Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
File:                     G1WOmRP2tWzD1WD5T_E38s1vSGI.mft (raw, json)
Hash identifier:          +HeYlupanUIRk6MHThpjZeNnFflPOxD+IBoFDZnbJVk=
Subject key identifier:   F7:43:D4:27:E8:4B:0D:13:F1:34:12:1F:5E:CB:95:DA:E7:36:66:D5
Authority key identifier: 1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
Certificate issuer:       /CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Certificate serial:       018F885B601C1B8ED00A4342F3325D2A260E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
Manifest number:          0190
Signing time:             Fri 17 May 2024 21:00:40 +0000
Manifest this update:     Fri 17 May 2024 21:00:40 +0000
Manifest next update:     Sat 18 May 2024 21:00:40 +0000
Files and hashes:         1: G1WOmRP2tWzD1WD5T_E38s1vSGI.crl (hash: hFHTsnfgyABElTqJn7f0gZPlvOt1usVWKt03T74xlvM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:60:1c:1b:8e:d0:0a:43:42:f3:32:5d:2a:26:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
        Validity
            Not Before: May 17 21:00:40 2024 GMT
            Not After : May 18 21:00:40 2024 GMT
        Subject: CN=f743d427e84b0d13f134121f5ecb95dae73666d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c7:ae:ea:9e:fd:e0:85:0f:e3:90:d1:66:a0:
                    e0:18:af:af:99:7f:bd:b7:3d:17:bb:d7:67:21:1d:
                    27:f6:85:9a:2b:09:32:58:1c:07:f5:56:f0:b7:ab:
                    25:04:90:b4:39:39:ff:ba:b2:ca:9e:74:21:14:7d:
                    33:3f:8b:93:06:0d:c0:15:45:37:21:00:eb:db:af:
                    70:b8:de:42:a3:13:bf:49:ae:23:f1:e6:95:c9:d5:
                    ac:17:f0:75:5d:bc:80:bb:ec:cb:1e:ac:61:82:3a:
                    6f:57:d6:c8:0f:3a:45:f5:55:39:fb:62:2f:5f:f6:
                    5f:b1:4a:6e:7a:d9:b1:51:7c:23:4a:e1:90:82:2c:
                    88:3f:df:6b:96:23:a9:6f:07:b2:12:57:c5:ae:0d:
                    1f:0f:4f:83:04:73:cd:8c:04:d8:cb:03:5b:d5:46:
                    38:67:78:b6:ba:21:de:60:b3:83:bd:1b:38:5b:4a:
                    48:57:a8:14:8f:65:21:06:96:61:86:f6:f4:18:00:
                    bb:f3:09:64:e8:12:32:e1:5e:eb:ae:01:2c:c4:d1:
                    36:14:2b:fe:3a:51:70:75:32:3a:5e:d6:0f:41:8c:
                    b8:01:09:4c:75:d8:b6:a4:c1:eb:e0:fa:9f:65:e3:
                    98:f2:49:1e:ef:4c:b0:74:9e:7b:d0:09:f5:05:90:
                    81:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:43:D4:27:E8:4B:0D:13:F1:34:12:1F:5E:CB:95:DA:E7:36:66:D5
            X509v3 Authority Key Identifier:
                keyid:1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3d:14:c3:8f:39:72:53:11:7b:cd:d2:e8:6a:c7:b8:c1:bf:
         c1:2e:7f:9b:3a:d3:4f:1f:b5:3d:3d:90:3c:ec:58:2d:35:d1:
         a6:a6:18:02:38:4d:09:d5:5f:28:1c:53:94:79:90:03:e3:68:
         b7:c0:7d:28:c3:6a:e6:72:a4:b3:88:73:d0:ab:e3:73:ba:00:
         82:ad:ba:40:0f:9d:b4:04:4d:7d:15:61:1e:a9:5e:62:8d:d8:
         92:04:7f:aa:4d:a1:10:39:11:b2:17:d4:3b:ce:96:3d:d0:96:
         86:87:63:a5:61:c3:d3:09:a1:b2:ab:4f:63:16:a5:15:f4:39:
         80:4b:2e:51:7b:e8:3c:b7:9a:08:ca:29:f7:5f:67:ea:12:1d:
         2a:06:d2:04:69:1f:21:d9:08:28:7d:20:4e:aa:38:25:34:36:
         23:55:81:c8:c0:07:f4:19:56:53:1b:78:44:27:0d:96:6e:b7:
         48:d6:19:fd:7f:fc:4a:5d:1e:83:4a:10:79:de:80:58:f7:e3:
         e7:12:c1:83:a4:1c:37:3f:16:9d:37:45:80:dd:5f:f2:f2:b9:
         44:55:e7:2a:b8:ad:a8:0c:e3:9e:c7:bb:cb:c0:40:99:17:ca:
         8b:7a:ab:b6:98:48:30:7e:e3:a7:7d:94:30:f5:33:4e:3b:f0:
         24:70:6c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----