Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
File:                     YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json)
Hash identifier:          ySO+invyERa9iuSaktDVySrbvIuyiliy3ouFmLBvWPw=
Subject key identifier:   80:75:C0:6F:61:95:46:41:A6:BB:C4:B3:3A:E4:2E:FE:A2:FE:A9:6A
Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
Certificate issuer:       /CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Certificate serial:       01901EC69902C6017F6DD10C0AC30B655457
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
Manifest number:          0E58
Signing time:             Sun 16 Jun 2024 02:00:50 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:50 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:50 +0000
Files and hashes:         1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: dDF9lraz9qIBPhGIbRa7GfuJ/gN5f0DjEdJpAdiEP20=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:99:02:c6:01:7f:6d:d1:0c:0a:c3:0b:65:54:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956
        Validity
            Not Before: Jun 16 02:00:50 2024 GMT
            Not After : Jun 17 02:00:50 2024 GMT
        Subject: CN=8075c06f61954641a6bbc4b33ae42efea2fea96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:aa:17:cb:69:f0:5c:8a:57:50:70:35:ff:31:
                    46:74:0e:35:c4:dc:05:b3:e4:60:4f:76:23:61:c9:
                    b0:ca:98:3b:c7:f5:ba:b5:42:14:a1:5b:f3:aa:a0:
                    0f:c7:49:b5:13:35:dc:bb:57:fe:55:34:40:e3:88:
                    f7:b0:37:df:98:08:00:df:c5:d1:2d:dd:dc:4f:5c:
                    34:86:58:0d:d7:b9:df:6f:76:a4:b4:23:00:14:b1:
                    1b:88:d9:cf:fc:92:86:33:64:56:7b:bc:e0:4b:5c:
                    c9:41:8c:43:24:da:41:a3:d0:a4:cd:1a:9f:89:7c:
                    24:a3:da:07:ab:68:d9:6d:61:f0:7f:d9:1e:32:23:
                    4f:77:aa:e7:f9:18:db:18:6a:de:5c:91:32:73:17:
                    8c:e9:d9:11:db:6c:36:72:f6:46:57:30:91:42:b5:
                    84:77:43:52:6c:37:a2:9c:a0:ab:f2:9d:98:48:b1:
                    d7:42:18:7f:45:c4:0e:b6:8b:15:04:d5:23:c6:2b:
                    cb:01:16:85:ff:8c:96:18:c2:c5:ba:0d:a5:e8:94:
                    45:7b:57:9d:86:99:84:62:10:97:51:5d:9f:dd:1f:
                    a0:4f:15:a2:2d:64:f6:11:01:61:12:bc:16:85:e4:
                    03:2f:51:c6:20:c9:0a:c7:38:7d:25:72:8f:42:ce:
                    02:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:75:C0:6F:61:95:46:41:A6:BB:C4:B3:3A:E4:2E:FE:A2:FE:A9:6A
            X509v3 Authority Key Identifier:
                keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:0a:31:e8:af:b5:39:27:dd:49:b2:32:84:74:83:b1:f9:e0:
         e8:a1:86:11:88:65:94:a8:0e:4a:a7:e8:ea:42:06:5f:55:27:
         06:d1:96:02:94:53:7c:91:cb:f0:46:3e:0e:84:f8:53:1a:26:
         0c:f2:6e:57:96:78:e6:c6:7e:ee:ed:bf:c6:ca:78:ba:d2:fa:
         4e:08:82:e6:3d:36:c9:3e:04:1e:e2:03:e3:ad:41:11:94:90:
         16:de:0d:4e:11:b9:19:30:5e:97:07:1f:d5:52:e5:67:7e:8b:
         27:b4:f6:7e:de:52:64:38:f6:6a:92:cd:14:6f:97:26:9e:72:
         60:78:2d:07:5e:d0:04:7a:ad:37:5a:9f:1e:f3:35:c3:a8:34:
         0e:8e:ff:73:77:fd:d5:56:64:0c:27:4b:4f:a9:76:ff:1e:76:
         2c:6e:c8:a5:64:82:3f:59:19:a1:3a:d6:ce:37:54:d1:0e:df:
         f9:c0:38:39:01:34:56:3d:c9:2e:06:04:c9:d2:a5:3d:3a:81:
         a3:ee:01:57:e2:61:34:29:5a:64:f9:e2:94:89:77:26:43:13:
         29:d7:ab:a1:2b:bc:df:c2:5e:d0:74:ab:11:dc:12:7e:2a:b8:
         8b:58:50:72:be:7b:c9:3b:25:a7:ce:0f:99:7a:9a:dc:3c:50:
         e9:9f:30:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----