Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
File:                     mXZKyKibCft4hQ10xo4dqo8-KvE.mft (raw, json)
Hash identifier:          vjUsDBb5hs9KKiigTOinsE7jllIBsTRLq2Zb/wjAUgw=
Subject key identifier:   16:5B:D1:0F:33:9F:E0:3B:4F:FD:63:C3:DE:76:24:A5:B3:53:A3:A9
Authority key identifier: 99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
Certificate issuer:       /CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
Certificate serial:       019033974C38D8113FB785B7D66C1CCC8274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
Manifest number:          03E4
Signing time:             Thu 20 Jun 2024 03:01:11 +0000
Manifest this update:     Thu 20 Jun 2024 03:01:11 +0000
Manifest next update:     Fri 21 Jun 2024 03:01:11 +0000
Files and hashes:         1: mXZKyKibCft4hQ10xo4dqo8-KvE.crl (hash: dJMu7fsCX6frBWZPYMTkiPsZRTH1VPlj6FirMCiyCAs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:97:4c:38:d8:11:3f:b7:85:b7:d6:6c:1c:cc:82:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
        Validity
            Not Before: Jun 20 03:01:11 2024 GMT
            Not After : Jun 21 03:01:11 2024 GMT
        Subject: CN=165bd10f339fe03b4ffd63c3de7624a5b353a3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:f5:d7:64:66:c5:f3:d4:20:6d:ce:4e:56:
                    be:24:3b:33:f5:ec:78:a0:24:3a:88:9b:d7:25:96:
                    9a:ca:96:13:64:87:90:ff:13:2e:a9:28:76:d4:55:
                    67:b5:19:e6:6d:d3:21:d3:78:bb:d7:a3:c0:cb:97:
                    b5:1b:fb:da:24:91:eb:a6:d4:62:88:c9:f4:75:4a:
                    1d:aa:7a:1c:71:18:53:45:3e:6c:66:0d:70:9c:87:
                    89:88:64:16:03:18:d4:eb:3f:40:93:d6:5f:be:70:
                    e2:32:7c:bb:fa:3f:c4:63:7c:ab:3c:f5:25:bd:dd:
                    65:69:4b:60:1e:01:58:8e:11:fb:a7:d3:d8:2a:1d:
                    bd:c2:1b:5d:15:92:3e:a6:65:e3:5d:d6:96:7c:1d:
                    e1:f8:b4:f0:d0:32:4d:ef:20:a0:3d:13:ea:3f:fe:
                    ff:98:84:27:cf:d0:35:b6:03:52:df:a9:8f:6f:32:
                    1e:65:20:db:a3:c9:84:14:ae:40:93:74:17:2d:ab:
                    47:dd:6a:73:38:02:57:e0:72:7d:d2:cc:aa:3b:23:
                    00:a8:19:38:05:a7:38:89:b4:00:05:f4:98:c7:b3:
                    17:80:f3:73:2f:db:29:4f:9a:4a:6f:7e:7e:8d:e9:
                    ef:5f:c3:0f:f9:a4:ab:2c:3e:fc:88:d2:ef:62:99:
                    37:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5B:D1:0F:33:9F:E0:3B:4F:FD:63:C3:DE:76:24:A5:B3:53:A3:A9
            X509v3 Authority Key Identifier:
                keyid:99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:01:64:01:db:03:76:f1:b7:5b:e0:d4:76:e8:9a:4b:54:2a:
         00:b9:a8:41:46:68:1b:0d:a4:45:dd:54:49:94:ce:49:28:9a:
         1e:a7:05:10:c9:44:d7:5a:56:12:4b:76:b0:e3:34:66:d4:a2:
         b3:7f:74:67:a9:56:65:22:3a:90:62:50:d8:a0:fe:cb:5e:85:
         f1:22:1f:08:d0:54:8e:3c:8c:5f:76:02:fa:be:3b:a0:34:a8:
         ca:9f:9b:d6:ee:e1:61:8a:c0:a4:ce:6d:ed:ca:43:83:27:23:
         68:55:44:38:47:21:17:46:ad:53:56:75:a9:8c:72:4d:1b:b7:
         37:36:fb:b0:51:3f:fe:36:56:49:61:a8:ac:f6:83:dd:a8:44:
         66:2f:b1:2e:d6:07:5a:d6:46:ac:23:be:f9:3f:dc:57:ac:28:
         5b:68:8f:ce:e3:d8:3c:24:99:8c:f7:95:98:40:31:c5:08:08:
         32:b8:46:fe:6e:4e:77:4a:9d:36:a7:e1:28:e8:ef:ac:8b:8a:
         dc:d7:7d:6c:95:8d:da:0c:9c:30:da:83:3f:36:f0:af:6e:c9:
         c1:f0:40:30:4a:71:da:d4:0d:6b:78:ca:02:7e:8c:98:5e:f2:
         41:65:2f:ce:a1:a6:48:27:04:0b:dc:78:b1:cf:fd:54:da:35:
         b2:8c:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----