Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
File:                     ny83TJpzj63o-FDKq11507kARYQ.mft (raw, json)
Hash identifier:          A/5Fa3Xu+JY463Dnj9bit22IFchPSp2HKxs8caD446o=
Subject key identifier:   DB:9F:F2:60:C1:70:C6:18:23:5D:67:00:B6:86:C0:4B:E7:21:A8:8F
Authority key identifier: 9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84
Certificate issuer:       /CN=9f2f374c9a738fade8f850caab5d79d3b9004584
Certificate serial:       018F874B0663BEBB1790AD718A3FB5C49E80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:03:12 +0000
Manifest this update:     Fri 17 May 2024 16:03:12 +0000
Manifest next update:     Sat 18 May 2024 16:03:12 +0000
Files and hashes:         1: ny83TJpzj63o-FDKq11507kARYQ.crl (hash: C9RE4Ig5njmuoVOZZN0ZFM6NzZxS9vwqF+wSys6QcP4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:06:63:be:bb:17:90:ad:71:8a:3f:b5:c4:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f2f374c9a738fade8f850caab5d79d3b9004584
        Validity
            Not Before: May 17 16:03:12 2024 GMT
            Not After : May 18 16:03:12 2024 GMT
        Subject: CN=db9ff260c170c618235d6700b686c04be721a88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:a4:94:73:fc:6a:21:77:26:f1:11:f9:c8:
                    98:4e:f4:fc:43:9a:5a:ba:4a:20:fb:51:dc:50:00:
                    03:76:37:43:27:b6:83:cd:42:c7:c3:d3:58:be:44:
                    9a:b5:68:36:bd:ab:d3:6f:b3:3b:3a:fc:af:8c:de:
                    ad:00:17:03:f8:f6:09:46:74:34:0c:70:33:9c:6c:
                    91:b6:de:9e:3d:06:37:a1:b8:0b:49:8e:d9:23:fc:
                    43:0a:76:83:10:15:1e:30:06:a3:d0:85:93:5c:9e:
                    e5:65:f8:89:9b:82:d8:04:83:81:80:1a:60:68:97:
                    17:0d:14:a3:e0:a2:7b:3c:4d:4c:89:8d:cc:82:db:
                    d1:ec:91:8d:7e:6d:89:5a:27:7a:4e:f2:1c:21:26:
                    be:01:a6:e4:5a:2d:12:50:3f:a6:09:c7:82:b1:51:
                    dd:81:78:41:a9:81:5c:2a:dd:74:ee:23:33:4f:4c:
                    26:f3:67:4d:76:43:d1:07:8d:ca:fc:51:5f:61:aa:
                    f5:5a:bb:d2:4b:44:e9:81:db:40:72:aa:47:71:f0:
                    2f:e8:88:42:80:66:b5:de:79:79:c5:c5:08:cc:5c:
                    22:46:42:83:ae:a5:78:42:64:be:a8:7b:41:94:3d:
                    1c:2d:34:3c:2b:08:66:2b:b2:a3:0b:c3:22:9c:4c:
                    74:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9F:F2:60:C1:70:C6:18:23:5D:67:00:B6:86:C0:4B:E7:21:A8:8F
            X509v3 Authority Key Identifier:
                keyid:9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0a:fc:01:cb:a3:2a:c2:18:ea:b7:44:ef:b4:a0:fa:80:42:
         fa:6b:16:33:2b:4e:d3:2c:2d:2c:e6:3b:60:94:63:8a:ab:fe:
         b5:28:2c:c5:78:3d:cc:06:61:92:26:09:fc:c6:1c:8e:fe:11:
         d4:b1:4e:94:d8:c2:8c:36:b0:3d:15:b1:f3:a8:f5:e9:e4:1a:
         e9:30:9d:30:87:3f:16:79:92:d2:8b:b1:2c:75:dc:6e:10:10:
         bf:e0:d7:85:5f:ac:f5:78:ae:a9:59:7d:39:1e:ad:8c:40:ea:
         17:d8:bb:69:f7:73:6b:0f:37:4d:e8:1e:1c:f7:74:35:ae:c7:
         d4:65:1d:ca:16:76:27:09:05:b2:f1:53:95:c6:b3:60:0e:f3:
         47:27:5a:50:22:10:3e:4c:ce:25:e3:a8:ad:ee:e7:12:f5:ba:
         9e:9d:fb:62:0c:33:39:6c:91:4f:ab:bf:68:31:a8:9d:ce:e9:
         b8:7d:e4:d1:bb:05:c0:c9:7a:f9:3a:08:5a:7d:96:76:f5:d9:
         d2:6d:de:3c:bd:34:39:fd:60:6a:77:59:3b:eb:3b:a3:58:ca:
         89:21:d1:f2:79:80:b8:23:86:8b:e7:b3:f4:4b:88:8b:49:cb:
         6d:b3:3c:24:3a:c5:87:52:22:c1:37:d5:6a:ba:a2:58:db:3e:
         ac:cd:b2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----