Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File:                     1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier:          0M//qrbSOwykFd4HQ0zQPUvnNp7nZG/jZKb4P/U+TQY=
Subject key identifier:   23:1F:28:38:EF:41:19:BD:43:CA:31:B2:20:7B:A6:D7:EA:07:02:5F
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer:       /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial:       01901D4647DEF674927EBCCB289249614E29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number:          0EAA
Signing time:             Sat 15 Jun 2024 19:01:03 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:03 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:03 +0000
Files and hashes:         1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: D0FZwdsR0HfNj7icP4zZj9if2dJppYjlhNgdYBGPX2Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:47:de:f6:74:92:7e:bc:cb:28:92:49:61:4e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
        Validity
            Not Before: Jun 15 19:01:03 2024 GMT
            Not After : Jun 16 19:01:03 2024 GMT
        Subject: CN=231f2838ef4119bd43ca31b2207ba6d7ea07025f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:0b:a3:f0:ab:17:f4:86:c9:5b:25:21:bc:
                    08:63:4a:24:ce:a4:35:6c:82:97:d3:0b:e4:87:41:
                    83:77:dc:51:eb:65:6b:8f:07:30:65:11:c8:00:8b:
                    78:1c:61:07:85:f0:3d:44:d4:fc:05:1f:20:73:85:
                    7f:40:ba:69:63:36:84:d0:5e:01:7e:8f:12:1e:be:
                    55:a4:ac:0b:ee:1a:ed:f8:01:7c:50:49:fc:2c:6c:
                    d3:9d:ba:b2:10:85:2c:ac:5b:69:b0:2c:66:c0:bb:
                    8d:de:57:d7:84:65:e2:3f:2e:23:d2:e9:d4:9c:07:
                    ee:a8:34:bf:fe:5a:cf:4c:51:09:cb:3a:a9:a1:07:
                    2d:3f:65:f8:00:8e:b4:78:6b:75:f2:a0:fc:25:cb:
                    8f:6c:e9:a5:8d:47:5f:2c:53:e7:6c:17:8b:7a:b3:
                    86:0d:dd:ea:05:a8:81:0f:1c:2c:92:36:a5:21:e4:
                    bb:55:6c:c0:83:19:bb:44:6d:15:70:96:1b:41:e9:
                    2c:4f:4b:ef:4e:dd:c0:12:e9:e8:a8:38:8d:a1:10:
                    da:08:ba:28:de:d9:66:5c:9e:82:83:0d:ef:85:74:
                    57:f6:87:6e:86:2c:0a:dc:4b:16:a5:2c:1a:05:5d:
                    2d:67:78:ea:40:34:5f:12:d8:99:e9:01:cb:d8:90:
                    23:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1F:28:38:EF:41:19:BD:43:CA:31:B2:20:7B:A6:D7:EA:07:02:5F
            X509v3 Authority Key Identifier:
                keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:eb:f1:b7:65:bd:ee:14:92:39:87:36:9b:a2:4e:4d:95:98:
         5b:bd:99:0c:f3:8d:cc:db:c9:5f:d4:a5:b8:29:67:6a:35:d3:
         9f:07:5c:c2:4c:ee:c8:c7:3d:1b:d3:e4:79:7a:4c:fc:6c:3d:
         63:b9:98:57:d0:9f:76:1a:00:a3:48:66:03:87:ad:12:8f:98:
         68:c9:48:73:72:40:ed:92:32:83:8c:7d:9d:62:7b:28:11:1b:
         bb:b3:8f:44:d5:cb:c3:81:86:1c:51:cd:11:cf:d6:c1:d8:dc:
         7b:f6:4d:c3:ef:66:10:ea:2a:e9:b1:65:29:37:aa:9c:57:b5:
         c2:be:55:00:57:85:e4:62:82:51:d6:f1:44:de:fa:8a:76:d0:
         aa:4a:f8:23:73:e6:74:f6:25:a1:00:7c:76:ac:46:76:15:7b:
         be:dd:6f:48:54:31:27:1c:16:93:68:a5:52:df:14:13:b6:54:
         1f:44:5b:76:9e:7d:b4:ec:ac:48:3f:ca:cd:d3:77:3f:3f:19:
         87:39:c1:2d:b1:d5:3e:91:68:be:da:b9:ca:f5:21:45:2c:51:
         d3:48:17:0c:ca:57:70:99:f9:18:3a:39:1d:43:f4:3a:0b:fd:
         63:74:49:ee:f1:ff:38:a5:e2:ad:c2:6c:e6:bc:43:67:7c:cb:
         f1:d6:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----