Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
File:                     fKnhWNylWE83ofg0myiaaBLbkko.mft (raw, json)
Hash identifier:          86I06v3Ych8M8cdnarCyduxjOaQfD1nCXS36zE6XvMw=
Subject key identifier:   99:05:A6:F7:50:16:DE:0B:99:9F:55:D8:2C:74:58:DE:0D:DD:4E:54
Authority key identifier: 7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A
Certificate issuer:       /CN=7ca9e158dca5584f37a1f8349b289a6812db924a
Certificate serial:       019047C2C7BEFDBA1B74B34220516E07A1BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
Manifest number:          0445
Signing time:             Mon 24 Jun 2024 01:01:05 +0000
Manifest this update:     Mon 24 Jun 2024 01:01:05 +0000
Manifest next update:     Tue 25 Jun 2024 01:01:05 +0000
Files and hashes:         1: fKnhWNylWE83ofg0myiaaBLbkko.crl (hash: tHJN/d5CmqnBYIoGpdVQjEeZmFBs/p0WkbDeBqhDJuY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:47:c2:c7:be:fd:ba:1b:74:b3:42:20:51:6e:07:a1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ca9e158dca5584f37a1f8349b289a6812db924a
        Validity
            Not Before: Jun 24 01:01:05 2024 GMT
            Not After : Jun 25 01:01:05 2024 GMT
        Subject: CN=9905a6f75016de0b999f55d82c7458de0ddd4e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:08:b6:98:49:ee:12:eb:4d:36:59:2d:5e:e1:
                    e7:02:c5:61:c2:4a:85:02:2d:20:7b:0c:d6:cd:56:
                    43:04:b1:db:9a:16:22:34:6f:b2:54:23:93:2f:bd:
                    71:4e:24:6b:5f:a0:ab:ca:f8:2b:f0:76:5f:c0:ac:
                    8e:4d:4d:eb:b8:95:13:8b:d9:08:1d:31:7b:89:48:
                    72:1f:44:4a:9d:71:69:24:2e:07:ca:17:e6:f6:c4:
                    1e:3a:81:f2:43:c3:b9:f4:68:ef:4e:d9:26:34:3a:
                    72:fa:c8:02:5d:56:69:37:44:cf:cd:a4:a0:2e:81:
                    92:df:3a:b9:f8:8c:5f:a5:9c:c9:62:17:a5:66:f4:
                    db:ff:d0:cb:6b:be:bc:21:0c:93:70:29:45:18:1c:
                    80:0b:ef:37:55:19:e7:7d:4a:ff:24:2f:a3:27:4a:
                    33:4d:84:5f:1a:d5:7c:4d:b5:96:82:35:74:d1:17:
                    bb:57:a2:a3:a4:0e:7d:cf:c8:d0:f8:9b:d1:fc:50:
                    c8:44:4d:d7:03:c9:60:72:bc:3b:73:67:9b:1c:6e:
                    49:b4:16:5d:1f:f0:f0:a6:83:1e:e1:03:1c:9e:51:
                    65:7f:c5:56:d1:65:33:67:aa:0d:53:54:d1:9a:f3:
                    1e:be:21:da:6b:6d:06:96:6e:64:87:3a:69:8f:49:
                    2a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:05:A6:F7:50:16:DE:0B:99:9F:55:D8:2C:74:58:DE:0D:DD:4E:54
            X509v3 Authority Key Identifier:
                keyid:7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:10:1c:b7:d2:af:e1:78:1b:4d:d7:e5:10:ab:ca:ed:03:54:
         4e:e6:2a:a3:2f:2f:b2:e1:fb:91:78:dc:da:85:97:e1:8d:6f:
         48:8f:35:7a:df:62:9f:72:67:1b:90:3b:4a:ab:4d:fb:53:d7:
         bf:e8:80:68:bb:f4:97:16:cd:98:94:89:35:df:d6:d7:a0:48:
         ee:eb:87:f9:10:c8:36:0e:93:3a:f6:59:ad:3c:df:fe:1f:d9:
         b9:9e:b4:25:5b:b8:0a:42:5b:41:f8:6f:cf:15:2e:23:43:79:
         62:a6:b2:ba:46:72:e9:38:79:a9:16:50:2d:96:0b:13:e2:21:
         31:08:b1:0d:85:b8:f4:ca:c2:99:8e:76:d7:e2:2c:51:26:a3:
         8f:9f:1a:44:0a:aa:ae:57:c2:9f:b4:4d:c3:45:a8:e8:28:61:
         51:64:65:e1:99:b4:da:a1:a3:7c:ef:c4:e8:7f:f6:f9:78:c7:
         aa:27:46:be:d6:e8:d4:35:f4:d1:55:77:3d:c3:72:23:eb:ab:
         5e:e5:86:2c:bd:08:a2:94:6c:ae:c1:61:8f:8d:10:31:d4:b2:
         94:f8:4a:70:ca:d4:07:31:24:ad:a1:fc:87:0d:d9:37:43:69:
         0c:f6:b8:16:8d:57:d0:ee:e2:4f:dd:de:64:6f:da:ec:c8:29:
         d1:6f:e6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----