Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
File:                     o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json)
Hash identifier:          Rdumf1+Y8a4BVvQB0/zw1f89RugM1CMGoGSYCVSxA3o=
Subject key identifier:   3F:AB:D1:76:6D:2D:6A:56:A5:EB:F1:C0:9A:2C:92:00:ED:96:BC:51
Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
Certificate issuer:       /CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Certificate serial:       018F8938245A323B1F80A6DEDDDCAB12CA6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
Manifest number:          0CF3
Signing time:             Sat 18 May 2024 01:01:48 +0000
Manifest this update:     Sat 18 May 2024 01:01:48 +0000
Manifest next update:     Sun 19 May 2024 01:01:48 +0000
Files and hashes:         1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: gZA5sCtTSc3Y5HkZ5+gyL5OHVRuKu0xsJt5tTcOz3y0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:24:5a:32:3b:1f:80:a6:de:dd:dc:ab:12:ca:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032
        Validity
            Not Before: May 18 01:01:48 2024 GMT
            Not After : May 19 01:01:48 2024 GMT
        Subject: CN=3fabd1766d2d6a56a5ebf1c09a2c9200ed96bc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:de:7c:d4:64:3a:4c:13:d3:c1:bd:79:86:
                    b8:28:36:35:1d:cc:05:bc:7c:70:66:b6:27:56:83:
                    2a:6e:3e:d5:8b:77:11:06:82:9c:7b:3f:42:a0:ad:
                    72:fa:c5:eb:62:11:63:3b:40:b6:ce:5f:d0:5a:6c:
                    10:2b:b5:a8:dc:3d:6d:ae:a0:47:ff:dd:59:08:92:
                    71:c2:0a:a8:16:55:d5:ae:8c:c5:7a:fc:fc:56:38:
                    44:3b:c2:8a:28:db:a0:cb:7a:bd:78:96:9f:32:56:
                    9f:ff:8e:13:47:13:98:72:fa:65:9b:cc:c0:a7:82:
                    cd:54:b4:1e:8a:2d:58:f8:b3:cf:05:ff:29:eb:8a:
                    49:b7:eb:2e:06:67:7f:3a:3b:a8:14:52:b6:2e:eb:
                    d6:e7:b0:6e:61:1f:e8:1b:50:fd:7c:ed:1a:55:ec:
                    78:fd:11:7a:ea:37:ae:52:51:8a:1c:25:d7:6b:5c:
                    a9:b9:e3:1e:06:4c:a1:da:19:1a:15:75:e5:fc:51:
                    22:bb:e2:6c:07:71:d4:ad:27:73:49:98:ce:53:a8:
                    41:a7:56:26:dd:02:29:82:93:97:1f:0e:98:a9:d9:
                    55:08:25:99:7e:d0:b7:6a:8e:c0:74:62:32:37:de:
                    ed:2f:58:eb:84:c0:f9:e3:5f:cd:b1:96:95:b9:3a:
                    3e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AB:D1:76:6D:2D:6A:56:A5:EB:F1:C0:9A:2C:92:00:ED:96:BC:51
            X509v3 Authority Key Identifier:
                keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:61:11:51:17:f0:f8:00:4c:cc:28:ae:b5:5a:62:5b:42:75:
         24:5d:9c:48:66:d3:f7:68:da:d8:7a:a7:53:0a:06:9b:0d:0c:
         35:73:8d:78:84:a8:4e:4b:15:6c:ba:8c:65:12:3c:63:9e:5c:
         0c:d1:29:98:ae:a6:f0:27:53:c2:6b:8a:d2:bd:86:f6:49:42:
         2c:16:e9:99:c3:04:08:f3:06:e5:82:93:ba:52:af:35:e5:b7:
         78:47:ed:0d:8c:35:3f:cb:b9:d5:22:96:a1:eb:66:0f:ad:d6:
         01:c0:71:06:d9:cc:61:fd:e9:14:6d:a8:01:1d:43:0c:e6:df:
         1c:77:5f:78:39:19:c6:08:41:5d:11:f2:d3:6e:c2:ee:6c:b4:
         32:5b:10:38:58:df:8e:3c:81:b8:ee:61:3f:7b:e5:6e:81:f7:
         36:9f:e0:7a:3f:41:5b:c7:5b:a3:9f:60:d6:1f:4a:67:cc:6e:
         e2:c1:33:bb:ff:24:89:81:fb:f6:7f:5e:61:04:d8:5b:94:e1:
         d0:43:ae:95:37:d0:4f:33:f6:de:96:8d:30:4f:a6:86:df:a5:
         56:0f:89:61:8b:ef:41:18:97:a9:ff:a7:be:79:fd:0f:ca:84:
         89:42:9a:ca:81:27:77:ac:de:9c:ac:ff:67:cb:b7:a6:f8:57:
         60:eb:4e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----