Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/dc02bf-02e4-4e85-a76f-72f3a32375bc/1/hZfW68haW48W_Ofl922HOGnUPoE.mft
File:                     hZfW68haW48W_Ofl922HOGnUPoE.mft (raw, json)
Hash identifier:          NHYgVtVtGn68m0xaPA4JHKqB9SwFhUare+nbqRMZyjc=
Subject key identifier:   5C:E9:86:59:85:D5:2F:5D:55:F6:7A:88:29:EA:51:19:D4:6B:17:B9
Authority key identifier: 85:97:D6:EB:C8:5A:5B:8F:16:FC:E7:E5:F7:6D:87:38:69:D4:3E:81
Certificate issuer:       /CN=8597d6ebc85a5b8f16fce7e5f76d873869d43e81
Certificate serial:       018F8936A2AF30A13212E8341F616941D2DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hZfW68haW48W_Ofl922HOGnUPoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/dc02bf-02e4-4e85-a76f-72f3a32375bc/1/hZfW68haW48W_Ofl922HOGnUPoE.mft
Manifest number:          0558
Signing time:             Sat 18 May 2024 01:00:10 +0000
Manifest this update:     Sat 18 May 2024 01:00:10 +0000
Manifest next update:     Sun 19 May 2024 01:00:10 +0000
Files and hashes:         1: hZfW68haW48W_Ofl922HOGnUPoE.crl (hash: iTmjvQSPxhquFwLc2ym9W/1hYJ/L45lD5vZtpe6dvVY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/dc02bf-02e4-4e85-a76f-72f3a32375bc/1/hZfW68haW48W_Ofl922HOGnUPoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/dc02bf-02e4-4e85-a76f-72f3a32375bc/1/hZfW68haW48W_Ofl922HOGnUPoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hZfW68haW48W_Ofl922HOGnUPoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:a2:af:30:a1:32:12:e8:34:1f:61:69:41:d2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8597d6ebc85a5b8f16fce7e5f76d873869d43e81
        Validity
            Not Before: May 18 01:00:10 2024 GMT
            Not After : May 19 01:00:10 2024 GMT
        Subject: CN=5ce9865985d52f5d55f67a8829ea5119d46b17b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:33:b9:a6:08:d2:9c:56:48:f5:48:bd:12:
                    7f:b4:11:1c:82:7b:3a:98:29:d2:0d:26:ed:e1:f5:
                    8f:bf:98:1a:05:5e:c4:30:29:1f:1b:ee:6d:56:ae:
                    9a:33:58:5e:cb:7f:37:58:07:c8:b3:da:bb:dc:10:
                    76:1b:5d:52:1a:93:55:e9:9d:4c:ba:c9:38:a1:70:
                    e9:e3:9f:b0:0f:30:df:ee:af:44:30:5a:03:ac:91:
                    19:c5:d6:ea:6d:e9:73:4b:55:bb:9d:bc:5a:7d:ef:
                    5b:fe:06:f1:df:3c:13:cf:81:9e:fa:9f:e9:96:0c:
                    ae:3d:3a:ee:46:aa:74:fe:1b:dd:f9:57:c9:93:ba:
                    d5:2e:2e:a7:35:c4:8f:20:fc:42:62:98:f4:8a:8f:
                    29:de:73:da:9f:b4:92:f9:89:6c:ed:04:d2:6f:eb:
                    90:ec:0e:a0:2b:3a:72:f4:8e:ab:fe:c8:2e:c3:bc:
                    e5:c0:e0:2d:d5:72:c6:98:c7:fd:d9:71:4f:d0:2d:
                    d6:3d:d7:e6:2f:ee:7f:f4:62:04:71:ec:73:6b:16:
                    3e:55:bd:1d:96:30:83:74:87:99:5d:e5:e4:44:a8:
                    12:62:0a:5b:fc:69:7a:54:11:bf:f1:a8:33:22:d8:
                    0b:1d:44:24:60:4d:1a:9f:88:cf:5c:c7:13:b0:b5:
                    99:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E9:86:59:85:D5:2F:5D:55:F6:7A:88:29:EA:51:19:D4:6B:17:B9
            X509v3 Authority Key Identifier:
                keyid:85:97:D6:EB:C8:5A:5B:8F:16:FC:E7:E5:F7:6D:87:38:69:D4:3E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZfW68haW48W_Ofl922HOGnUPoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/dc02bf-02e4-4e85-a76f-72f3a32375bc/1/hZfW68haW48W_Ofl922HOGnUPoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/dc02bf-02e4-4e85-a76f-72f3a32375bc/1/hZfW68haW48W_Ofl922HOGnUPoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:67:2d:49:ae:71:e2:7f:72:ef:a9:2b:69:23:bc:f5:dc:73:
         e4:12:8b:15:0a:d0:8d:f5:cc:6b:e7:69:f8:03:22:fe:44:61:
         16:3b:4e:5e:aa:0b:1c:df:06:30:70:4d:42:04:5e:9b:3b:38:
         b9:21:90:9b:ca:bb:8f:ec:0f:17:65:4a:d3:b3:df:39:2c:28:
         7b:5f:9a:14:5a:38:18:4c:c0:5f:78:06:1c:1e:3f:fe:7c:09:
         f6:d4:01:fc:7e:c5:c5:bc:da:f8:50:d8:f4:0c:bb:15:2a:e9:
         37:51:40:d9:8e:35:44:6f:90:7a:05:a0:6f:79:31:aa:a5:4c:
         3a:a6:7d:05:f3:19:1a:41:b0:35:80:d4:0e:5e:1c:72:c8:24:
         6d:06:48:dc:9d:11:f5:32:64:0f:62:6c:ab:31:dc:3b:b4:8e:
         50:ac:84:a2:48:6c:f9:ce:ec:3a:3d:d5:5e:73:98:51:37:13:
         59:23:ff:c4:e2:65:7a:c1:0c:af:71:86:97:6a:b8:fb:16:ab:
         e6:7a:67:94:ec:a0:f2:b1:12:85:c4:e9:89:22:a7:c1:fb:b0:
         0c:0a:9e:64:be:8c:c4:1f:91:d1:03:c8:22:40:f7:82:85:4e:
         fa:7d:4c:49:12:e7:d0:a6:11:7b:22:e9:24:b6:67:56:f8:10:
         b7:0e:6d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----