Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6cb43f-6a32-4fbe-a3b1-0a5503b26641/1/iVrm8kUpE20rhWpyZ5cmR-4jgm8.mft
File:                     iVrm8kUpE20rhWpyZ5cmR-4jgm8.mft (raw, json)
Hash identifier:          dov534A0g2Xbz5p0RdX0r+NXhJ9ftpDDrRBI8me6YJk=
Subject key identifier:   66:08:BF:BD:4A:E2:7D:B2:56:B5:CF:A2:D9:33:79:BA:59:1E:05:3E
Authority key identifier: 89:5A:E6:F2:45:29:13:6D:2B:85:6A:72:67:97:26:47:EE:23:82:6F
Certificate issuer:       /CN=895ae6f24529136d2b856a7267972647ee23826f
Certificate serial:       01901D0F63A537A889EFEFC9110466B77F2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVrm8kUpE20rhWpyZ5cmR-4jgm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/6cb43f-6a32-4fbe-a3b1-0a5503b26641/1/iVrm8kUpE20rhWpyZ5cmR-4jgm8.mft
Manifest number:          0191
Signing time:             Sat 15 Jun 2024 18:01:05 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:05 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:05 +0000
Files and hashes:         1: iVrm8kUpE20rhWpyZ5cmR-4jgm8.crl (hash: Dcf5Zql5xU1hwIMw8uo/15RKZOoeDGuYzcRjorrfJAY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/6cb43f-6a32-4fbe-a3b1-0a5503b26641/1/iVrm8kUpE20rhWpyZ5cmR-4jgm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/6cb43f-6a32-4fbe-a3b1-0a5503b26641/1/iVrm8kUpE20rhWpyZ5cmR-4jgm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iVrm8kUpE20rhWpyZ5cmR-4jgm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:63:a5:37:a8:89:ef:ef:c9:11:04:66:b7:7f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895ae6f24529136d2b856a7267972647ee23826f
        Validity
            Not Before: Jun 15 18:01:05 2024 GMT
            Not After : Jun 16 18:01:05 2024 GMT
        Subject: CN=6608bfbd4ae27db256b5cfa2d93379ba591e053e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8d:f8:b5:4a:46:0b:a2:75:f9:81:47:d4:1f:
                    f0:2d:81:49:88:16:e8:26:96:c7:98:ae:b1:25:5f:
                    67:01:4c:2f:c8:ba:f3:c5:f4:f1:51:7c:61:d3:3b:
                    d2:ce:eb:e0:2b:7f:02:ac:41:59:79:67:a5:1d:22:
                    44:27:38:fd:fb:8c:cc:8b:75:2f:25:39:8c:7c:d0:
                    04:08:5c:37:48:e1:9a:6c:55:be:1c:e4:64:3b:3a:
                    8d:f6:16:07:f8:3b:cd:b0:d5:5f:11:47:f6:9f:17:
                    5d:f1:1e:cc:a5:38:c1:59:d3:1a:f0:65:a5:c8:73:
                    6d:63:e8:cd:e2:bb:72:93:84:07:f7:4c:41:3b:78:
                    39:be:7d:1b:4c:b9:43:55:f9:4d:7b:ba:35:14:d5:
                    20:47:77:d6:e0:43:29:e2:03:fc:22:00:74:8c:df:
                    f7:2b:97:9f:92:72:40:13:91:80:b8:dd:ba:f6:18:
                    b9:1a:cb:b4:e6:12:b9:d0:00:90:c0:ab:41:99:52:
                    5f:78:29:f9:c0:1e:86:6a:77:cc:bc:d7:91:f1:34:
                    79:da:0a:2c:b8:70:06:f7:03:e9:4f:40:22:21:1a:
                    1e:ed:06:58:27:bf:6b:7b:1e:35:3b:48:2b:ca:39:
                    22:42:53:c0:ee:41:99:3c:04:57:c6:33:81:29:de:
                    97:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:08:BF:BD:4A:E2:7D:B2:56:B5:CF:A2:D9:33:79:BA:59:1E:05:3E
            X509v3 Authority Key Identifier:
                keyid:89:5A:E6:F2:45:29:13:6D:2B:85:6A:72:67:97:26:47:EE:23:82:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVrm8kUpE20rhWpyZ5cmR-4jgm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6cb43f-6a32-4fbe-a3b1-0a5503b26641/1/iVrm8kUpE20rhWpyZ5cmR-4jgm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6cb43f-6a32-4fbe-a3b1-0a5503b26641/1/iVrm8kUpE20rhWpyZ5cmR-4jgm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f6:4c:3a:87:c6:88:9f:61:97:fc:51:89:bb:ea:32:1f:c9:
         4a:f0:a9:ec:a3:eb:00:40:8f:0c:23:53:20:75:29:40:fd:82:
         23:21:c7:c2:ee:8c:57:20:2d:14:e6:dd:91:c5:72:4b:22:3f:
         0a:e8:3e:a6:1e:4e:3c:c5:57:65:99:a2:55:38:98:00:29:e4:
         1d:92:79:11:99:33:b0:ac:8d:96:6e:c5:07:37:0a:84:45:59:
         be:ef:56:59:7c:32:49:9e:d7:62:08:b4:b1:f5:2e:28:40:52:
         d6:0e:f3:c0:d6:3b:25:3c:a5:6a:ea:c5:01:9f:5f:c8:44:7b:
         ee:36:b4:92:ee:f8:e3:f2:ca:15:e6:f3:f5:b7:4f:ca:f2:46:
         3d:b3:10:6c:14:5f:ee:ea:51:39:b7:b9:85:77:6f:ae:66:ae:
         9b:dd:1f:17:68:bb:e7:85:de:4c:91:46:93:c8:22:f7:b2:f5:
         35:bc:34:b9:f8:6a:40:eb:bc:a7:39:8b:71:d4:c9:5e:3c:d4:
         1f:79:fc:08:14:3d:d7:a9:07:54:df:d1:fc:15:e6:7a:e7:10:
         e2:5a:ee:3e:99:5c:53:bd:60:1e:05:de:f3:71:d9:a3:2b:3d:
         7f:88:13:08:3b:52:0d:9e:13:f3:6e:e0:3c:e5:b9:7e:3c:5c:
         50:95:dd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----