Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
File:                     kyZYOBNEfHvd61oBwydNjkHDAaI.mft (raw, json)
Hash identifier:          PqM3mHCC/h9eAiurKZ8eDo39Wv0cI7zz49vfbv5ptzE=
Subject key identifier:   DF:5F:A2:1A:30:02:AB:3B:60:52:01:58:F2:35:DC:B0:88:01:41:F1
Authority key identifier: 93:26:58:38:13:44:7C:7B:DD:EB:5A:01:C3:27:4D:8E:41:C3:01:A2
Certificate issuer:       /CN=9326583813447c7bddeb5a01c3274d8e41c301a2
Certificate serial:       018F87B647630F401328E247AF9DD40B967D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
Manifest number:          0C3F
Signing time:             Fri 17 May 2024 18:00:20 +0000
Manifest this update:     Fri 17 May 2024 18:00:20 +0000
Manifest next update:     Sat 18 May 2024 18:00:20 +0000
Files and hashes:         1: kyZYOBNEfHvd61oBwydNjkHDAaI.crl (hash: vHqnV4BZQs+LNGynIsxMa25GM8trxrjM9YY3YEh99aM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:47:63:0f:40:13:28:e2:47:af:9d:d4:0b:96:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9326583813447c7bddeb5a01c3274d8e41c301a2
        Validity
            Not Before: May 17 18:00:20 2024 GMT
            Not After : May 18 18:00:20 2024 GMT
        Subject: CN=df5fa21a3002ab3b60520158f235dcb0880141f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:07:c5:8f:d7:19:44:28:9f:a1:36:15:ed:
                    22:26:46:6e:41:36:51:ba:e8:da:a2:95:a0:c9:1c:
                    8b:6f:d3:bb:5e:ff:00:ff:57:cd:c4:29:cb:39:85:
                    83:1d:14:9e:d7:a8:c0:1d:c9:e1:37:c9:36:85:21:
                    a5:b3:65:75:60:53:3e:67:e4:5d:5a:76:31:2d:47:
                    df:0a:b9:0c:31:53:d7:f7:83:13:df:94:5e:78:b2:
                    3a:67:85:09:e4:6a:8c:cc:39:e3:2b:91:97:31:4d:
                    0b:95:45:64:c7:b6:8d:56:6f:21:1e:06:09:e0:7b:
                    e0:0b:7c:e9:23:4a:a5:f8:7c:4a:4f:91:05:ad:53:
                    7a:8a:cf:d8:40:2d:6e:9c:c5:27:52:5d:0d:84:79:
                    1b:99:91:14:df:bf:94:6d:9f:04:62:01:2d:f9:dc:
                    e6:94:97:4e:4e:18:3e:4b:51:bd:e8:bd:15:0a:a2:
                    6a:f6:2a:c7:3e:41:c2:82:61:d7:35:dc:df:06:a5:
                    87:1e:23:31:88:3c:76:93:6b:d0:6d:94:20:1a:7f:
                    83:47:9b:3b:62:71:b3:4c:95:73:ba:9a:32:41:36:
                    2f:00:33:34:8b:78:54:81:c7:c9:28:9d:0b:f1:26:
                    16:9a:4b:15:59:77:a7:09:97:6c:43:de:0c:6a:91:
                    38:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5F:A2:1A:30:02:AB:3B:60:52:01:58:F2:35:DC:B0:88:01:41:F1
            X509v3 Authority Key Identifier:
                keyid:93:26:58:38:13:44:7C:7B:DD:EB:5A:01:C3:27:4D:8E:41:C3:01:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d1:cb:93:80:37:aa:63:2e:bb:73:8a:5b:87:8b:cf:69:8f:
         e6:04:2a:10:ff:71:94:9e:6f:d5:eb:69:27:44:a7:a6:1a:d7:
         18:88:7b:08:34:e8:5e:0b:42:da:38:33:ac:3d:42:21:fa:3b:
         06:f5:99:9f:25:a0:c9:4a:2e:8d:ef:81:15:14:80:c4:c5:ed:
         72:0d:2b:d6:95:df:91:58:d1:72:cb:0f:7f:59:ce:e8:88:f1:
         f7:05:04:f1:98:58:be:62:3e:e4:3c:02:16:31:a8:56:b8:08:
         a4:a4:22:83:b5:fd:75:4a:0b:10:1b:36:14:5c:fd:82:b4:60:
         3b:59:36:52:aa:75:e4:b9:36:08:15:8c:ab:e0:a9:23:3b:a0:
         f2:30:67:bd:9a:b2:4f:98:5d:1a:e4:b2:14:54:83:70:00:a5:
         b3:23:bc:62:0e:04:99:6e:5f:c7:32:14:e7:1d:85:05:1d:9a:
         a0:5e:80:74:7a:5a:9e:ac:9e:5c:e0:77:b3:10:a9:b3:cb:61:
         6b:69:2b:9b:79:76:d7:c0:d4:2f:61:d1:a7:8a:07:17:62:31:
         3e:71:a1:20:ba:2f:f9:81:1c:74:ad:90:15:1d:28:b1:ed:bc:
         32:66:3e:a2:73:d5:0b:bc:c9:3e:20:3e:11:ed:54:f1:0d:7b:
         37:96:10:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----