Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6c992b-bcdd-4203-b524-81a2fc0a0687/1/l8OiXUi_gek3G3sOuGjV2i2rkZU.mft
File:                     l8OiXUi_gek3G3sOuGjV2i2rkZU.mft (raw, json)
Hash identifier:          q7V5g4kwK+pmKyfkhX8CrdpluJya83Qy0eoJhkO38+0=
Subject key identifier:   B8:AD:2F:18:68:CF:29:D2:62:B3:23:B1:BA:9C:C1:65:15:6E:2D:D1
Authority key identifier: 97:C3:A2:5D:48:BF:81:E9:37:1B:7B:0E:B8:68:D5:DA:2D:AB:91:95
Certificate issuer:       /CN=97c3a25d48bf81e9371b7b0eb868d5da2dab9195
Certificate serial:       01901D465C4766B073EF6111E43BC8D380D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8OiXUi_gek3G3sOuGjV2i2rkZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/6c992b-bcdd-4203-b524-81a2fc0a0687/1/l8OiXUi_gek3G3sOuGjV2i2rkZU.mft
Manifest number:          01CC
Signing time:             Sat 15 Jun 2024 19:01:08 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:08 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:08 +0000
Files and hashes:         1: l8OiXUi_gek3G3sOuGjV2i2rkZU.crl (hash: tGbPMXRhzG8f/YnmwLM6yjdxvMFzcwI9syrgR59cj14=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/6c992b-bcdd-4203-b524-81a2fc0a0687/1/l8OiXUi_gek3G3sOuGjV2i2rkZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/6c992b-bcdd-4203-b524-81a2fc0a0687/1/l8OiXUi_gek3G3sOuGjV2i2rkZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l8OiXUi_gek3G3sOuGjV2i2rkZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:5c:47:66:b0:73:ef:61:11:e4:3b:c8:d3:80:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97c3a25d48bf81e9371b7b0eb868d5da2dab9195
        Validity
            Not Before: Jun 15 19:01:08 2024 GMT
            Not After : Jun 16 19:01:08 2024 GMT
        Subject: CN=b8ad2f1868cf29d262b323b1ba9cc165156e2dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:01:3d:53:fb:f5:37:b7:d4:79:e1:6e:c1:
                    6b:1f:8a:b6:3d:77:d7:6d:4a:0a:94:cf:68:e3:ff:
                    a3:5a:0f:26:49:0f:4f:01:40:ea:e4:d1:61:df:b5:
                    a3:39:05:95:43:99:02:b5:46:b2:a5:c8:bc:93:73:
                    b7:6b:14:47:9a:76:05:d5:54:ae:ff:33:df:fb:b0:
                    23:58:14:97:eb:5f:a9:10:65:59:b7:d9:d9:af:3b:
                    69:a6:5d:ef:d4:cb:b6:63:10:92:4f:fe:a9:c6:0f:
                    16:70:63:61:dd:7b:f6:0f:42:3a:e5:1b:a8:51:f4:
                    0f:2f:ea:c5:39:51:63:21:8f:fe:ab:e7:94:bf:d9:
                    08:8a:95:2c:3e:ce:b9:6c:94:a0:bc:7b:f1:c7:0e:
                    80:c9:fb:4a:0b:26:34:21:e2:60:44:de:c2:95:12:
                    18:a3:d1:0e:3e:2a:ca:e0:b8:54:d5:1c:ec:56:74:
                    54:79:8e:8e:da:9e:58:9d:1d:27:4b:eb:ce:76:75:
                    92:e4:02:f6:0b:4b:cc:61:68:7c:e8:4d:9e:2d:93:
                    3e:c6:3e:37:2a:f3:80:a2:c9:a7:a5:78:9d:1f:4d:
                    76:7b:55:f8:77:07:02:ee:99:a4:11:f8:c8:75:cc:
                    1d:e9:21:bd:f5:67:90:d8:04:52:e8:23:c7:18:a0:
                    da:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AD:2F:18:68:CF:29:D2:62:B3:23:B1:BA:9C:C1:65:15:6E:2D:D1
            X509v3 Authority Key Identifier:
                keyid:97:C3:A2:5D:48:BF:81:E9:37:1B:7B:0E:B8:68:D5:DA:2D:AB:91:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8OiXUi_gek3G3sOuGjV2i2rkZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6c992b-bcdd-4203-b524-81a2fc0a0687/1/l8OiXUi_gek3G3sOuGjV2i2rkZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6c992b-bcdd-4203-b524-81a2fc0a0687/1/l8OiXUi_gek3G3sOuGjV2i2rkZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:07:56:e0:78:5f:1b:18:62:86:eb:57:30:f4:db:7b:bb:9d:
         7f:2f:48:ad:ce:47:0c:57:53:ce:db:94:87:26:9d:b3:b5:73:
         f7:65:9a:34:26:c7:e4:1f:0a:ea:0b:da:92:25:e1:b3:1f:09:
         d7:3e:14:76:24:53:06:46:aa:8e:66:6b:26:b3:42:02:e5:e6:
         5d:26:20:d8:23:f1:d9:9d:8e:76:ea:26:6d:4c:14:24:a3:98:
         5c:7f:8f:90:b6:51:c1:0c:76:bd:74:0f:e9:4e:28:80:dd:80:
         73:0f:ec:ab:41:60:18:92:8c:b9:d5:37:92:45:dc:f2:73:b4:
         dc:47:54:84:e9:a9:82:0e:b4:2d:53:6f:02:35:f9:d4:f9:90:
         83:b3:1d:2e:f1:0d:e2:b8:21:e8:3b:b8:e7:03:28:22:1c:53:
         4a:72:1c:be:16:47:01:01:81:db:aa:5e:b1:1b:d7:76:f8:32:
         30:27:1f:26:9a:91:f3:06:0b:32:93:ef:2f:08:96:c3:1e:bb:
         f8:ca:c8:7a:aa:bd:4f:c3:4e:f6:24:a9:e4:d3:42:12:6a:e5:
         36:cb:66:8a:69:5b:55:c4:c0:87:bd:6a:a6:df:1a:29:a8:7c:
         99:b8:98:a4:4b:76:b7:76:2d:ef:13:2f:06:52:8c:4c:5c:8b:
         82:f1:74:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----