Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
File:                     wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft (raw, json)
Hash identifier:          FaWVCCXOuVD2Wo3lWzNWK9wbvv6onkv6QVHTyPoqb/8=
Subject key identifier:   09:62:48:39:D5:33:52:E4:30:BC:E4:98:0A:B0:34:E1:F1:B7:1E:FF
Authority key identifier: C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
Certificate issuer:       /CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Certificate serial:       018F87B695379E23E443AE53C88230EE9B61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 18:00:40 +0000
Manifest this update:     Fri 17 May 2024 18:00:40 +0000
Manifest next update:     Sat 18 May 2024 18:00:40 +0000
Files and hashes:         1: wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl (hash: fAPibta442dqtkVd4EfZXEKNd5jhO2FPCEHHVdtK7qk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:95:37:9e:23:e4:43:ae:53:c8:82:30:ee:9b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
        Validity
            Not Before: May 17 18:00:40 2024 GMT
            Not After : May 18 18:00:40 2024 GMT
        Subject: CN=09624839d53352e430bce4980ab034e1f1b71eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3f:cc:bb:61:12:73:11:2b:72:f1:98:ef:77:
                    39:a2:87:ec:be:1b:aa:c0:ec:35:a5:c4:2e:99:bf:
                    a4:16:1c:19:a5:69:19:cc:f0:75:a5:f7:69:50:93:
                    fa:d1:c6:35:70:d4:b1:85:c0:81:9a:d2:57:03:43:
                    d7:04:30:3d:5f:91:d0:36:2e:b0:ad:b8:20:45:33:
                    28:a2:aa:1c:05:d6:53:9a:1e:57:f6:49:7b:d6:cc:
                    9e:33:af:39:bc:8c:6f:77:3e:ce:21:e8:10:c5:3b:
                    a6:91:07:fd:90:27:9e:0e:41:c6:bd:85:7b:6c:a4:
                    fd:7b:a7:8c:9e:67:a4:1a:03:3a:cd:56:a4:de:40:
                    32:ce:1b:61:c1:8d:ca:c2:02:76:20:6f:bd:a4:80:
                    9c:f4:33:b3:08:35:49:21:de:82:6a:8a:56:d2:1b:
                    fb:5a:b9:01:99:bf:f2:e9:0b:03:35:ad:ac:db:56:
                    6b:65:69:56:16:01:2a:a1:32:ae:1b:a3:b3:b3:4a:
                    d1:67:f2:c0:97:2a:67:66:f3:6a:f5:e1:b9:66:a9:
                    68:e2:08:9c:dd:0f:33:e1:2e:11:f2:b8:af:46:5f:
                    2c:d7:25:59:db:04:ca:7e:db:db:b2:20:d3:4e:b5:
                    d0:3f:b2:9b:fe:e7:8e:93:a3:7e:ad:50:0b:15:40:
                    7e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:62:48:39:D5:33:52:E4:30:BC:E4:98:0A:B0:34:E1:F1:B7:1E:FF
            X509v3 Authority Key Identifier:
                keyid:C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2f:54:c6:11:a2:72:ec:2f:8c:9d:20:75:38:03:11:b7:26:
         10:e0:58:c2:a7:57:0c:d7:46:87:b8:22:d6:3f:60:67:97:27:
         e1:66:2e:eb:58:93:96:7a:33:2b:71:88:2a:c6:00:14:3d:46:
         55:c5:8f:30:8e:69:ae:ca:b5:16:13:b7:23:2f:ad:2d:9c:f1:
         71:fa:2a:a2:cd:f6:46:ac:ae:96:93:64:6f:4b:ec:ff:5b:c5:
         7b:08:96:e2:f1:8c:b5:c4:23:11:d7:22:38:93:8a:f1:be:11:
         e0:9e:2c:28:de:9f:aa:40:e4:ad:0f:b9:06:65:f7:38:17:5f:
         b6:b8:f1:78:84:d3:13:39:c2:ba:d1:32:5d:5d:1b:e9:5d:b8:
         55:6a:26:0d:a8:87:9e:31:8a:a6:de:8c:d1:08:d3:e2:4e:aa:
         fd:7f:59:8a:aa:48:65:65:13:7f:8d:6c:3e:cc:e7:d8:3d:8e:
         5c:02:b8:96:0d:4f:24:7c:30:16:0a:ff:22:d4:7c:12:5d:76:
         b7:07:1e:af:9f:c8:cb:a6:08:0e:55:91:4f:62:7b:1c:94:62:
         92:50:bb:a7:1b:54:98:2f:75:b9:75:87:f6:db:b9:56:c3:7c:
         19:cc:2a:03:ce:29:2d:97:ad:c8:59:9e:16:d0:65:5c:7a:09:
         4a:f4:ea:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----