Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
File:                     INShQtHjFwTrW88Dp4X2N4NVt5k.mft (raw, json)
Hash identifier:          NJv+uutl0vvmWk7vEJSZRLo7mzF2D3bcRjrJ8WjoOAI=
Subject key identifier:   9B:71:D8:55:84:5A:D2:57:27:BF:85:B9:76:03:DE:BB:B8:1F:22:26
Authority key identifier: 20:D4:A1:42:D1:E3:17:04:EB:5B:CF:03:A7:85:F6:37:83:55:B7:99
Certificate issuer:       /CN=20d4a142d1e31704eb5bcf03a785f6378355b799
Certificate serial:       018F87B6A5E433058A1F4DD19E9F10D6B04A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
Manifest number:          019C
Signing time:             Fri 17 May 2024 18:00:45 +0000
Manifest this update:     Fri 17 May 2024 18:00:45 +0000
Manifest next update:     Sat 18 May 2024 18:00:45 +0000
Files and hashes:         1: INShQtHjFwTrW88Dp4X2N4NVt5k.crl (hash: 7FsppcuzEVc9HFvCfH/RK/t9WEl16YsVNG4C9XyJ+E0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:a5:e4:33:05:8a:1f:4d:d1:9e:9f:10:d6:b0:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d4a142d1e31704eb5bcf03a785f6378355b799
        Validity
            Not Before: May 17 18:00:45 2024 GMT
            Not After : May 18 18:00:45 2024 GMT
        Subject: CN=9b71d855845ad25727bf85b97603debbb81f2226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:eb:f0:44:a0:68:e7:56:81:d0:87:63:17:52:
                    a2:7d:09:b1:86:57:bd:f6:56:cc:bd:d2:df:8d:51:
                    00:d1:09:52:21:e7:79:b1:a1:13:5d:72:b4:05:b2:
                    b7:af:38:71:84:8d:26:2a:26:50:13:d5:8f:37:8f:
                    d8:49:0c:2f:72:f3:21:4f:10:30:7f:24:45:3e:36:
                    06:99:95:da:9a:ac:f7:40:a6:44:c9:af:52:fb:55:
                    89:47:9d:85:a2:80:06:64:1b:62:ce:91:1c:1d:56:
                    b2:ed:c2:dd:31:07:60:d7:a3:d3:aa:4b:4e:96:3a:
                    a8:87:65:fc:41:77:5a:96:f1:47:31:4b:82:e0:2c:
                    0c:c7:29:0c:8b:e4:27:d3:34:ce:12:99:db:55:ec:
                    73:da:34:f8:f9:0e:42:24:43:44:66:74:89:b5:43:
                    fa:1a:3c:91:1c:0e:b5:28:4c:1f:92:00:3f:cf:7c:
                    c8:28:ea:39:d6:5c:ef:67:07:1c:d0:f9:e1:60:f2:
                    a4:72:eb:f5:42:1d:49:ed:a9:88:eb:58:3a:5d:e6:
                    20:c7:d6:6e:77:dc:6d:05:32:77:d1:75:82:77:18:
                    84:ce:61:4b:f6:a5:cf:f0:f5:af:39:e8:6a:f6:9b:
                    c0:30:8d:fb:00:03:23:5a:91:e4:e2:e1:2f:36:56:
                    a7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:71:D8:55:84:5A:D2:57:27:BF:85:B9:76:03:DE:BB:B8:1F:22:26
            X509v3 Authority Key Identifier:
                keyid:20:D4:A1:42:D1:E3:17:04:EB:5B:CF:03:A7:85:F6:37:83:55:B7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:04:b6:c6:2a:6f:b0:b2:a8:0c:c1:e1:d0:75:c6:4f:4a:fc:
         c0:35:6b:8c:8d:6c:69:fe:5f:8b:f7:4c:92:31:b2:55:89:11:
         10:d5:ed:fb:a0:00:3b:d2:36:85:2c:35:1f:5a:14:12:49:a4:
         b9:43:8e:03:31:db:0b:e6:84:6c:61:a2:12:e5:9d:90:6c:e0:
         fe:ff:03:2a:13:d9:13:7c:e5:af:18:a4:2a:18:08:ae:38:db:
         ac:d3:9d:1c:fa:e3:36:00:4b:11:cc:83:17:67:2d:8f:ca:4e:
         02:59:15:9a:c2:61:d1:39:0b:b3:c4:4c:7f:2e:df:1c:58:85:
         7a:d1:d2:f8:33:a7:41:de:00:bd:42:05:ef:f2:ab:cd:53:68:
         02:5f:6c:7c:69:41:6d:6b:2e:ab:e4:2a:39:00:c2:54:08:97:
         bd:47:1e:c7:c0:e6:73:53:b6:dc:a3:56:2e:9a:e6:6b:f7:59:
         7c:9b:08:55:27:68:47:5b:50:64:b9:ac:3e:fe:77:1c:db:b5:
         89:9e:3d:e3:cd:23:aa:03:3f:36:f8:cc:52:d2:87:2f:8b:13:
         d2:7b:1a:ed:3a:d5:e1:32:49:62:80:0f:2c:3c:61:f1:11:64:
         b3:d9:87:be:6f:6f:27:00:c1:e9:68:50:22:b6:29:88:9c:b7:
         8b:bc:66:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----