Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
File:                     TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft (raw, json)
Hash identifier:          w10ml/03QFU0qTzimkXLnKyceE0DORuWqyFWmU4+p1M=
Subject key identifier:   05:6D:30:E0:92:E2:D5:07:79:43:68:15:40:E8:EF:81:AE:94:C8:88
Authority key identifier: 4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
Certificate issuer:       /CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Certificate serial:       018F87B683AA61F8EA86BC0F22AE2C95B2AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
Manifest number:          10CE
Signing time:             Fri 17 May 2024 18:00:36 +0000
Manifest this update:     Fri 17 May 2024 18:00:36 +0000
Manifest next update:     Sat 18 May 2024 18:00:36 +0000
Files and hashes:         1: TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl (hash: 2vJ2jvgkNYEZZ7kAISZ4G2sw5ca2eGkDwkh7uteVHDI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:83:aa:61:f8:ea:86:bc:0f:22:ae:2c:95:b2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cd710b65373e0d910da70636fc143c06ba5ddac
        Validity
            Not Before: May 17 18:00:36 2024 GMT
            Not After : May 18 18:00:36 2024 GMT
        Subject: CN=056d30e092e2d5077943681540e8ef81ae94c888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:68:a3:a0:7f:2a:66:68:9e:f6:ae:78:05:b9:
                    6d:48:ba:65:55:6f:bc:0b:a2:88:16:cb:5e:0e:f2:
                    54:a3:dc:9e:b8:cb:45:59:9d:dd:0a:d0:59:d2:f4:
                    16:6d:c7:49:21:2b:2d:fe:d1:df:fb:9a:04:0f:16:
                    db:17:f8:55:4b:bb:3b:5e:b6:37:10:8a:ec:dc:81:
                    43:e5:f7:04:fe:7d:d6:ef:c5:18:c6:80:58:66:15:
                    e0:87:6f:b9:fa:cd:e5:ef:bf:33:7e:b0:50:fe:54:
                    b0:e0:d9:10:f0:19:6c:81:a4:f2:57:1f:17:14:1f:
                    17:7f:c6:ab:76:a4:79:ff:34:5d:08:58:5a:8d:ee:
                    84:01:cf:55:38:8e:4c:ab:8e:0d:79:28:46:09:a0:
                    73:4a:cc:24:d9:6d:a6:1a:77:ca:90:5b:cd:a2:d9:
                    67:1b:52:61:10:af:ea:bf:bd:01:48:e5:7c:9b:76:
                    bc:91:08:50:b6:d6:1d:f1:1a:3b:ff:3f:a0:2b:b8:
                    79:37:88:17:87:a3:99:96:e4:5d:43:40:e8:93:d0:
                    d1:e9:ba:54:e9:b2:93:93:b7:1b:7a:09:39:75:da:
                    d1:2a:ea:84:53:f4:de:c9:48:3e:d8:6b:1d:54:94:
                    31:af:21:a8:f9:7b:7e:66:df:5f:d9:49:95:26:11:
                    56:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6D:30:E0:92:E2:D5:07:79:43:68:15:40:E8:EF:81:AE:94:C8:88
            X509v3 Authority Key Identifier:
                keyid:4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ec:43:ca:19:fd:77:01:1c:15:f0:18:90:fe:0c:45:7a:96:
         95:d8:6b:ad:e0:2d:7a:59:65:1f:57:5b:dd:26:1c:a4:27:88:
         cb:00:f8:32:94:ab:4f:b9:59:39:79:d7:fd:8f:5f:1b:0c:f6:
         e4:28:4d:d7:51:29:27:9e:e6:3d:7a:b4:74:45:3d:06:02:ef:
         b1:6e:3f:91:b9:4f:c2:f7:81:0b:7b:38:35:30:53:f7:24:82:
         57:75:9f:0e:a1:6b:79:d1:ae:a5:59:35:56:04:68:29:a1:79:
         83:2b:94:99:ca:79:4b:c3:ba:10:2d:d4:7b:3c:c3:93:78:98:
         4f:fa:54:33:15:d3:1f:05:91:08:b2:64:ef:26:ee:66:ec:c0:
         e5:a3:3e:6b:dc:30:d1:d2:6b:8e:a0:b8:1f:00:30:e8:c8:3c:
         91:51:8f:c0:82:cb:f3:b6:aa:d3:64:c4:92:93:80:0f:13:39:
         6d:1c:2c:d3:61:59:6f:6f:80:42:b2:10:22:55:da:ca:d3:04:
         ef:a7:57:87:a7:0f:33:21:8d:a3:cb:3c:d7:7b:b9:7d:a1:8f:
         05:b2:62:75:00:9b:5e:f8:4d:82:9e:b1:6f:13:28:f4:02:c8:
         31:03:25:92:e8:be:4f:55:07:4e:ed:78:2b:3f:81:d2:c0:e6:
         cf:38:ff:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----