Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.mft
File:                     MqNUd_Ow3WY3wp0-G9_A2qxxvmE.mft (raw, json)
Hash identifier:          yMwqyza3uiVFA2wej4PdVOlCFI5Hk0oSNC/4xEA2t/s=
Subject key identifier:   C1:EA:A5:FD:7C:B7:DB:2A:6D:6D:56:3C:50:44:C5:07:E6:46:C1:60
Authority key identifier: 32:A3:54:77:F3:B0:DD:66:37:C2:9D:3E:1B:DF:C0:DA:AC:71:BE:61
Certificate issuer:       /CN=32a35477f3b0dd6637c29d3e1bdfc0daac71be61
Certificate serial:       018F98AAF222B34769A6459C256D5824FB20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.mft
Manifest number:          091A
Signing time:             Tue 21 May 2024 01:01:30 +0000
Manifest this update:     Tue 21 May 2024 01:01:30 +0000
Manifest next update:     Wed 22 May 2024 01:01:30 +0000
Files and hashes:         1: MqNUd_Ow3WY3wp0-G9_A2qxxvmE.crl (hash: XHqfAX5drtZZDSY/9FtsN4Xi3BcFas+nFc6EWtze/28=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:aa:f2:22:b3:47:69:a6:45:9c:25:6d:58:24:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32a35477f3b0dd6637c29d3e1bdfc0daac71be61
        Validity
            Not Before: May 21 01:01:30 2024 GMT
            Not After : May 22 01:01:30 2024 GMT
        Subject: CN=c1eaa5fd7cb7db2a6d6d563c5044c507e646c160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:e2:e2:74:1d:85:da:bb:1c:a9:b4:42:99:
                    63:2e:8e:eb:08:e5:a7:01:c0:20:e3:2d:10:51:ad:
                    f1:cc:aa:0e:67:07:b2:53:90:16:43:fa:10:fe:46:
                    c3:0d:7f:f5:8b:23:e2:14:c6:5f:02:46:93:fa:93:
                    8c:27:8c:75:ac:51:01:0a:d6:3c:9c:78:57:5c:47:
                    ef:e1:72:9d:a2:a2:c4:62:c2:12:1d:a6:6e:3b:82:
                    14:2c:af:9a:8a:0e:59:55:b7:73:53:12:e0:12:f3:
                    fa:34:ed:13:10:06:40:84:f6:21:09:02:c1:ba:e0:
                    d4:b2:e4:62:7c:97:ec:d5:4c:eb:0c:36:0f:53:6a:
                    55:10:ab:65:23:b9:f6:3e:5c:10:c9:82:2d:81:7c:
                    4c:a4:50:be:d2:0e:1e:09:46:56:c0:d4:1d:f7:b7:
                    fa:57:ac:5b:bf:7c:a5:47:db:ad:50:00:87:22:d8:
                    d6:4b:65:8a:8e:1b:ba:0e:b0:46:77:5f:7f:e5:d0:
                    8b:ee:dc:92:b3:4f:67:54:dd:08:84:f8:aa:3e:e7:
                    73:2d:ce:bc:e7:a8:0a:1b:f2:f6:9b:a7:9f:be:e1:
                    d0:28:90:da:ff:fb:cd:ef:82:63:d5:65:d0:02:65:
                    b6:b6:6e:e6:1e:71:e0:80:0c:43:18:fb:e4:50:30:
                    37:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EA:A5:FD:7C:B7:DB:2A:6D:6D:56:3C:50:44:C5:07:E6:46:C1:60
            X509v3 Authority Key Identifier:
                keyid:32:A3:54:77:F3:B0:DD:66:37:C2:9D:3E:1B:DF:C0:DA:AC:71:BE:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:f2:62:ff:1f:70:95:e2:3a:8f:0e:18:c2:0e:10:e5:37:bc:
         43:29:ac:3a:3a:c0:f4:50:c9:f2:32:14:d8:e6:ac:f2:c3:4a:
         d6:71:3c:d9:0f:b6:5a:1b:c6:8d:7a:06:43:5b:c1:16:88:d3:
         d9:20:61:ef:0a:04:b3:ea:93:37:8a:f8:8d:a5:f6:c1:50:66:
         9e:f0:13:c3:86:4b:59:a6:6d:da:20:06:b2:b6:0c:39:94:66:
         13:98:30:a3:82:62:34:55:7c:bb:e4:74:ab:71:5f:27:79:c7:
         9e:5f:f3:1c:c9:07:85:9d:ec:18:2c:e2:83:c6:4c:d2:77:89:
         86:03:b7:8d:84:9a:36:3c:1a:9e:50:75:b1:09:c8:27:14:3a:
         02:f5:f8:f1:96:d3:19:e0:c7:69:35:94:7e:2a:a1:89:95:70:
         7b:04:c4:8a:68:da:c0:3e:fb:84:eb:7b:78:de:2f:71:11:2a:
         c2:4e:a1:02:4b:77:e8:d7:28:f4:4b:75:11:52:f7:d9:f8:97:
         44:17:3b:6f:b6:aa:0d:30:86:0c:a3:8f:c2:be:56:d3:90:ea:
         de:8b:5a:94:7f:48:16:65:43:8c:e8:80:d5:7b:84:05:51:6e:
         2d:9a:0a:c8:88:cd:d3:63:fc:28:3f:4d:c6:5f:13:c6:6f:6f:
         92:6d:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----