Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File:                     iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier:          radAKOOQTNpPoovDHAR8DfWlJQpIzIVCkMNNG0Pjuvo=
Subject key identifier:   5D:FF:70:2E:45:F3:EC:FF:42:57:3F:30:20:F3:EF:A8:04:06:A2:7A
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer:       /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial:       018F87B6AB1BB61DF9B88CC4A5D9C865D312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number:          64
Signing time:             Fri 17 May 2024 18:00:46 +0000
Manifest this update:     Fri 17 May 2024 18:00:46 +0000
Manifest next update:     Sat 18 May 2024 18:00:46 +0000
Files and hashes:         1: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: 6bCu9ZndasDk11VLc+nzZB6fbwVUSmvLP1ZWh7NklXU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:ab:1b:b6:1d:f9:b8:8c:c4:a5:d9:c8:65:d3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
        Validity
            Not Before: May 17 18:00:46 2024 GMT
            Not After : May 18 18:00:46 2024 GMT
        Subject: CN=5dff702e45f3ecff42573f3020f3efa80406a27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:f3:41:7b:1d:93:05:b0:a8:d6:59:26:c4:
                    13:e7:33:63:c3:59:09:cf:7c:84:12:ee:f5:64:4f:
                    0f:8b:af:16:13:01:b3:0e:69:ec:ce:ce:63:0a:ed:
                    7d:ae:65:a5:ef:19:81:fb:df:99:d6:bc:85:9a:92:
                    3f:dc:b3:a5:a0:a9:fd:49:4c:ba:d7:60:77:9c:c6:
                    c8:15:0a:dc:34:7e:16:3f:ce:7c:32:1a:b7:7d:e8:
                    f1:8e:02:d1:be:90:8a:30:1a:e4:b6:ed:c1:1b:e0:
                    a6:25:09:9c:c1:4e:f1:cf:87:9a:e3:7d:19:11:72:
                    63:e7:30:59:9e:6d:03:38:56:b2:d4:35:0e:92:17:
                    5e:84:c3:91:83:00:36:90:0e:43:fd:2c:76:38:bf:
                    bd:2f:af:75:ba:16:eb:62:04:73:b5:19:2c:25:cd:
                    b1:6c:69:9f:05:4c:43:f2:a2:14:8c:1c:d0:64:a8:
                    5b:35:c6:82:09:4e:ff:45:44:45:e4:68:fb:d8:9c:
                    74:9d:3b:0c:99:d7:c9:c2:04:ba:13:72:be:9a:3b:
                    03:76:2f:0b:43:1f:3d:e8:47:81:03:00:e3:30:23:
                    d7:ba:f2:b4:05:67:6a:fc:d5:e1:ad:f7:47:ab:d7:
                    60:53:35:2d:fb:c9:a7:9c:7f:bf:ae:ec:b4:10:01:
                    91:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FF:70:2E:45:F3:EC:FF:42:57:3F:30:20:F3:EF:A8:04:06:A2:7A
            X509v3 Authority Key Identifier:
                keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:22:84:1d:3f:8a:c7:e7:ad:d4:0a:99:31:aa:06:b2:ab:26:
         4e:0b:df:be:d3:2d:96:f7:90:a5:2b:61:e6:e8:f8:1a:2a:91:
         77:68:2e:21:c7:1c:a7:98:c1:71:ac:dd:e8:c0:e2:00:94:e4:
         70:b6:40:bf:53:81:97:d6:9e:12:f1:9d:55:22:c8:0f:ca:e0:
         b2:22:dc:36:30:b8:e9:b9:27:07:54:a8:23:33:0f:d7:f1:07:
         b3:e7:cc:e4:71:cf:95:52:16:e2:9b:95:91:a1:bb:df:44:26:
         81:ce:ba:bd:49:99:c4:2a:45:6e:79:1e:1d:c8:23:f6:a1:91:
         44:31:ad:5e:5e:5c:a7:7f:4e:11:51:f1:79:f4:9e:bc:cc:9c:
         6e:14:87:6d:d1:c9:ae:2d:3a:b7:47:e8:4a:e1:ca:68:6f:46:
         91:04:bc:0e:75:45:3b:68:da:8a:04:cf:0e:7d:a5:c1:da:d7:
         c6:6c:9f:f8:54:e8:0f:b0:3d:d3:72:c0:c0:62:60:0e:10:01:
         ea:02:fe:84:5b:52:78:da:49:2a:25:c4:ae:a8:0f:ca:93:0f:
         52:11:b2:b2:6a:01:4e:d1:25:13:a7:28:82:d4:98:be:b0:83:
         08:87:d5:9a:f3:a4:e4:05:ec:35:0d:ba:b2:2e:28:8b:32:42:
         04:2d:5b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----