Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
File:                     _c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft (raw, json)
Hash identifier:          vgZqGIPzDZPosRMpyyVP9KApsZGAGjyWk3iNGpHGoy0=
Subject key identifier:   4F:0F:51:17:21:60:46:A7:23:52:A8:1E:F9:60:68:A9:41:A4:1D:D0
Authority key identifier: FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
Certificate issuer:       /CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
Certificate serial:       018F8891FDF7F29CF731CF7F266C8AAA1A42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
Manifest number:          0881
Signing time:             Fri 17 May 2024 22:00:20 +0000
Manifest this update:     Fri 17 May 2024 22:00:20 +0000
Manifest next update:     Sat 18 May 2024 22:00:20 +0000
Files and hashes:         1: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl (hash: UCaZbaEUCe38p+tvUiZ1OffOVPuDlnZJ33JFWCk55cg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:fd:f7:f2:9c:f7:31:cf:7f:26:6c:8a:aa:1a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
        Validity
            Not Before: May 17 22:00:20 2024 GMT
            Not After : May 18 22:00:20 2024 GMT
        Subject: CN=4f0f5117216046a72352a81ef96068a941a41dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:aa:48:de:dd:6e:65:1e:b3:d2:d9:30:a6:69:
                    06:08:4b:bd:42:63:56:f1:4b:af:71:99:af:95:89:
                    4f:b6:65:de:1d:4c:3b:44:de:cf:a7:cd:07:fc:2e:
                    72:17:f6:1c:a8:af:cf:a3:43:1b:c7:67:61:4a:e0:
                    51:a6:67:88:79:65:d8:f1:fb:da:bb:4e:e3:06:9a:
                    d3:40:37:1d:bb:93:3a:f2:c7:b7:2a:71:f0:5e:90:
                    23:58:48:31:17:f2:8c:51:f2:db:a0:ce:76:a7:b1:
                    1d:d0:35:13:bd:d8:85:8e:25:2b:7c:bf:0b:ba:f8:
                    05:da:34:16:27:cc:32:81:9c:71:3d:74:9c:7e:95:
                    b3:7b:11:62:81:f0:d1:79:41:40:bf:4d:4c:5d:39:
                    62:77:4f:cd:c7:3d:72:89:86:5d:34:71:24:2a:37:
                    98:19:16:d5:94:25:2d:b5:6b:ce:ca:d6:99:fe:64:
                    12:32:6b:72:ed:26:fd:14:bf:22:1c:1f:e7:15:fe:
                    33:ee:20:f4:da:3c:0e:0b:3e:71:4a:8c:f3:c4:b6:
                    26:c4:a5:4f:1d:f9:0b:5f:d1:d8:78:55:18:e9:db:
                    5c:20:e4:95:f0:cc:90:79:06:c8:38:88:87:ae:76:
                    de:26:d4:75:87:35:71:07:06:e2:c8:28:9d:4d:3c:
                    c3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0F:51:17:21:60:46:A7:23:52:A8:1E:F9:60:68:A9:41:A4:1D:D0
            X509v3 Authority Key Identifier:
                keyid:FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:aa:51:0c:04:f7:3d:a5:81:99:e4:67:87:74:cf:5b:68:77:
         28:63:60:ce:9d:35:8c:31:e6:7d:45:77:7d:d1:5c:52:9a:27:
         a6:89:4e:94:5b:2a:fc:24:f5:13:65:52:05:36:a0:20:4e:ec:
         18:c4:10:1a:b1:f4:c6:90:e2:54:74:13:91:f3:51:9c:ea:dc:
         70:55:e7:f0:04:e8:02:6f:d7:8c:3a:fd:54:29:06:aa:91:8a:
         56:17:c2:6a:a1:81:dc:63:39:b5:ec:22:a1:cf:02:b0:39:0d:
         9a:80:27:16:51:f8:6d:e7:23:32:b5:17:93:dc:39:f7:61:b0:
         a5:21:46:3f:e1:a1:c0:e7:bc:9b:41:df:75:8e:ee:e1:33:e3:
         88:68:00:c8:df:58:d5:94:67:3e:75:d5:43:ea:68:75:30:9b:
         ef:e7:ff:98:a5:78:91:45:c6:6e:3e:fa:d5:4c:3f:8f:d0:82:
         f4:44:f8:62:68:6a:83:0b:ad:c6:5a:81:76:b8:fa:30:ba:2c:
         7f:db:e4:fb:69:eb:63:50:fa:f5:8a:60:da:f5:ac:29:e9:6b:
         2b:8e:79:c1:55:7c:68:ac:f6:9d:04:9b:41:7c:7e:8d:82:30:
         84:74:4e:c6:1c:96:f7:52:9c:1f:0a:c7:10:cf:3d:37:65:ec:
         3e:f3:c6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----