Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
File:                     phvll6k-axrZQXjQPo6MFVcmeMc.mft (raw, json)
Hash identifier:          ryv74GPop8g9xdm9u5wUXysd4auYPt3TFq/pO27qU08=
Subject key identifier:   69:4E:A5:ED:EC:EC:CF:43:B2:E8:24:C7:E2:29:3A:D1:CF:1D:70:10
Authority key identifier: A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7
Certificate issuer:       /CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
Certificate serial:       0191FA47E82F7EAC9BC94AF187F543111C16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
Manifest number:          A1
Signing time:             Mon 16 Sep 2024 10:01:42 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:42 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:42 +0000
Files and hashes:         1: phvll6k-axrZQXjQPo6MFVcmeMc.crl (hash: Ocidq6q7W2gHTB7SC8qi31AQxySD6RP85lvrQbhspjM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:e8:2f:7e:ac:9b:c9:4a:f1:87:f5:43:11:1c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
        Validity
            Not Before: Sep 16 10:01:42 2024 GMT
            Not After : Sep 17 10:01:42 2024 GMT
        Subject: CN=694ea5edececcf43b2e824c7e2293ad1cf1d7010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:80:1b:63:92:f4:5d:d4:16:a2:7a:e6:e5:
                    45:91:e3:d8:18:ea:e1:89:40:e6:c8:e3:77:2b:c1:
                    e9:6b:41:d2:7b:13:de:52:5a:f1:a3:ee:2e:ac:4d:
                    b7:70:c0:62:28:72:9e:53:9e:24:eb:74:64:2d:75:
                    df:3a:08:7a:22:23:f5:00:ea:7d:6d:46:41:62:3c:
                    da:7c:60:51:b0:4b:fa:da:31:6a:ee:46:c1:ce:67:
                    1f:e8:aa:5e:d2:71:0e:13:8c:17:dc:14:d7:20:5f:
                    59:c4:62:52:36:70:f9:46:59:c8:e7:18:1a:30:82:
                    de:0c:9f:23:bd:64:7c:65:77:4b:1f:31:92:fa:f7:
                    78:d3:ac:fe:2e:26:d8:34:5a:ea:88:02:d8:db:b6:
                    52:6c:32:a5:cf:ec:cf:46:c9:c3:4f:b9:89:bf:89:
                    bb:68:c7:f9:76:ee:d9:c8:d1:97:4e:07:03:71:80:
                    43:2d:f7:87:52:9f:7e:e1:47:af:24:32:44:0a:a7:
                    ff:43:98:a2:4e:9b:cf:d4:9e:01:76:16:8b:3c:d7:
                    30:81:0f:92:d1:d3:b8:5d:f6:b7:a9:c3:76:67:0f:
                    28:5f:f5:fb:86:34:82:aa:39:6d:21:69:7d:71:b4:
                    e3:1f:1f:05:c4:97:dd:1c:9c:9f:da:68:2a:3d:bf:
                    d9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4E:A5:ED:EC:EC:CF:43:B2:E8:24:C7:E2:29:3A:D1:CF:1D:70:10
            X509v3 Authority Key Identifier:
                keyid:A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:8b:c4:f4:07:93:58:ef:aa:62:0d:ed:88:5e:2b:33:bc:72:
         21:da:12:1a:ee:6e:67:ad:96:af:2f:0d:48:bc:a4:0f:10:45:
         6e:8e:1e:4c:e9:d6:5e:4f:d4:e4:6a:66:9a:39:ce:e7:0c:b1:
         e0:2e:b3:7a:8d:f9:76:d5:88:d8:a5:f3:fa:e5:e9:cb:c2:8a:
         ff:bb:4a:d7:b1:9a:e0:d7:cd:a2:d3:ac:fa:10:e5:8d:af:eb:
         41:e8:33:d1:38:af:ff:9b:cd:93:ea:98:f6:92:b1:41:4f:fb:
         9d:d9:c2:eb:44:fb:02:6d:d4:72:1a:bd:81:1d:32:9c:21:0b:
         aa:11:bb:ad:01:00:e9:47:89:be:b1:cd:5d:b9:ae:57:01:7b:
         2f:52:b4:70:2b:78:ef:21:01:9e:62:47:92:8d:74:c3:2a:ce:
         dc:e7:af:52:4e:10:bb:8f:6d:00:58:b9:62:96:2c:5a:54:bf:
         79:08:60:5c:35:28:de:bd:50:82:e4:82:80:ce:f1:06:dc:b5:
         69:82:75:23:c3:9c:74:ab:b9:37:24:6b:49:ac:01:45:c4:b0:
         96:5e:53:10:80:cb:ac:10:80:54:d5:39:b0:09:21:82:6c:9e:
         86:dd:ae:41:05:e8:b1:aa:65:ae:be:e2:cf:f8:e1:53:aa:17:
         ef:95:fd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----