Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
File:                     y92Il7O48S4yaeHZHBXqtLNHkHA.mft (raw, json)
Hash identifier:          w5N1wmuWc1URJjSvPfWxUB7Cij6HcHnuO1H1W90H2rc=
Subject key identifier:   38:30:89:CC:3F:85:55:2C:D9:46:A9:C0:EE:FF:26:C6:39:AB:B6:A0
Authority key identifier: CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
Certificate issuer:       /CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Certificate serial:       01901DEBCAF1259CB6686460CC0EB58B8311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
Manifest number:          08CB
Signing time:             Sat 15 Jun 2024 22:01:50 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:50 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:50 +0000
Files and hashes:         1: y92Il7O48S4yaeHZHBXqtLNHkHA.crl (hash: jJenxMm5AETIb6fVoBuvONektWQBNW5ItqRAFEtLCZA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:ca:f1:25:9c:b6:68:64:60:cc:0e:b5:8b:83:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
        Validity
            Not Before: Jun 15 22:01:50 2024 GMT
            Not After : Jun 16 22:01:50 2024 GMT
        Subject: CN=383089cc3f85552cd946a9c0eeff26c639abb6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:71:bd:76:03:44:e2:19:25:53:30:6c:2c:53:
                    c7:c5:bf:4c:1e:dd:75:c0:aa:9a:8b:d8:79:6f:35:
                    59:34:2d:76:5a:17:cf:6d:79:03:83:06:c5:fe:ca:
                    76:a5:76:7b:f4:a5:14:0e:19:0c:9a:33:3a:24:0c:
                    ea:58:40:44:fc:3d:32:07:c5:d6:c4:68:e2:81:25:
                    f0:ad:4b:a6:41:01:f4:d8:09:5a:d8:c1:90:6d:76:
                    39:c9:30:a6:4a:79:fb:5e:ad:59:a5:96:39:5d:42:
                    28:94:44:03:56:a2:36:cf:c7:ad:b6:d3:cf:8a:48:
                    d4:4b:bd:63:93:ab:e7:96:f8:d9:aa:47:ac:d1:b7:
                    a3:66:ec:60:47:98:3a:16:43:da:1c:50:88:9c:b2:
                    6f:99:56:eb:3e:5b:79:ba:95:eb:11:ae:bf:04:86:
                    9f:e2:19:6e:8a:22:08:2c:41:96:4d:1a:1e:e8:fb:
                    0e:5e:fc:aa:ef:1c:e5:27:2c:c3:97:52:37:b1:a6:
                    b8:5f:4e:d1:53:d0:c1:1e:1c:39:9f:93:0a:8d:ff:
                    8a:06:29:34:85:0c:08:0f:cd:56:2f:57:c7:7f:12:
                    13:77:f1:45:2b:e8:64:a0:11:65:97:ce:dc:82:59:
                    de:8d:80:24:e5:fb:c3:e2:c5:dd:01:a1:08:f0:2b:
                    56:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:30:89:CC:3F:85:55:2C:D9:46:A9:C0:EE:FF:26:C6:39:AB:B6:A0
            X509v3 Authority Key Identifier:
                keyid:CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:04:6f:dd:c5:93:1f:5f:14:f8:da:f7:ce:51:a5:4f:0e:c9:
         a3:a8:b4:64:11:93:9a:30:a2:3e:fc:09:8e:97:5d:b8:a9:e9:
         1c:3f:fb:dd:a4:7e:4a:5f:a5:a7:f2:73:2f:dc:d2:2a:9c:9d:
         0f:50:f9:30:c8:2d:fa:1c:6e:55:ad:cd:a7:55:0a:f4:72:98:
         1c:09:0d:a1:78:86:9a:7c:52:6a:46:a4:b3:7d:1c:92:5f:3f:
         d9:89:ce:2d:4e:a7:47:c3:ed:20:9f:c9:38:53:20:77:f3:e1:
         f1:37:5e:bb:a7:a8:d9:fd:69:d5:70:c8:33:27:9f:d0:5b:0f:
         77:13:9a:7a:63:0e:f4:16:5c:84:35:ca:47:a4:56:8e:df:f4:
         76:0d:50:6e:df:89:23:5c:a6:a7:61:32:36:23:c4:81:e6:67:
         d5:d9:a0:b5:32:5c:d4:41:95:72:df:96:91:e7:a2:c0:d0:96:
         e7:63:94:0d:88:99:56:39:2a:8e:4b:d9:d9:81:93:f6:52:59:
         f7:60:3f:29:e8:b1:85:fc:3c:16:32:6a:b3:18:17:f5:88:5d:
         25:35:bc:12:3a:03:b0:d5:19:07:84:0a:e7:d8:90:cd:4a:39:
         f8:a5:f4:a1:d7:4a:f9:59:dd:68:ec:cf:f8:f0:02:00:95:6e:
         62:84:0e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----