Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
File:                     uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft (raw, json)
Hash identifier:          1llh/dtcoKfeW/ZAV5Ih3cZjxr6FYzxnxAyNGijb1W8=
Subject key identifier:   75:11:CC:DD:8D:28:EB:1F:9A:2C:86:CF:84:01:3C:55:F6:83:5A:F0
Authority key identifier: B8:81:77:A9:A3:46:9D:B3:AC:F1:0A:98:F6:C0:39:31:E3:55:15:FA
Certificate issuer:       /CN=b88177a9a3469db3acf10a98f6c03931e35515fa
Certificate serial:       018F87B66860A381BA81E9FEB21D9BEC415E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
Manifest number:          0111
Signing time:             Fri 17 May 2024 18:00:29 +0000
Manifest this update:     Fri 17 May 2024 18:00:29 +0000
Manifest next update:     Sat 18 May 2024 18:00:29 +0000
Files and hashes:         1: uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl (hash: Nd6wLvMp2gQgZ88KmeBDTRXM+sfUMh7ULgZzFYMVh0E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:68:60:a3:81:ba:81:e9:fe:b2:1d:9b:ec:41:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b88177a9a3469db3acf10a98f6c03931e35515fa
        Validity
            Not Before: May 17 18:00:29 2024 GMT
            Not After : May 18 18:00:29 2024 GMT
        Subject: CN=7511ccdd8d28eb1f9a2c86cf84013c55f6835af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:a9:3c:e5:d3:58:f3:5e:c3:0e:dd:5a:f8:
                    c4:b2:4f:9c:3d:aa:e7:5e:1f:a0:07:c0:7e:19:2d:
                    dd:2f:cd:7e:21:b0:90:0f:15:ba:b3:ec:bf:0f:cf:
                    a9:8e:15:01:29:1a:cc:57:a2:e9:7c:29:90:83:4b:
                    a0:4c:5d:77:c5:d5:5e:53:26:63:c0:21:34:81:4d:
                    cd:53:db:72:ad:98:4f:4f:90:38:81:f8:5a:87:6f:
                    d4:e5:aa:74:ac:f3:59:a1:c1:91:b5:71:ae:06:5a:
                    7b:a1:2a:a2:f5:00:c6:a9:82:b5:e5:9b:82:8f:c6:
                    0c:dd:1c:04:71:32:62:d0:dc:9f:f1:ba:8a:5a:6a:
                    1e:16:43:f5:e4:d5:1d:c0:38:db:47:95:9c:02:35:
                    d6:0e:69:2c:3f:e8:bc:4d:e7:a2:6d:1f:2e:98:b1:
                    73:3b:f4:8d:d2:92:20:e3:7b:26:e1:77:59:81:9c:
                    b9:31:da:aa:41:ea:02:f1:b0:9d:50:a0:82:38:05:
                    40:6c:3b:89:77:26:93:5a:29:e3:c7:ba:ec:47:a2:
                    b7:66:03:21:72:98:8a:36:f4:6f:98:37:9a:99:6f:
                    29:4e:c8:ac:32:53:a2:69:f6:c9:c3:f8:b8:b5:58:
                    bd:4a:ca:73:72:2e:31:26:85:a4:2d:62:56:ba:39:
                    0d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:11:CC:DD:8D:28:EB:1F:9A:2C:86:CF:84:01:3C:55:F6:83:5A:F0
            X509v3 Authority Key Identifier:
                keyid:B8:81:77:A9:A3:46:9D:B3:AC:F1:0A:98:F6:C0:39:31:E3:55:15:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f1:5a:34:4c:71:da:db:66:c9:34:91:2a:07:e2:24:4c:82:
         99:4c:e9:d6:c8:50:68:24:ec:4b:50:12:fc:73:66:7b:e5:50:
         d0:4d:ce:d0:be:f3:81:11:17:86:b6:7d:32:c5:13:db:13:42:
         3f:95:20:6e:4d:55:c2:bc:b3:2f:63:d7:83:b7:b3:43:ff:ab:
         5f:20:23:9d:34:e0:37:07:da:6c:06:24:1c:e8:13:08:f3:15:
         bf:33:b1:32:8e:5a:1b:90:3d:7f:72:99:6a:7c:1a:06:dd:55:
         28:05:c6:37:fb:81:40:0b:26:8a:6f:ab:de:7c:b0:0b:72:09:
         80:f3:1e:5b:4b:40:2f:1b:8c:ae:dc:af:e4:9b:90:08:4b:31:
         12:b4:fc:95:9d:a2:50:43:1c:32:91:d1:17:1e:df:ab:86:f7:
         d3:7a:f0:79:ca:ff:04:d0:94:d2:65:2e:94:75:f9:26:d5:06:
         a4:18:21:75:82:79:f8:82:47:00:96:4c:83:48:94:5b:53:21:
         50:4d:43:e2:36:0d:90:e0:75:81:d5:ed:5a:08:20:09:e0:be:
         f1:f3:74:ca:df:10:87:44:b9:f6:91:5d:10:dc:b6:d0:79:7b:
         93:f4:0c:6d:ab:3a:c9:35:6c:80:bd:64:9f:7e:3d:7b:93:d3:
         32:34:9f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----