Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
File:                     Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft (raw, json)
Hash identifier:          pOqzKIbwniRlSkQ5W9qhEzmst3b49z/3MY6v76BdEBo=
Subject key identifier:   F5:58:CD:AF:A6:BA:7A:5C:F5:77:5A:5B:A0:ED:F5:87:8C:9D:19:8F
Authority key identifier: 46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
Certificate issuer:       /CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Certificate serial:       018F874A0689AA52D96AA5EAE3003443B585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:02:06 +0000
Manifest this update:     Fri 17 May 2024 16:02:06 +0000
Manifest next update:     Sat 18 May 2024 16:02:06 +0000
Files and hashes:         1: Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl (hash: mEQRKuqn5ToRslvTs6XEMVob6o2OUMj5+JiRlHPe1dE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:06:89:aa:52:d9:6a:a5:ea:e3:00:34:43:b5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
        Validity
            Not Before: May 17 16:02:06 2024 GMT
            Not After : May 18 16:02:06 2024 GMT
        Subject: CN=f558cdafa6ba7a5cf5775a5ba0edf5878c9d198f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:f3:60:c5:cf:a5:e9:22:dc:ca:23:02:4c:
                    4b:3f:35:f3:ff:7f:66:f2:56:38:68:c2:36:e5:c9:
                    8f:5d:e5:6d:50:2a:28:da:21:9d:0a:d7:59:2d:6c:
                    ee:ea:a5:df:cb:0d:65:89:c0:e2:a0:10:38:1e:c5:
                    fc:63:c9:0e:8b:46:5c:47:5f:8a:79:bd:55:5a:b2:
                    b2:0b:f0:2f:b2:f6:ea:12:cc:63:90:9c:9f:90:00:
                    ed:35:c7:c5:b1:3e:50:a4:56:0a:a5:a3:fe:22:e2:
                    cd:76:e4:a9:a2:23:45:4b:f9:37:e7:ca:eb:b1:ef:
                    f7:9b:a5:5d:3d:d3:b1:16:48:e6:1b:c9:04:e9:62:
                    4a:3c:58:6b:07:66:d4:cb:a4:75:9a:0e:92:de:50:
                    6f:96:ab:fe:b6:89:06:90:00:91:2a:7f:d8:b7:b1:
                    95:a4:c0:31:bb:e9:41:36:d5:94:bb:17:86:22:69:
                    d7:9f:65:ec:55:1d:89:49:2b:58:d9:a2:22:16:7d:
                    ed:20:b6:f3:35:5d:30:8e:94:fb:b6:5c:e8:1b:70:
                    16:7f:8b:fa:39:9b:a9:ac:15:88:7e:6c:ee:7f:c8:
                    49:b5:74:96:82:b3:c3:ef:f2:8c:82:4c:16:83:3e:
                    50:bc:fc:11:75:e6:74:bc:c0:89:e0:40:73:4d:04:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:58:CD:AF:A6:BA:7A:5C:F5:77:5A:5B:A0:ED:F5:87:8C:9D:19:8F
            X509v3 Authority Key Identifier:
                keyid:46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4c:f7:b3:cb:f9:5b:7f:21:70:29:2a:0e:47:8c:d1:3e:18:
         56:ee:1e:63:b4:f0:fc:e4:72:f1:8e:50:47:ed:2d:16:4e:33:
         c8:59:4a:5e:a5:e0:fb:8e:84:84:09:3e:63:c0:cb:5c:57:ef:
         a3:a3:cf:9c:93:8c:99:65:49:b9:2f:57:2e:ff:5b:7c:64:27:
         2e:c1:ba:61:0d:88:f1:11:83:5a:30:5c:97:b2:ed:c5:67:ff:
         6d:5d:14:fc:90:5e:37:1c:b0:fc:ba:54:9d:00:aa:20:27:eb:
         50:5e:f9:c6:e0:7e:f0:75:2f:5f:76:02:b4:ce:f7:1e:7f:53:
         bb:3f:04:4f:a8:2d:0d:c3:28:ea:dc:e8:43:94:fd:24:b8:c1:
         65:0b:01:cd:45:8d:2b:b9:9c:7d:ad:7e:ad:97:c0:99:74:3e:
         09:6e:8a:22:91:ad:1e:ca:c5:d7:09:e5:01:c8:de:61:ea:77:
         bb:07:7c:2f:ec:a7:d8:fc:96:b7:73:26:5a:8c:73:83:01:4d:
         15:75:db:2e:28:e0:ae:69:66:0f:a5:84:80:23:a1:4d:9f:3c:
         fd:bd:32:10:36:bd:d1:d5:eb:32:1f:30:5e:d9:99:39:65:d0:
         b8:de:ee:ee:ef:be:1f:11:7d:50:61:74:27:79:10:3d:4a:76:
         2c:84:3f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----