Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
File:                     eVBSIUjSaDdshFMMXS2lPjm_Gso.mft (raw, json)
Hash identifier:          qIbIGadnygfgETfMorLNxi+gFD5gYb0i9r6fJbvS/1w=
Subject key identifier:   7A:21:00:74:02:CD:AB:66:C2:A9:C4:12:2D:E9:98:83:9E:88:EA:0F
Authority key identifier: 79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA
Certificate issuer:       /CN=7950522148d268376c84530c5d2da53e39bf1aca
Certificate serial:       0191FAEDF58B0F7C3D11572A180D1847A862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
Manifest number:          018E
Signing time:             Mon 16 Sep 2024 13:03:04 +0000
Manifest this update:     Mon 16 Sep 2024 13:03:04 +0000
Manifest next update:     Tue 17 Sep 2024 13:03:04 +0000
Files and hashes:         1: eVBSIUjSaDdshFMMXS2lPjm_Gso.crl (hash: Qq34BdIY62cR89wbunDvrF8lZUMXCIn1EvyT3v3/KC8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ed:f5:8b:0f:7c:3d:11:57:2a:18:0d:18:47:a8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7950522148d268376c84530c5d2da53e39bf1aca
        Validity
            Not Before: Sep 16 13:03:04 2024 GMT
            Not After : Sep 17 13:03:04 2024 GMT
        Subject: CN=7a21007402cdab66c2a9c4122de998839e88ea0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:5a:32:7f:88:4d:a8:98:61:1e:21:c5:86:
                    2b:f9:ba:83:f1:b7:11:61:f7:1f:b1:41:92:de:f5:
                    5b:3f:1f:77:d6:f0:1e:b4:08:ed:6e:f1:d7:dd:f6:
                    ac:d0:7a:a1:d2:43:41:04:a4:11:03:8a:6f:8d:80:
                    a9:f0:ea:63:ce:bb:8c:ca:0c:06:5e:68:d2:5c:ab:
                    fb:d4:6e:e5:84:2e:ee:d1:30:74:03:f3:39:6b:56:
                    09:e4:88:c4:21:a3:82:9a:44:82:35:42:ce:5d:72:
                    95:b9:9f:44:71:49:09:99:05:04:0d:b1:be:fc:c7:
                    2f:3f:b7:c1:67:17:41:a8:13:2d:aa:35:69:34:74:
                    1f:23:68:88:46:39:08:1b:02:bf:c3:ef:58:f5:5f:
                    51:00:bc:4b:fb:93:31:d5:e9:70:fe:2b:88:b9:66:
                    67:cc:1a:57:3f:e0:54:3e:05:6d:5f:32:6f:23:2e:
                    41:3e:85:2b:0a:a8:51:92:91:e8:20:53:5c:7f:b6:
                    f4:06:4e:7b:3b:58:cb:ae:e8:96:1c:08:56:c1:40:
                    fd:45:4e:6b:68:75:2f:11:43:1c:56:4e:37:31:b4:
                    f6:c7:3d:2c:fc:fb:07:66:60:5f:35:c4:83:b7:b2:
                    b8:af:a2:85:46:42:09:eb:3d:18:fb:5e:c1:d6:f1:
                    4a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:21:00:74:02:CD:AB:66:C2:A9:C4:12:2D:E9:98:83:9E:88:EA:0F
            X509v3 Authority Key Identifier:
                keyid:79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:68:1d:3c:10:08:f3:6b:53:92:f4:3e:f1:3c:c5:e9:72:50:
         eb:99:db:c4:34:36:86:e6:94:4b:74:35:b4:b6:07:da:65:3d:
         6e:4c:0d:93:ae:1e:91:60:5b:b2:7d:d2:5d:91:0c:0b:28:d3:
         f3:83:40:45:a9:dd:2a:a4:ee:1c:2f:45:64:00:4d:60:b5:f0:
         fb:96:6f:07:4f:53:03:c9:a8:26:42:71:f5:4c:36:81:69:18:
         70:63:ee:ca:28:b1:65:03:8b:82:c3:65:58:91:96:0f:f1:f4:
         d9:32:7c:e2:33:14:b8:e0:8d:b9:04:07:e2:de:9f:1f:50:b9:
         3f:63:f8:ee:c3:76:00:7c:5f:63:47:3a:32:0e:2b:1b:7c:f4:
         ea:04:71:8b:69:ef:07:75:3f:a9:ab:de:da:1d:95:fd:58:07:
         f9:d5:89:1b:c9:c0:f7:5d:31:54:5a:37:f0:10:1b:c9:aa:3b:
         30:74:00:21:0f:38:de:cc:39:f6:4f:5b:fa:64:56:ec:4f:88:
         48:4a:43:9d:1a:8e:53:3c:1f:d8:27:ea:32:1b:15:1e:e9:1d:
         e4:b6:4c:30:56:00:05:71:37:4e:a4:9b:c6:f1:b9:a0:e8:3f:
         6b:3d:4b:5d:9c:cb:a2:d1:00:96:15:b4:fc:e9:a1:66:2d:36:
         66:cc:7a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----