Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
File:                     RmSgU4XAYmgVApGX6xUGSF09bRw.mft (raw, json)
Hash identifier:          tdKe3bVgl1oyJyeB4aMSMyz06lRZQyruH0yynSjau38=
Subject key identifier:   FE:14:1F:0B:E7:0A:B7:95:26:90:51:83:2F:D3:59:6F:84:61:CA:0C
Authority key identifier: 46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
Certificate issuer:       /CN=4664a05385c0626815029197eb1506485d3d6d1c
Certificate serial:       018F86A3AD3131BF2E2A0D40683357E9C201
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
Manifest number:          02CD
Signing time:             Fri 17 May 2024 13:00:24 +0000
Manifest this update:     Fri 17 May 2024 13:00:24 +0000
Manifest next update:     Sat 18 May 2024 13:00:24 +0000
Files and hashes:         1: RmSgU4XAYmgVApGX6xUGSF09bRw.crl (hash: KsU3UgMtEVtps/WhcMcoGuvmYgesikMrSZ0p9NDvcME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:ad:31:31:bf:2e:2a:0d:40:68:33:57:e9:c2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4664a05385c0626815029197eb1506485d3d6d1c
        Validity
            Not Before: May 17 13:00:24 2024 GMT
            Not After : May 18 13:00:24 2024 GMT
        Subject: CN=fe141f0be70ab795269051832fd3596f8461ca0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:ec:85:02:46:4f:a0:03:e7:4e:1b:f6:0c:
                    be:ff:58:4d:a2:29:1e:4e:0b:57:7f:a4:a1:a0:19:
                    81:92:f4:69:b3:e2:3c:72:58:f2:2d:8d:48:b3:9f:
                    5f:40:4c:ae:44:e2:95:6b:2a:b9:68:03:ba:11:3f:
                    44:ed:32:d5:f1:ec:09:a3:a2:cf:e3:57:b0:05:d1:
                    cc:ef:1f:2f:d3:e3:0c:3f:50:fb:cb:bf:52:e6:58:
                    c2:d3:4a:32:51:54:2d:94:2b:b1:d7:f8:96:08:3c:
                    b8:98:e0:a5:8b:14:da:3a:01:c8:10:a8:e3:b1:a9:
                    20:e9:da:a3:51:88:46:94:40:6f:cb:96:14:6f:38:
                    16:57:ea:1a:23:5b:28:f4:e5:e0:e8:84:77:e5:ed:
                    09:39:d3:b0:56:33:47:50:de:61:00:2d:dd:c3:f0:
                    40:74:4d:81:b6:21:3c:bc:f0:ad:44:1f:de:a1:24:
                    c3:b2:3a:49:5e:85:f8:15:8d:b6:ac:e0:2b:54:0e:
                    db:fc:5b:03:f9:26:32:50:eb:4c:41:53:42:18:37:
                    13:a0:7e:a5:ab:25:62:d3:bc:07:12:4d:d0:f9:32:
                    ba:1a:d9:a1:60:ab:9d:2d:8b:b2:92:82:c8:ea:52:
                    2e:a7:cc:2a:1b:d3:16:53:73:62:af:d9:bc:76:b8:
                    44:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:14:1F:0B:E7:0A:B7:95:26:90:51:83:2F:D3:59:6F:84:61:CA:0C
            X509v3 Authority Key Identifier:
                keyid:46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fa:0f:fc:f2:98:32:09:79:95:15:ca:34:73:3a:6a:cc:25:
         ea:84:18:0f:35:25:74:e1:81:b0:aa:2c:d7:a9:25:b3:c8:05:
         8a:dd:66:61:75:e0:f3:84:f6:14:f3:03:69:72:85:74:b3:c5:
         5d:c0:06:27:a2:74:50:51:4e:66:62:6a:12:34:70:98:d7:e4:
         7f:1f:74:3e:59:12:6a:b5:f9:72:6e:ab:ff:f9:4b:b0:85:d5:
         e8:e5:29:34:1b:74:e8:6b:a7:18:69:9e:e6:11:9a:70:b9:11:
         78:de:95:e3:2d:07:0a:49:c5:6b:06:be:f4:8c:97:a3:e3:75:
         fa:00:ac:7f:49:68:ac:bf:7e:85:bc:ce:e9:59:c7:a6:31:5d:
         ea:d9:2b:54:bc:b0:34:5f:2a:f7:0d:ec:24:d2:e8:46:1d:c1:
         22:eb:13:e0:c3:a8:16:45:ff:f0:e9:e9:84:73:3d:39:74:3d:
         3d:a8:ab:9f:ef:0e:7e:03:8a:c1:11:8b:49:82:37:76:dd:df:
         4d:5a:21:55:6c:8a:5d:72:4b:2b:40:3b:59:77:8f:9c:72:ba:
         8c:13:c9:66:da:6f:f5:b3:3b:16:08:00:eb:89:ce:39:fd:aa:
         6f:13:2e:1d:83:85:3e:53:7e:be:d8:3e:1f:a2:fb:80:4a:71:
         62:4f:69:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----