Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
File:                     H83UEOElAi3gfKWWP5L3jo-JSG4.mft (raw, json)
Hash identifier:          Nw9W3g0JEgpdjhYZQ6dzC8HbwL458/W8Rezz7czO5Ec=
Subject key identifier:   CD:65:94:9E:D7:17:D5:73:FE:EE:1C:25:FF:F4:4E:F9:11:00:50:1C
Authority key identifier: 1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E
Certificate issuer:       /CN=1fcdd410e125022de07ca5963f92f78e8f89486e
Certificate serial:       01901C6A9D76833EDF9EDB52868B89CD9DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
Manifest number:          11C1
Signing time:             Sat 15 Jun 2024 15:01:07 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:07 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:07 +0000
Files and hashes:         1: H83UEOElAi3gfKWWP5L3jo-JSG4.crl (hash: Qd+e2zbhx9arp2rEdISYt5RcZ825N2jp+mT6ODZYmr0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:9d:76:83:3e:df:9e:db:52:86:8b:89:cd:9d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fcdd410e125022de07ca5963f92f78e8f89486e
        Validity
            Not Before: Jun 15 15:01:07 2024 GMT
            Not After : Jun 16 15:01:07 2024 GMT
        Subject: CN=cd65949ed717d573feee1c25fff44ef91100501c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:6c:a6:63:70:f9:54:0e:7f:93:57:e9:cb:
                    45:33:87:a6:64:57:7e:fe:8e:9d:5e:b7:69:01:96:
                    7b:9e:81:83:88:85:5f:b0:cd:ac:d4:68:b6:b1:d7:
                    61:85:ac:ab:02:7b:f8:50:31:67:97:88:52:ad:dc:
                    f6:6e:e7:5e:0e:1c:16:ef:99:65:87:0a:b8:42:c5:
                    1a:8d:98:c2:3a:0a:df:53:bf:b9:63:12:ff:11:b3:
                    c2:8b:63:d0:cb:14:ce:aa:a6:a2:fd:8a:6c:76:0f:
                    12:6a:d9:d9:37:43:11:9e:31:bc:97:50:9e:60:86:
                    81:5d:84:9c:14:99:3a:51:e4:68:c0:6c:75:4e:f3:
                    81:fd:c9:7e:db:9a:b8:46:42:13:0a:c5:67:84:a9:
                    36:9e:2c:8d:6e:79:90:bc:b3:53:c6:20:ad:25:2f:
                    0b:dc:d8:fb:75:1f:1e:63:30:a2:a0:86:01:38:2e:
                    97:02:3a:42:ae:88:d8:e9:1d:00:19:68:46:53:cb:
                    e2:bc:35:e4:81:fe:03:c2:81:64:1c:20:f5:11:d8:
                    79:3a:61:4a:c1:12:22:a6:24:1c:37:05:9e:f7:81:
                    76:fc:69:f7:3d:b1:6a:10:89:43:3e:0c:01:97:69:
                    d1:51:29:18:bc:85:5e:57:58:88:a1:a1:47:24:37:
                    fb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:65:94:9E:D7:17:D5:73:FE:EE:1C:25:FF:F4:4E:F9:11:00:50:1C
            X509v3 Authority Key Identifier:
                keyid:1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c9:e0:97:7f:53:c3:66:93:9f:9b:81:37:1e:db:43:ec:ea:
         61:a9:92:20:6e:ea:bb:3f:52:48:9c:82:31:2c:24:15:43:d4:
         46:d9:4a:9f:22:25:95:83:20:74:e2:dc:e4:73:9c:fa:18:9e:
         3d:f1:dd:de:c8:75:24:76:31:d3:83:14:13:0a:ba:e9:4d:5c:
         49:42:75:26:26:e2:45:35:a0:19:0d:df:fe:e6:9a:35:76:af:
         39:80:5a:da:df:e2:27:fb:f8:72:db:98:9c:10:cf:9c:16:e2:
         35:de:be:bf:1e:a5:46:51:8a:f1:f4:4a:a7:d8:7c:ed:fc:be:
         4e:bc:62:f5:7a:de:a3:f7:ca:86:0d:5f:95:e5:9e:b3:1f:e7:
         9e:f0:87:a5:d5:d7:8e:c6:46:04:3e:8d:8f:a4:a2:9c:d2:fd:
         0d:6e:59:ce:8e:57:7e:9f:32:07:62:21:fa:9b:7e:8e:01:88:
         ce:90:7f:c4:f1:a4:48:f9:f8:28:38:20:f9:1a:8f:0c:a7:00:
         97:ba:ce:69:2f:db:3c:b5:b3:1c:05:94:fe:43:e9:4e:cf:a5:
         92:9b:fb:90:bd:86:b1:2a:40:06:c2:91:05:59:84:2a:e4:58:
         0b:ec:75:28:d6:f9:2a:b8:ea:11:0e:06:9f:29:c7:c1:08:fa:
         a8:fa:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----