Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
File:                     eQvBn9eSZsoIqdwjhAoAQgX06GU.mft (raw, json)
Hash identifier:          1kn9PKok59F4I3T0xkzwnFzz7G5cJqzdWtRLrunWtm0=
Subject key identifier:   99:80:9D:DF:96:7A:27:25:9B:D7:52:09:27:FF:F6:B5:FB:A8:9D:C8
Authority key identifier: 79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65
Certificate issuer:       /CN=790bc19fd79266ca08a9dc23840a004205f4e865
Certificate serial:       018F874A3C9519174D6E85BDD62FB1D7FFC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
Manifest number:          098F
Signing time:             Fri 17 May 2024 16:02:20 +0000
Manifest this update:     Fri 17 May 2024 16:02:20 +0000
Manifest next update:     Sat 18 May 2024 16:02:20 +0000
Files and hashes:         1: eQvBn9eSZsoIqdwjhAoAQgX06GU.crl (hash: QkG5CSxpn65FLMFUuhmEwnGDljngCy7Usc0JCKqkpbQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:3c:95:19:17:4d:6e:85:bd:d6:2f:b1:d7:ff:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bc19fd79266ca08a9dc23840a004205f4e865
        Validity
            Not Before: May 17 16:02:20 2024 GMT
            Not After : May 18 16:02:20 2024 GMT
        Subject: CN=99809ddf967a27259bd7520927fff6b5fba89dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:bb:40:c0:31:40:bb:03:24:76:6d:9f:b6:
                    aa:66:40:d8:9c:61:07:65:b0:cf:36:d1:21:cd:42:
                    29:56:7c:57:fd:6e:87:1a:91:3e:8c:63:99:b4:93:
                    39:56:59:17:63:00:98:14:80:71:3e:05:be:ce:16:
                    0a:fa:24:91:91:d2:2e:ed:76:8b:f5:dc:cd:ca:cf:
                    c3:c7:87:ef:bd:87:8c:94:62:22:0b:21:26:97:5a:
                    e4:f3:fc:42:0e:f3:37:f9:f9:50:0b:a5:32:ed:c2:
                    4d:0c:a1:c5:a7:c2:03:15:a9:35:24:b7:37:94:91:
                    90:75:60:a8:46:36:8a:2a:7d:ba:97:19:5c:3b:77:
                    ac:9b:ae:fd:dc:dd:bb:dc:b4:08:73:ad:2c:16:b7:
                    31:f6:62:f0:ab:63:e1:23:5e:ae:e3:f5:86:b2:16:
                    ff:4b:e8:15:81:ce:a7:90:ea:dd:cb:09:cb:15:65:
                    a2:85:83:4b:6e:17:b2:56:de:71:66:de:8e:9e:52:
                    d3:09:56:d4:b3:aa:12:24:4e:84:7b:f0:18:f9:c4:
                    49:22:1d:cd:66:74:87:3e:d8:0b:a3:55:bc:bf:b0:
                    d5:27:cb:16:dd:77:fb:02:8b:1c:a9:22:df:6d:ba:
                    6f:3c:0d:62:00:b0:f8:64:fc:36:b5:5e:c1:94:25:
                    ec:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:80:9D:DF:96:7A:27:25:9B:D7:52:09:27:FF:F6:B5:FB:A8:9D:C8
            X509v3 Authority Key Identifier:
                keyid:79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:5a:18:c2:86:79:f0:6f:66:5f:f2:a6:7f:6d:fd:63:9b:ad:
         04:aa:6c:ad:d3:53:25:74:a9:92:a8:d2:a1:4b:3b:b0:74:4a:
         e3:41:a5:b8:e4:76:0d:37:e4:9e:7e:ef:86:13:8e:65:06:16:
         5e:81:4a:46:3c:0c:09:2f:70:9c:e6:33:93:df:f8:f0:d7:3a:
         f8:2e:f0:33:42:77:0b:fb:b5:b1:a3:75:90:3e:ec:6e:14:35:
         ec:7a:a3:8f:89:35:47:a4:29:80:9f:90:0b:dc:9f:14:78:b1:
         3e:f6:97:8b:a8:8a:d8:53:84:95:7f:02:0e:24:30:a7:aa:d5:
         98:df:50:53:2e:63:f1:4f:e4:bf:46:c2:04:42:03:66:95:96:
         03:a3:ee:22:28:10:e5:f1:10:0a:ad:8e:66:8b:35:ca:5e:53:
         aa:21:bf:7c:0b:05:ba:70:4c:20:9e:bb:bf:65:1c:84:17:26:
         72:83:6d:cf:fc:42:53:f9:a0:da:b1:4d:e1:fb:a8:20:97:00:
         22:bf:ca:4e:b7:1d:91:bf:78:f3:87:83:00:c0:6a:b7:c5:9a:
         ef:18:2a:ac:a4:7d:66:26:fe:fc:b0:b6:fc:fa:be:e0:43:2f:
         e9:bb:c6:59:8f:69:fb:0b:e4:9c:dd:47:2c:fb:23:db:06:29:
         08:a1:bb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----