Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File:                     3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier:          fhdi45Laar+wfsAb8vbNQywrsv5q3zL6RwZsyQDU0vM=
Subject key identifier:   EC:8B:4C:63:5D:CA:AD:CF:D1:3D:64:B0:EC:A4:9A:2C:68:76:0C:97
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer:       /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial:       01901DEAD80C965A1E8E619EC068A52FB26B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:00:48 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:48 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:48 +0000
Files and hashes:         1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: VN4f7tfL6pMSItd7v5V3ygXKBIriEjP6g1BxAdN2rG0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:d8:0c:96:5a:1e:8e:61:9e:c0:68:a5:2f:b2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
        Validity
            Not Before: Jun 15 22:00:48 2024 GMT
            Not After : Jun 16 22:00:48 2024 GMT
        Subject: CN=ec8b4c635dcaadcfd13d64b0eca49a2c68760c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:62:d0:32:56:3c:ab:95:87:a8:b3:fb:13:2b:
                    68:89:73:3b:43:41:1f:c6:ba:8f:a9:cb:e7:79:c1:
                    68:2a:17:f8:06:29:fa:49:8e:7e:12:33:c3:02:e4:
                    74:47:a3:67:ac:4d:5c:16:83:97:71:83:17:5e:b9:
                    17:b7:ce:ac:04:16:c2:d5:0b:80:f7:85:e3:70:95:
                    df:8e:73:1c:19:a1:8d:94:7d:af:ab:bd:01:03:21:
                    d7:91:52:70:a6:a7:43:eb:16:4e:ed:60:ec:8c:f6:
                    0d:4c:57:7c:4f:7a:ac:a1:cb:5a:5a:d0:16:6e:d4:
                    f3:ef:c6:b5:14:28:b0:09:4d:d6:62:cc:2c:07:04:
                    db:d7:09:ee:a7:40:08:ae:c1:58:94:65:e6:e3:c0:
                    52:c9:5c:c9:88:f5:8c:21:3e:50:aa:3e:a6:6f:34:
                    9a:ec:c0:f1:49:d3:f3:3f:58:74:65:92:be:2e:18:
                    b3:0f:25:cd:15:78:76:30:e9:2c:19:db:68:5e:20:
                    71:cd:ca:c1:c7:29:81:57:d1:8c:3d:3f:de:0f:49:
                    78:0d:b2:6d:e5:c2:3a:55:4c:06:08:f1:9f:4c:c0:
                    60:94:f6:d4:d4:d5:b7:bb:dd:86:ec:77:d4:41:fb:
                    aa:f3:09:3b:4c:e3:59:03:07:02:6f:07:27:6b:56:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8B:4C:63:5D:CA:AD:CF:D1:3D:64:B0:EC:A4:9A:2C:68:76:0C:97
            X509v3 Authority Key Identifier:
                keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9e:59:1e:c4:87:cc:c2:fe:cb:67:0f:72:61:63:aa:9f:df:
         7f:d9:f3:06:e1:ef:d3:76:84:bb:1d:ad:54:fc:85:11:e2:e7:
         4d:de:c2:61:c5:1f:18:81:d5:2f:a4:20:e4:59:45:7d:f3:3e:
         89:fe:bc:ab:a8:5d:c2:8d:6f:b3:ac:46:2c:ba:df:30:ef:55:
         2a:7f:cd:9b:d7:53:27:e4:c9:43:f6:48:77:8b:81:c9:72:ef:
         14:eb:e7:8d:7a:f3:fd:d2:5d:89:80:79:3a:33:b1:6c:41:f8:
         ae:4d:db:d7:d8:e9:98:d1:8b:24:92:85:9f:a0:1a:ca:61:da:
         da:a8:27:13:ed:1c:f4:24:6c:14:f5:3e:7b:73:6e:a4:2e:67:
         73:ec:62:f1:c3:56:7d:d9:28:31:4b:79:d0:2d:e5:65:59:65:
         92:63:ef:c5:89:86:b6:86:9f:b4:2e:73:43:3d:f8:57:1f:84:
         81:1c:65:f6:02:64:d1:8e:18:60:ed:72:6a:fe:6b:3f:c2:b0:
         17:51:ad:5c:a1:c9:f1:08:5a:d5:81:16:36:7c:4b:84:fa:b5:
         2d:e0:d6:94:b7:c3:d2:fa:14:45:3c:ab:db:18:85:3f:47:94:
         68:78:02:cc:d5:28:52:9c:de:6b:72:ee:08:16:c7:6f:c0:44:
         92:5c:cc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----