Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft
File:                     FPsZA22DNH9Rl66gLaSmlbkYlYw.mft (raw, json)
Hash identifier:          M6/q2TMgweVoaH5QKXc5pAaO61SllgebR3Zw5AZo0nQ=
Subject key identifier:   7D:50:81:80:F7:72:08:B4:BD:F6:B5:8F:8E:47:C7:C8:55:FB:9B:F6
Authority key identifier: 14:FB:19:03:6D:83:34:7F:51:97:AE:A0:2D:A4:A6:95:B9:18:95:8C
Certificate issuer:       /CN=14fb19036d83347f5197aea02da4a695b918958c
Certificate serial:       018F87B6B777F535C6C2BF8EA806740B162B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FPsZA22DNH9Rl66gLaSmlbkYlYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft
Manifest number:          4C
Signing time:             Fri 17 May 2024 18:00:49 +0000
Manifest this update:     Fri 17 May 2024 18:00:49 +0000
Manifest next update:     Sat 18 May 2024 18:00:49 +0000
Files and hashes:         1: FPsZA22DNH9Rl66gLaSmlbkYlYw.crl (hash: 8ot6dijMrpi5lz85utrCF61VNsibJdrpdVOc6mcdRR0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FPsZA22DNH9Rl66gLaSmlbkYlYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b7:77:f5:35:c6:c2:bf:8e:a8:06:74:0b:16:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14fb19036d83347f5197aea02da4a695b918958c
        Validity
            Not Before: May 17 18:00:49 2024 GMT
            Not After : May 18 18:00:49 2024 GMT
        Subject: CN=7d508180f77208b4bdf6b58f8e47c7c855fb9bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:f2:5b:cc:57:7b:33:0d:22:47:e9:bf:f7:
                    11:26:dc:6d:a0:cc:4b:f9:d0:02:66:52:24:5d:18:
                    dc:a3:50:6b:7d:6d:c0:6f:bb:db:53:49:a6:15:75:
                    1a:b8:5a:5a:e9:d1:4d:80:cd:b0:b4:f2:b4:ae:ad:
                    78:48:44:19:22:3c:1f:f4:f8:2c:b6:36:ee:19:4e:
                    f5:c7:be:aa:13:99:c2:4e:c6:07:2e:ed:12:0c:f6:
                    ff:ea:6e:3d:1d:0d:cd:3b:4f:8f:9d:65:56:fc:e5:
                    e3:22:15:41:12:26:0f:50:01:54:44:9a:0a:b6:b9:
                    8a:1d:b4:51:69:21:20:2a:0b:f6:0a:d9:5a:93:d3:
                    ef:ae:ae:42:e5:01:68:ae:4e:fa:c4:82:6f:9a:34:
                    e1:22:c0:77:48:0f:da:71:17:cd:3c:de:4e:76:37:
                    1f:85:c3:1e:90:52:a8:17:4b:43:6d:61:01:f4:0d:
                    1a:f0:59:bb:07:40:d4:21:be:74:2f:fd:00:72:3c:
                    a5:7c:1c:39:82:02:1b:17:7a:e7:44:26:e4:60:15:
                    00:3c:24:57:11:2e:3e:ae:00:ce:c8:51:3c:87:d3:
                    ec:8d:57:06:a2:11:af:eb:9f:24:2d:c2:c9:c2:60:
                    b8:30:cc:b7:58:c6:6f:4f:67:f8:dd:71:ad:6e:d9:
                    84:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:50:81:80:F7:72:08:B4:BD:F6:B5:8F:8E:47:C7:C8:55:FB:9B:F6
            X509v3 Authority Key Identifier:
                keyid:14:FB:19:03:6D:83:34:7F:51:97:AE:A0:2D:A4:A6:95:B9:18:95:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPsZA22DNH9Rl66gLaSmlbkYlYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d2:97:a7:c8:3a:74:5c:f4:21:91:89:f8:28:60:89:5d:4e:
         90:7d:2b:e2:f5:71:bf:7d:03:42:51:88:63:e1:de:9c:86:60:
         a0:85:be:b1:c5:2b:bd:e3:57:60:e8:ea:52:b9:44:6d:21:4f:
         0e:11:41:95:49:a4:a0:79:5f:b2:cc:00:da:ce:14:4b:3c:71:
         24:33:65:b5:f3:8e:ea:58:e6:60:76:f6:f2:0f:af:89:20:5c:
         4c:88:42:05:68:a6:1e:ca:4d:ed:44:b3:73:8e:c6:b6:94:5b:
         c7:0d:11:ae:30:96:22:ac:2d:d0:0b:c1:d3:9b:8a:ae:83:cd:
         33:6d:cd:15:53:05:3e:83:a2:f5:9c:81:9c:e6:a2:89:dc:0a:
         db:48:73:ae:22:93:ae:cf:55:7d:5e:60:72:71:74:5c:e8:23:
         d2:67:1c:ae:e9:13:6e:94:f5:5e:26:de:19:dc:9e:96:61:c6:
         d1:95:4e:b7:73:e1:93:1b:ed:62:48:f3:e0:7b:80:94:79:33:
         ff:c0:a5:b1:86:f0:44:d4:a7:10:82:0e:99:a2:b8:87:eb:3b:
         9a:bd:b7:a9:38:ff:3f:af:1c:fe:ab:62:cb:94:57:b7:e7:2d:
         f7:0a:5b:40:18:ec:e7:9b:9c:7b:b2:17:fd:98:f4:b9:22:1c:
         c9:83:d2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----