Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
File:                     W8KZyUmzraue-TUmM_zsw7cr1Rg.mft (raw, json)
Hash identifier:          gGhFPCVbZh3niuTszFX1SGzcImhTGySX5yYc/66IMHg=
Subject key identifier:   88:78:A4:C5:01:79:59:D8:F0:A1:93:3B:E8:6D:3D:6D:4F:FC:4A:10
Authority key identifier: 5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
Certificate issuer:       /CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Certificate serial:       018F87B610A7BDA7F58D4493F51577496D44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
Manifest number:          0E88
Signing time:             Fri 17 May 2024 18:00:06 +0000
Manifest this update:     Fri 17 May 2024 18:00:06 +0000
Manifest next update:     Sat 18 May 2024 18:00:06 +0000
Files and hashes:         1: W8KZyUmzraue-TUmM_zsw7cr1Rg.crl (hash: cFIJwlDGSmuQeMuoHeUQoEU7p/G6u7YMZkSfaP0Gmls=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:10:a7:bd:a7:f5:8d:44:93:f5:15:77:49:6d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
        Validity
            Not Before: May 17 18:00:06 2024 GMT
            Not After : May 18 18:00:06 2024 GMT
        Subject: CN=8878a4c5017959d8f0a1933be86d3d6d4ffc4a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:b9:25:18:f0:f2:97:76:1a:17:05:cb:f1:
                    cd:e0:c5:d6:6a:de:eb:b3:3a:29:56:92:d7:ca:4d:
                    f3:94:15:ac:73:c5:b2:7e:3e:a5:34:3f:cf:21:a4:
                    87:73:d8:8b:67:d4:e8:bc:75:fc:d4:71:c3:4f:d7:
                    e8:95:cc:63:17:f2:f8:5e:1a:04:d5:8e:59:22:c8:
                    39:a3:c1:67:d4:7d:0d:a1:f5:fe:be:c7:3f:d4:2a:
                    09:89:6f:ee:dc:30:6d:6e:b0:78:d4:ab:43:ad:7b:
                    cc:c4:9b:33:f4:df:e1:91:06:73:0a:33:99:91:65:
                    05:00:6b:ea:89:06:ac:49:29:64:50:b7:84:9c:d8:
                    d6:ad:28:cc:14:3d:35:07:29:6e:09:6b:ce:a3:01:
                    da:26:86:a4:b8:2d:45:89:a8:a8:b8:27:a3:81:88:
                    b9:9a:1b:e3:a9:6d:6a:ad:7d:35:c6:83:b4:30:83:
                    e5:13:04:3a:8d:82:3f:48:47:3f:a3:f8:d6:05:8e:
                    54:82:47:d8:2d:1e:7b:66:c7:a6:d7:c4:0f:cb:13:
                    45:a9:5f:fa:3b:cb:d7:11:6b:de:59:97:07:32:37:
                    76:3f:ae:18:92:72:7e:29:39:d6:70:b3:93:f0:42:
                    10:4e:d2:ab:a8:d3:e2:0f:d2:10:22:a1:b2:f1:84:
                    e7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:78:A4:C5:01:79:59:D8:F0:A1:93:3B:E8:6D:3D:6D:4F:FC:4A:10
            X509v3 Authority Key Identifier:
                keyid:5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:63:23:a9:6f:90:c4:3c:0a:82:f7:ef:0c:32:d0:ce:fe:45:
         56:fc:8d:bf:ab:db:4b:83:79:ff:0e:a9:6a:69:5a:95:a0:ef:
         0d:4f:f3:1f:5f:78:04:c9:e7:e6:54:d2:27:ed:3b:9c:c5:07:
         0b:87:bf:9a:01:d5:2e:1a:cf:3c:bf:59:eb:5e:7a:66:18:07:
         45:cf:9c:27:60:17:6c:c9:c3:aa:7e:e6:e4:db:38:09:38:08:
         ef:66:6c:02:75:91:b9:70:0a:4b:26:b6:f9:19:81:24:b2:ac:
         ba:b0:cd:bb:08:b6:8e:00:66:6b:9e:5f:b8:7f:3a:51:a5:e5:
         8b:4d:2e:04:f4:74:bc:58:a0:ed:14:cc:0e:17:61:90:ed:40:
         f4:be:05:82:55:b2:a1:57:87:21:f1:33:28:a4:5b:ab:03:93:
         96:4e:e8:63:4c:81:e6:cd:c2:39:58:ae:b9:db:a9:65:60:e7:
         03:d6:6a:14:d1:c6:8e:9a:7e:28:f1:de:ae:42:ed:99:5d:a3:
         69:54:f4:54:db:78:7a:50:a4:9d:73:89:09:76:8a:bf:05:a3:
         13:bd:69:9a:ae:43:72:32:8e:bd:c8:bc:54:20:89:f5:9b:f9:
         ac:04:dc:3a:79:bc:b9:74:2e:97:6e:44:f5:ce:85:b2:fc:98:
         ba:63:aa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----