Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
File:                     Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft (raw, json)
Hash identifier:          V5weF9FmSbCgVIvaiV3NJXrriZDfXZpx+iHA8MSVp0o=
Subject key identifier:   E6:1C:29:76:9D:E6:3F:13:8C:5F:E0:44:D0:3F:33:A5:0C:68:90:1E
Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
Certificate issuer:       /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Certificate serial:       018F215C81C67F9446021F6A2628BD4F3170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
Manifest number:          1142
Signing time:             Sat 27 Apr 2024 21:01:01 +0000
Manifest this update:     Sat 27 Apr 2024 21:01:01 +0000
Manifest next update:     Sun 28 Apr 2024 21:01:01 +0000
Files and hashes:         1: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl (hash: kmfy1ElDrNX3qEnhmtkyG9KU2XmTEScgFnEkDzpQBRY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 15:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:21:5c:81:c6:7f:94:46:02:1f:6a:26:28:bd:4f:31:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
        Validity
            Not Before: Apr 27 21:01:01 2024 GMT
            Not After : Apr 28 21:01:01 2024 GMT
        Subject: CN=e61c29769de63f138c5fe044d03f33a50c68901e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:9c:b8:a3:00:a3:2f:a5:ab:12:1f:a4:0b:
                    a6:e1:b3:5f:ac:d4:ee:50:f2:0f:4e:38:a0:ec:90:
                    11:25:bf:3c:12:de:6d:15:27:bb:b3:10:54:54:a8:
                    ea:b6:23:0d:05:3c:8f:d5:1b:ac:2c:53:71:6b:a8:
                    a7:bd:ba:ba:e7:f4:02:8f:7d:00:40:fd:07:90:ea:
                    dc:d3:bb:62:f8:cd:a2:1a:1d:2d:0e:6d:8d:45:84:
                    24:1d:a9:9d:0a:17:cb:be:c1:5f:39:88:bd:16:39:
                    3e:e7:ad:1a:f6:d3:5c:e4:34:36:b6:f6:91:fe:e6:
                    15:80:a1:1c:fb:60:ea:93:ff:0d:b0:e6:b6:1d:12:
                    ff:52:5a:a0:79:5f:94:84:36:11:50:41:24:86:de:
                    fb:54:10:2b:4d:4a:ee:6d:4c:9f:db:4d:fc:1c:7d:
                    19:d2:c3:d1:58:f2:43:94:93:be:28:20:47:16:b3:
                    4d:ff:27:c3:9e:14:b6:f8:22:47:b3:7d:75:ba:6a:
                    ea:af:30:89:80:99:54:57:42:4a:2f:ee:8c:54:bb:
                    24:fa:e8:40:82:24:39:39:6d:a7:6c:f0:ae:8e:3e:
                    2f:da:85:0d:9d:a1:e7:82:24:15:a0:99:ac:3b:3c:
                    c9:a0:69:56:d4:0c:e1:fe:c4:5a:4a:8a:8c:54:bf:
                    40:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1C:29:76:9D:E6:3F:13:8C:5F:E0:44:D0:3F:33:A5:0C:68:90:1E
            X509v3 Authority Key Identifier:
                keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:9f:6d:4d:29:12:a1:c2:da:10:8a:57:ba:77:f6:f1:cd:2e:
         f1:a7:d9:80:bc:e6:7c:7c:dc:3c:88:97:d6:65:a7:d2:39:f1:
         b8:99:c2:48:d7:44:4d:58:31:a9:3e:4b:06:2d:4d:b3:75:c4:
         dd:b8:dd:7b:da:db:e3:2c:21:f4:b4:3f:20:0c:2a:39:1e:75:
         28:49:85:7d:7b:90:d0:02:b9:cb:21:4c:78:eb:f3:0b:5b:91:
         a1:5d:2a:cf:ff:5e:04:e0:96:44:ad:fb:9c:82:95:75:2f:2e:
         2b:1a:db:fd:26:b9:38:0b:7f:b2:35:31:d4:77:28:34:04:65:
         50:ac:d3:28:17:1d:80:c1:78:97:e8:c5:2e:cc:c7:8f:79:25:
         e1:d5:60:f3:6f:ae:42:6b:a5:ff:23:13:bf:0a:51:63:9d:2e:
         b0:20:05:0f:94:6b:34:78:5f:a8:f3:32:2a:a9:3b:dd:a8:c0:
         b8:8f:3f:64:b0:1e:f9:5e:30:44:81:73:5d:30:fc:c3:27:c8:
         8d:f3:57:31:89:bf:78:d8:f6:5b:40:26:b8:73:ab:de:ae:36:
         4c:57:0c:78:f4:e7:f3:0a:ec:4f:cf:0d:ee:18:a9:29:54:13:
         19:41:09:45:cc:a6:f8:3c:90:a5:fb:3a:2f:13:30:06:6d:47:
         45:dd:f4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----