Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
File:                     lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json)
Hash identifier:          QY6SDeThejLIOULsLDxTaWhghY3ZoKVOgRiGeMZvBTY=
Subject key identifier:   19:00:6D:AC:73:BE:53:4F:C3:DA:41:5F:F6:1C:05:81:0B:B8:36:D4
Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
Certificate issuer:       /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Certificate serial:       018F88241ADC52DF80A8EC783E1DAF059108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
Manifest number:          0F26
Signing time:             Fri 17 May 2024 20:00:18 +0000
Manifest this update:     Fri 17 May 2024 20:00:18 +0000
Manifest next update:     Sat 18 May 2024 20:00:18 +0000
Files and hashes:         1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: ZK7DXszLdich9AZ4FVt2PQEmQYJDyT4Mf7C2jr6LPXc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:1a:dc:52:df:80:a8:ec:78:3e:1d:af:05:91:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
        Validity
            Not Before: May 17 20:00:18 2024 GMT
            Not After : May 18 20:00:18 2024 GMT
        Subject: CN=19006dac73be534fc3da415ff61c05810bb836d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:72:f8:e0:43:63:cd:94:42:9f:02:2c:9b:4a:
                    be:22:fc:19:06:6d:69:25:e5:e4:6d:08:90:a9:81:
                    5a:5a:1a:46:2f:73:06:79:2a:57:75:15:7a:5c:4c:
                    be:46:15:d2:3b:66:31:94:56:bc:e3:4c:26:6a:ef:
                    51:bb:75:3e:b1:e7:b6:76:32:f0:8a:21:cf:64:46:
                    4c:b2:27:74:ce:84:44:f7:70:7b:2c:41:4e:0d:ee:
                    7e:3e:63:73:1c:d3:93:1e:d8:95:5f:15:33:ca:5d:
                    7e:e7:b1:a1:ed:5a:3f:5d:9b:c7:d9:03:6c:70:e1:
                    5b:93:f3:ac:c7:b8:84:de:51:b8:11:25:25:c1:d9:
                    27:83:de:18:8e:65:01:3a:7f:a7:a0:d0:3a:fa:e6:
                    8b:09:40:8f:a4:d2:82:cf:e0:03:b2:5f:ed:1b:86:
                    51:5d:07:1b:64:b0:06:10:b8:c4:e8:2e:9c:57:12:
                    11:dc:22:d0:3a:7e:12:31:33:35:ba:60:91:0e:ea:
                    51:fa:0d:ca:53:1c:e3:ec:db:48:71:31:35:72:08:
                    f2:f7:f2:49:31:48:7e:ab:d4:20:cd:0a:35:39:91:
                    95:f6:2f:cc:1e:39:03:41:c9:d1:25:70:da:56:61:
                    a8:a1:eb:43:a4:4a:53:96:53:91:c3:50:37:68:4a:
                    97:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:00:6D:AC:73:BE:53:4F:C3:DA:41:5F:F6:1C:05:81:0B:B8:36:D4
            X509v3 Authority Key Identifier:
                keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:0f:00:ce:a9:15:63:29:1e:71:d3:d0:19:dc:b1:ec:3e:ee:
         19:34:cb:f9:29:9a:d7:05:99:2d:85:40:42:1b:0f:e9:5b:65:
         b1:2c:37:db:e5:20:d8:ea:e1:1c:b1:97:98:97:8a:12:b4:20:
         7f:4f:7a:8d:44:fd:f3:ae:d9:8b:65:9d:ea:b0:05:96:c5:9f:
         bb:8f:dc:c5:ff:4c:af:14:90:37:43:40:54:25:19:f0:4e:ae:
         d3:d3:59:7f:34:f3:67:3c:5d:94:42:21:9e:2e:f1:7c:05:1a:
         21:6c:91:93:92:17:28:6d:24:b0:48:2e:d1:a1:fc:6f:4e:16:
         b9:09:a1:1d:70:60:67:f1:73:c6:f5:5e:be:43:e3:6e:3c:f4:
         d6:ad:92:91:ee:32:2a:78:1c:19:dd:97:d2:4e:c1:1b:8f:d2:
         0e:a8:b1:53:24:91:8f:95:c4:75:d0:04:66:1d:e2:b9:a4:eb:
         ee:99:27:65:e7:84:cb:df:61:d0:61:51:1b:bd:56:95:13:d4:
         5b:03:19:cf:1a:1f:77:06:3a:34:82:de:54:44:7c:9d:04:dd:
         13:ef:3b:f9:85:11:29:17:0c:9b:e6:55:2b:5c:23:94:1d:42:
         15:8b:8d:1c:86:98:b6:03:16:e7:38:6b:4e:2f:b4:7d:ef:9f:
         53:39:a9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----