Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
File:                     h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft (raw, json)
Hash identifier:          iHILJJRwaSkwKOWGGVESQmc748pGTd0ykacl1K/lDpI=
Subject key identifier:   F3:3B:A1:E1:1C:1D:06:D8:85:60:F9:8B:23:CC:B1:C0:EB:0E:77:D0
Authority key identifier: 87:D4:9E:A2:8D:25:91:F7:2E:75:7C:7D:AD:30:08:14:C2:77:94:BE
Certificate issuer:       /CN=87d49ea28d2591f72e757c7dad300814c27794be
Certificate serial:       018F87B63A75BA0812B109BA369A0D177E0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
Manifest number:          E4
Signing time:             Fri 17 May 2024 18:00:17 +0000
Manifest this update:     Fri 17 May 2024 18:00:17 +0000
Manifest next update:     Sat 18 May 2024 18:00:17 +0000
Files and hashes:         1: h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl (hash: p6DCF+16IU7SeQslukKIPIhNcEKURfE+tpwsu1WpFoM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:3a:75:ba:08:12:b1:09:ba:36:9a:0d:17:7e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d49ea28d2591f72e757c7dad300814c27794be
        Validity
            Not Before: May 17 18:00:17 2024 GMT
            Not After : May 18 18:00:17 2024 GMT
        Subject: CN=f33ba1e11c1d06d88560f98b23ccb1c0eb0e77d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:e5:95:25:ec:72:6c:ca:be:02:66:55:04:
                    77:fa:a3:e7:1e:a8:fc:81:18:33:dd:03:c4:be:41:
                    5d:e6:bf:08:c4:dd:29:0d:ff:eb:46:8c:7c:64:1d:
                    c6:eb:86:71:90:88:8c:dd:f4:64:e4:74:ed:59:f1:
                    c1:43:30:a7:e3:47:4e:1c:e2:71:32:bd:e3:f6:fb:
                    1e:8c:3f:97:3c:35:3c:77:95:15:10:1a:d1:1f:be:
                    f2:c7:60:27:3c:68:9f:1b:9a:f2:e6:a7:f5:33:e4:
                    92:e1:bf:bb:4c:82:9c:97:08:51:1c:ca:cd:8e:80:
                    9e:f5:f2:4c:0f:f4:16:db:ae:db:20:bf:de:28:8c:
                    e6:3d:08:47:1c:4b:58:6e:9a:0c:82:de:5b:c4:48:
                    6b:e6:a5:e3:10:68:9b:93:14:32:b8:f5:05:84:d9:
                    e0:d2:5c:f2:03:ed:fa:67:b2:d8:53:d7:78:50:67:
                    32:b0:eb:88:f1:95:88:99:42:46:af:88:aa:87:3c:
                    e1:0f:b9:e7:5e:2c:04:ef:6b:73:be:e9:1a:8d:e5:
                    14:3f:1d:5f:fb:b4:9e:45:30:85:80:59:40:86:f9:
                    e1:88:28:0d:19:75:34:44:31:ec:0a:94:df:93:ce:
                    25:7d:6c:b1:3d:c0:89:99:fc:e0:3c:60:bc:58:f9:
                    0d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3B:A1:E1:1C:1D:06:D8:85:60:F9:8B:23:CC:B1:C0:EB:0E:77:D0
            X509v3 Authority Key Identifier:
                keyid:87:D4:9E:A2:8D:25:91:F7:2E:75:7C:7D:AD:30:08:14:C2:77:94:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2e:c0:66:6f:f9:86:f1:56:85:e7:9a:f0:35:84:fe:ef:40:
         7c:45:50:e9:df:30:fd:f4:85:b1:9b:3f:54:dd:95:9f:1c:52:
         2f:f5:b8:f7:2a:db:95:2f:1d:6b:81:ec:fc:eb:38:90:48:1b:
         34:73:01:36:49:4d:40:0a:87:a0:8b:ba:af:e4:18:9d:10:f1:
         a5:42:58:ff:6c:55:be:45:f3:13:a9:99:d6:75:3d:97:a9:c0:
         10:da:ec:36:1a:43:cf:36:87:40:88:69:dd:94:9d:9e:8b:f4:
         d3:ae:e4:b4:94:07:6c:33:fa:5b:81:53:2c:2c:60:e4:4d:8f:
         70:8a:5c:fc:4a:7e:82:3e:40:02:28:f0:7c:b7:f9:b6:f7:3d:
         fb:c2:8f:86:e9:30:ef:ab:a4:77:1d:8a:33:cb:51:2f:6a:a2:
         c2:ea:b1:54:01:52:e4:ed:74:a7:23:18:36:a3:59:30:2e:7e:
         5a:98:d3:48:36:c3:79:32:19:03:b3:dd:c8:64:ff:8e:ec:63:
         dc:57:36:ac:25:55:bf:dc:5b:5b:3c:6f:d4:04:5e:51:0c:d3:
         8a:37:a7:1a:2d:ed:07:b6:98:ec:d7:ef:4a:04:d6:b0:10:46:
         d6:d3:9b:26:36:20:4b:e2:93:5c:95:74:46:10:2d:66:a6:67:
         c4:9c:36:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----