000
Files and hashes:         1: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: dcFj+sLYq1xOl1Pu5kHBTtwoI9dr14EmAyoz3fXHA60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:aa:7c:52:e6:3b:56:38:ce:60:18:27:20:f5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88
        Validity
            Not Before: Jun 15 17:01:19 2024 GMT
            Not After : Jun 16 17:01:19 2024 GMT
        Subject: CN=b9461e54eef6c90fdc9fb22dabfd928ba9cbd459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:17:b8:eb:9b:c1:f7:9d:77:99:77:17:1d:96:
                    c5:09:1c:82:4c:3c:ba:65:23:05:3b:1c:4f:8e:1d:
                    64:7f:37:7c:9a:3c:86:9f:46:6e:11:73:01:eb:38:
                    e2:88:d1:15:77:41:aa:4d:8f:2a:17:b5:d5:88:f5:
                    d2:3e:6a:7c:75:e1:87:31:fb:93:45:41:a1:8f:db:
                    bc:3a:dd:6f:6b:53:11:14:19:e9:be:96:01:d8:5b:
                    12:a5:10:bc:a6:bd:c4:4b:48:f7:04:86:6c:91:a0:
                    f4:fc:3e:d7:a1:eb:87:99:8d:c3:92:97:ac:90:a8:
                    0b:1c:0f:49:6b:65:af:74:66:66:ca:4b:9e:a2:b6:
                    93:aa:d9:44:b5:9a:83:88:27:a2:14:6b:57:fe:9e:
                    b4:ec:b4:77:74:5d:f7:86:06:e1:6e:73:a2:08:0b:
                    db:fb:98:5c:76:c6:24:35:a8:97:aa:e2:93:77:c6:
                    3d:e1:28:b3:66:82:b6:ee:40:11:b8:9a:bb:fd:93:
                    56:50:3c:78:d9:d9:cd:62:08:ab:ab:70:54:22:84:
                    40:7c:c3:a2:24:bd:4d:b9:ea:be:d4:b5:a9:70:eb:
                    bd:b0:ff:28:a5:36:1e:6d:46:ad:55:f0:77:19:2d:
                    b0:d0:62:fd:a6:b3:1d:ad:80:91:fc:7b:7d:ed:df:
                    89:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:46:1E:54:EE:F6:C9:0F:DC:9F:B2:2D:AB:FD:92:8B:A9:CB:D4:59
            X509v3 Authority Key Identifier:
                keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e2:4c:df:15:d8:d1:d2:66:eb:fa:cc:b3:a5:d8:2d:e0:12:
         80:5e:16:ce:c3:ee:22:a3:03:29:99:79:0e:96:03:39:3f:9d:
         74:79:5d:ed:62:77:c4:70:b7:48:f6:88:ca:6c:7b:7a:d0:05:
         35:26:bb:fe:05:e8:8d:f3:de:8f:bd:74:08:a2:c5:55:35:0d:
         3a:e5:22:06:18:88:97:f5:db:f0:b2:ed:d5:dc:9a:2d:b8:7b:
         72:67:ed:8b:c3:eb:c4:b8:67:b4:4c:00:2a:27:bc:b2:a1:f0:
         3a:fe:11:24:7d:45:0b:75:c1:91:e3:bb:30:b6:26:a6:73:7a:
         00:51:0f:48:86:60:4c:f7:3b:c1:51:e4:cb:e1:ab:5a:b1:52:
         7e:94:55:c7:b2:f0:bd:82:e2:d8:11:93:dc:a6:45:86:22:32:
         87:6e:37:78:5c:a7:cd:9b:4a:f9:a3:3c:68:cf:bd:b6:34:57:
         ec:6b:c2:a4:4f:55:df:07:dc:58:3d:f6:c2:9e:22:70:84:e4:
         f2:47:66:cb:48:a9:ad:65:51:83:26:7b:18:04:a5:53:a8:9b:
         0f:97:93:e0:70:0d:72:fa:0a:5f:ae:b6:65:41:e9:ba:83:0d:
         77:82:21:be:43:db:98:d8:ac:d2:47:ac:a1:06:80:61:23:1b:
         9b:c6:f0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----