Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
File:                     S82iMJZ8_y7eIXfy0zKvCst-ULw.mft (raw, json)
Hash identifier:          gS32w7Hol6lS4gqwejWURrVkC2lmdPqJD6uD+b7ptKg=
Subject key identifier:   31:E7:D7:00:FD:FB:85:C4:85:FD:9C:0C:3D:E0:84:E5:C7:91:B9:D4
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Certificate issuer:       /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial:       018F874AE9608F6C8D9D9E62B011C91E8CBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:03:04 +0000
Manifest this update:     Fri 17 May 2024 16:03:04 +0000
Manifest next update:     Sat 18 May 2024 16:03:04 +0000
Files and hashes:         1: S82iMJZ8_y7eIXfy0zKvCst-ULw.crl (hash: Z+RGnLgFvTlJM/UJ6722q2q/USnTGjF1YCkJxEGGSMI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:e9:60:8f:6c:8d:9d:9e:62:b0:11:c9:1e:8c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
        Validity
            Not Before: May 17 16:03:04 2024 GMT
            Not After : May 18 16:03:04 2024 GMT
        Subject: CN=31e7d700fdfb85c485fd9c0c3de084e5c791b9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:65:bf:b0:6d:69:61:4a:f6:92:2d:ad:40:73:
                    05:d0:b5:a9:40:c0:55:b8:79:da:9c:9b:d0:f8:c8:
                    f1:7f:b2:1e:b8:ed:13:49:db:d3:10:e2:d0:00:f9:
                    ca:53:6f:c2:62:5a:04:ed:48:dc:3a:46:3f:95:5d:
                    b0:2f:9f:20:08:e8:aa:34:5b:47:a1:90:86:38:e7:
                    18:6d:5f:78:65:ac:a6:c5:a1:c8:b8:7e:85:87:b9:
                    ab:c5:20:51:60:36:3c:25:ee:ae:4a:6f:8c:24:a7:
                    2e:2a:e2:51:83:9e:d9:31:23:c1:86:56:4c:dd:02:
                    6a:7a:f1:b9:da:6e:22:a6:64:fe:a2:c4:64:9c:11:
                    48:18:63:e8:91:eb:9a:af:cd:29:ae:74:07:81:45:
                    59:58:f3:10:d7:2b:b6:49:29:ac:af:d3:69:13:c0:
                    75:0f:a0:65:14:ed:0b:e9:19:4c:52:44:1d:db:3b:
                    5b:53:b6:fc:4a:97:3d:6f:3e:e5:88:cb:1a:44:40:
                    73:d2:f2:84:bd:5a:da:99:f2:4a:4b:95:a8:1a:58:
                    a3:8c:59:31:79:67:90:ad:48:48:25:15:e6:8d:04:
                    b0:25:1f:25:4e:91:c9:2f:82:74:bd:4c:d7:e5:e2:
                    80:3d:88:a9:15:02:66:c1:0a:28:4d:e6:73:20:fe:
                    c4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E7:D7:00:FD:FB:85:C4:85:FD:9C:0C:3D:E0:84:E5:C7:91:B9:D4
            X509v3 Authority Key Identifier:
                keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:0b:c4:87:f9:a7:0c:f2:b6:16:1a:39:fe:5e:5a:8b:37:5c:
         75:5d:77:80:53:e8:97:f4:f2:fb:bc:2e:7f:c5:ea:14:f1:56:
         0e:f0:22:08:88:71:19:f5:2c:26:78:67:86:0d:8a:ea:7d:f4:
         67:cb:2c:81:94:d6:82:92:57:5a:7b:fc:0f:a9:5a:a6:06:e9:
         d9:5f:61:8f:be:d1:07:f2:6e:fb:a8:24:d5:f0:c7:75:ce:92:
         40:46:3b:93:ca:53:ed:2e:62:fd:c7:c0:6e:69:cc:42:bc:32:
         45:e6:3a:11:f6:b6:7a:f0:99:0a:0f:cb:76:c0:99:9d:71:a2:
         15:db:37:49:dc:f8:39:84:1a:54:96:bb:5a:23:5d:5f:2c:a8:
         b8:19:9f:ef:6f:ec:10:9f:6e:64:9d:2a:13:17:21:73:2b:2d:
         fe:81:cb:2b:bf:38:e6:e6:1f:e2:dd:ac:88:c4:e1:0f:62:dc:
         b0:4d:17:ce:2d:ff:f0:92:2f:14:78:c4:13:a7:09:57:7c:8f:
         d1:87:93:36:1e:eb:00:90:3d:9f:a3:7b:c1:54:b0:b7:91:fd:
         c9:fb:69:ff:38:4a:a8:ee:84:7e:d1:bc:0a:c5:44:44:be:21:
         30:b9:48:f8:1e:28:45:92:2c:b5:cf:b5:bc:2e:52:ad:17:83:
         5e:bc:ac:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----