Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File:                     r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier:          juvit5PXcfwUE+8+rbnD2SjMQYLqO18ACR3u9U6szds=
Subject key identifier:   90:4E:4A:50:DD:D0:8B:6D:3F:13:6C:1B:55:BC:01:D7:87:8C:88:96
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer:       /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial:       018F87ED36E8E4B2B86F71D7E180A9ED3F20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 19:00:21 +0000
Manifest this update:     Fri 17 May 2024 19:00:21 +0000
Manifest next update:     Sat 18 May 2024 19:00:21 +0000
Files and hashes:         1: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: QgiGHk0K7E6x9FOPV1PGPoeInie53aDutmAUM/yyVFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:36:e8:e4:b2:b8:6f:71:d7:e1:80:a9:ed:3f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
        Validity
            Not Before: May 17 19:00:21 2024 GMT
            Not After : May 18 19:00:21 2024 GMT
        Subject: CN=904e4a50ddd08b6d3f136c1b55bc01d7878c8896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:f3:51:ba:a7:6b:44:55:fe:ce:18:12:5d:
                    c5:82:71:56:09:a1:01:28:d2:d6:78:1b:49:ef:3d:
                    a5:58:8d:a9:d5:d1:40:2e:d4:04:a9:f8:bc:be:ff:
                    72:bf:34:ad:ac:be:15:38:ba:d7:f6:11:54:86:0c:
                    56:ac:ed:19:ea:48:5e:27:5e:fa:e4:42:93:b5:76:
                    e4:90:57:d5:d9:19:78:41:18:4b:20:be:9a:a2:2f:
                    fa:b4:a6:60:d5:3e:ba:c0:98:7c:c3:f6:8a:a5:b1:
                    01:cf:b4:79:32:26:9f:b8:55:c5:12:5a:00:3f:fb:
                    6e:d3:68:7b:60:37:2b:05:21:4c:a0:ff:2d:f0:e6:
                    c8:47:49:21:81:0e:e5:94:8c:09:65:d3:ff:78:8e:
                    2d:18:fc:33:10:30:a1:f0:8d:b3:59:41:4b:a7:17:
                    9a:ab:62:e8:ae:e2:6c:f1:07:85:c7:c4:91:91:e2:
                    a7:aa:b6:f8:98:a0:de:58:4e:d9:d7:90:26:5d:05:
                    02:18:eb:02:cd:37:f0:a7:29:42:5b:98:be:bd:d1:
                    78:cc:d4:19:62:25:88:e4:e9:ae:81:05:87:7b:b0:
                    7a:44:ec:e5:9a:49:2b:84:f3:84:73:ba:29:db:be:
                    bf:84:df:79:82:ab:eb:e1:2b:bf:c6:b6:01:e8:32:
                    98:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4E:4A:50:DD:D0:8B:6D:3F:13:6C:1B:55:BC:01:D7:87:8C:88:96
            X509v3 Authority Key Identifier:
                keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e1:48:16:0e:c1:fa:79:e5:83:23:68:46:95:6b:fb:71:10:
         0e:73:31:54:f1:bb:4d:09:f6:57:58:fd:1e:93:0d:eb:b5:4c:
         45:79:e5:69:a2:3e:45:61:70:59:26:9f:6b:bf:41:d8:06:10:
         f0:85:fd:ce:f9:02:ed:60:c2:c0:c0:d2:80:76:6a:c0:9a:4f:
         b7:d1:2b:56:3c:d1:69:e3:54:a5:c9:e4:f3:f0:97:9a:f5:dc:
         6f:a2:19:18:75:d0:93:c1:19:7b:f3:d1:51:9f:c1:a2:c8:2c:
         d5:e1:c4:00:c9:ba:cb:1a:8f:8d:93:0f:96:9c:3b:51:d1:98:
         15:2b:cd:22:31:01:2f:42:29:62:63:ea:4d:ca:2d:10:2b:f8:
         26:49:b8:5b:15:99:10:9e:98:37:cb:b1:b0:7b:29:18:57:47:
         b0:d1:3c:d4:59:69:15:31:da:ea:4f:e6:ba:59:33:da:28:b2:
         75:70:83:00:63:c9:d7:0d:b6:5b:64:f7:cd:21:f2:1a:e9:b1:
         d6:9a:9c:3b:c2:81:df:ac:2d:3b:e7:6d:c6:a7:a9:39:3e:32:
         01:75:5d:1a:19:b7:10:77:56:a8:08:8b:4e:06:5c:af:b0:3c:
         21:10:a5:4f:fb:b5:be:65:32:45:45:a3:74:bb:83:60:07:5d:
         4a:80:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----