Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
File:                     na669vl-yTdN9sFJL1nV8Tqd0Ag.mft (raw, json)
Hash identifier:          EpbqUm0BVWgDAL9f544SslBk6NYTIm3oiv/FWagF8DE=
Subject key identifier:   F9:EB:DA:76:6C:94:2B:55:20:CC:44:C9:4A:32:98:AB:C9:9F:F5:26
Authority key identifier: 9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08
Certificate issuer:       /CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008
Certificate serial:       018F885B3F104DD39B00751074504A0C490B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
Manifest number:          012F
Signing time:             Fri 17 May 2024 21:00:32 +0000
Manifest this update:     Fri 17 May 2024 21:00:32 +0000
Manifest next update:     Sat 18 May 2024 21:00:32 +0000
Files and hashes:         1: na669vl-yTdN9sFJL1nV8Tqd0Ag.crl (hash: 2hek3lXwEf4zU0WUQ1QYCg/o0V48f5Y/HI/ULvlFr9U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:3f:10:4d:d3:9b:00:75:10:74:50:4a:0c:49:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008
        Validity
            Not Before: May 17 21:00:32 2024 GMT
            Not After : May 18 21:00:32 2024 GMT
        Subject: CN=f9ebda766c942b5520cc44c94a3298abc99ff526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1d:44:f9:19:02:aa:4f:7f:e4:69:b4:d0:e3:
                    2d:b2:78:16:df:a3:a6:f3:f1:4d:da:f9:ac:c9:80:
                    5b:be:dc:4a:7b:db:c2:70:06:5c:a4:aa:12:04:26:
                    3d:0c:e9:7c:90:51:18:35:97:c2:f2:81:b0:e0:47:
                    00:54:c3:e5:b9:dd:8e:a0:b0:be:0e:2d:30:88:3e:
                    8c:88:95:64:28:d6:e4:11:1e:60:2c:f3:66:4e:34:
                    78:a1:73:a6:c7:ea:c2:53:8e:e7:fd:e8:99:0d:44:
                    ec:af:2f:98:7a:18:33:78:01:19:73:1d:9b:b4:64:
                    16:fe:57:07:27:5d:3c:2f:13:ed:c7:9b:bb:d1:07:
                    8a:44:a0:f5:05:3c:e3:bb:e9:04:45:f0:24:73:9e:
                    39:98:8d:d3:4d:05:b2:bb:e9:d3:53:85:00:9b:60:
                    05:e7:b3:c0:16:52:13:e7:35:1b:20:0f:79:f6:d2:
                    97:8b:94:70:1a:a2:a8:dc:d7:b7:11:49:fb:be:41:
                    c2:80:06:f4:7d:a1:a9:de:d2:ef:16:ae:a3:c2:1c:
                    89:41:ea:20:79:7d:87:6b:75:62:2c:4c:c4:06:bd:
                    52:23:a3:01:94:ce:6d:70:91:61:f3:16:a6:80:aa:
                    cd:e9:90:f7:75:27:75:0b:8b:15:de:94:f0:24:39:
                    89:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EB:DA:76:6C:94:2B:55:20:CC:44:C9:4A:32:98:AB:C9:9F:F5:26
            X509v3 Authority Key Identifier:
                keyid:9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c7:2b:dd:d6:0d:1f:22:7e:3e:49:a7:fd:64:0d:03:15:55:
         05:a5:c9:4b:f1:b5:93:63:f4:31:4d:c3:40:34:01:13:11:9b:
         d1:e0:c6:d6:0f:4f:66:1a:f6:14:90:1c:78:8f:e2:8f:2d:f9:
         19:37:c9:4e:d0:dd:cd:52:55:85:75:3c:c4:bb:53:9c:c2:91:
         3e:2c:2c:15:0d:ad:c2:14:d2:44:44:52:b5:81:d7:e5:d7:87:
         a0:a4:de:c0:a2:82:a4:d8:88:92:b1:03:f9:fd:7d:33:97:f3:
         48:9a:17:34:1a:4e:c2:9f:b9:43:8c:ac:4e:3b:76:1d:1d:aa:
         db:3f:f6:3a:1d:0d:41:a1:96:95:2d:65:ee:9b:8d:8e:7a:d7:
         86:86:fa:65:f5:52:a4:d6:d9:67:45:aa:22:ec:1b:f6:4c:ca:
         49:49:88:19:e2:76:23:f4:3d:ba:ee:49:04:3a:86:53:21:c2:
         55:05:5f:69:28:65:51:76:20:7f:0e:11:a4:1a:39:7b:70:20:
         78:2e:61:f4:a2:5c:ce:5a:ff:a4:d3:f5:91:3b:19:1a:23:20:
         40:f6:15:fa:a1:66:eb:55:02:88:f6:be:fb:3b:db:d5:8c:97:
         33:a0:90:cd:4d:35:0e:10:73:4b:33:73:5b:62:97:55:26:21:
         08:f0:6c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----