Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
File:                     1R31-9viXy1eU4x53RjD1sQualU.mft (raw, json)
Hash identifier:          8zJfdZFkh8eW2zHoEa0OuTXBboKJZkl3Ssde7o4RXiQ=
Subject key identifier:   3D:51:7E:A8:47:C7:70:79:22:76:E4:80:CC:BA:BA:B0:91:07:2E:48
Authority key identifier: D5:1D:F5:FB:DB:E2:5F:2D:5E:53:8C:79:DD:18:C3:D6:C4:2E:6A:55
Certificate issuer:       /CN=d51df5fbdbe25f2d5e538c79dd18c3d6c42e6a55
Certificate serial:       01901D45DD7CD387AAD498D14D7E0E0C4FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
Manifest number:          11C1
Signing time:             Sat 15 Jun 2024 19:00:36 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:36 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:36 +0000
Files and hashes:         1: 1R31-9viXy1eU4x53RjD1sQualU.crl (hash: kZ+8GLJYxTGfePU2eYlet0awI3SBD5edqduOU6fdjQo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:dd:7c:d3:87:aa:d4:98:d1:4d:7e:0e:0c:4f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51df5fbdbe25f2d5e538c79dd18c3d6c42e6a55
        Validity
            Not Before: Jun 15 19:00:36 2024 GMT
            Not After : Jun 16 19:00:36 2024 GMT
        Subject: CN=3d517ea847c770792276e480ccbabab091072e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:5c:41:60:e3:35:b7:34:36:76:44:1b:d4:
                    73:ac:10:c7:a8:e8:06:75:f8:6f:01:ac:ee:ba:2d:
                    3c:28:c1:97:e5:0e:5c:e4:ed:44:84:10:dd:f8:d4:
                    28:03:31:77:4a:e0:f2:8e:94:09:95:db:28:ee:9b:
                    a8:da:48:f5:9c:3e:8e:8b:51:c6:15:46:36:53:06:
                    72:b6:82:bc:ec:54:ab:9f:ec:33:e8:7e:a8:27:92:
                    91:37:43:ba:8d:b4:54:80:54:29:de:ab:3f:0b:09:
                    26:6c:e9:b4:6e:9f:ea:51:ce:53:f4:1f:0c:5c:dc:
                    f5:3e:d4:21:51:5d:ee:00:e0:74:38:32:7b:1c:d6:
                    5b:1b:42:3b:b6:dc:75:a8:6e:7e:68:e2:fa:ee:9f:
                    3f:0c:66:7f:dc:1c:33:f8:0f:50:c7:b3:b7:8f:28:
                    5c:5b:1e:93:c1:90:de:9b:76:9d:4d:48:ed:6c:86:
                    14:b9:08:b3:35:db:42:79:d7:20:ee:cb:e7:d3:be:
                    0e:dd:26:cc:9b:11:a6:cb:3a:3c:af:35:e8:87:65:
                    cb:9b:be:d1:51:5e:28:c1:50:3e:78:16:9f:c2:9b:
                    fb:98:39:64:97:34:c4:1e:be:d9:34:71:6f:e0:98:
                    9b:27:3c:4b:40:15:74:b7:e1:ed:51:ed:15:6e:12:
                    41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:51:7E:A8:47:C7:70:79:22:76:E4:80:CC:BA:BA:B0:91:07:2E:48
            X509v3 Authority Key Identifier:
                keyid:D5:1D:F5:FB:DB:E2:5F:2D:5E:53:8C:79:DD:18:C3:D6:C4:2E:6A:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:cb:83:42:97:c6:56:74:a7:56:90:b6:93:d2:48:1e:07:e8:
         30:c4:b8:c9:31:65:6c:82:7e:7e:bd:38:f5:1c:a9:fe:64:cd:
         38:36:b0:02:22:5d:3c:f2:bd:fc:77:2a:3a:5f:f8:01:ee:81:
         17:11:dc:ac:0f:1d:02:7c:fd:67:5d:99:0a:2a:e4:aa:73:78:
         2e:ec:15:34:eb:c5:55:30:36:8f:83:5e:39:83:29:dd:62:b1:
         04:c1:97:47:67:3a:67:dc:32:19:2e:7c:57:f0:f3:97:93:f4:
         4d:fe:53:e7:a5:33:43:cf:db:72:d2:e9:2a:6c:42:2e:ab:ff:
         5c:ee:b1:39:ee:1e:3f:a1:3f:42:05:65:fa:b1:49:5d:af:c1:
         6d:1c:d7:4d:0d:c2:ac:16:71:74:aa:eb:ff:a4:ff:18:0a:e2:
         38:3f:87:ce:4f:6e:68:60:93:a4:2c:5b:3e:65:2b:0a:72:9a:
         6a:b2:cd:3e:de:bb:50:ff:37:c3:2c:df:0b:5a:0a:ad:2a:e2:
         63:71:35:57:09:56:37:ff:1d:19:c7:8c:5a:b9:c2:a5:54:59:
         7f:17:9d:c8:cd:e3:51:cc:69:67:22:a1:25:5a:87:44:38:67:
         ef:f7:c7:66:b6:97:da:82:47:e4:51:53:00:8a:41:03:0e:c5:
         53:fb:15:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----