Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
File:                     I6lUuSO6IAjpheuiQdG3AHF_iEM.mft (raw, json)
Hash identifier:          fGq1F93VpuIeK8DhYe/ClLCFhLAvue37j9rHx80lRDk=
Subject key identifier:   B3:A2:7B:D4:88:31:5E:7D:36:1A:7F:EA:0F:C1:6F:BD:D0:E7:ED:14
Authority key identifier: 23:A9:54:B9:23:BA:20:08:E9:85:EB:A2:41:D1:B7:00:71:7F:88:43
Certificate issuer:       /CN=23a954b923ba2008e985eba241d1b700717f8843
Certificate serial:       018F1F012413EC50CE3F8F9FBE3BDAA715B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
Manifest number:          0F8A
Signing time:             Sat 27 Apr 2024 10:01:59 +0000
Manifest this update:     Sat 27 Apr 2024 10:01:59 +0000
Manifest next update:     Sun 28 Apr 2024 10:01:59 +0000
Files and hashes:         1: I6lUuSO6IAjpheuiQdG3AHF_iEM.crl (hash: +RPGKP7jWIjC8w21UybMzf5n/HvBiV3hNw7JTUYdKh4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 04:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:01:24:13:ec:50:ce:3f:8f:9f:be:3b:da:a7:15:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a954b923ba2008e985eba241d1b700717f8843
        Validity
            Not Before: Apr 27 10:01:59 2024 GMT
            Not After : Apr 28 10:01:59 2024 GMT
        Subject: CN=b3a27bd488315e7d361a7fea0fc16fbdd0e7ed14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:b8:52:d4:6e:3a:bd:c3:4a:38:86:54:b2:
                    3a:70:ad:29:ba:f8:92:2a:b8:07:4d:f7:74:63:f1:
                    b6:83:b9:e6:b2:ff:c8:88:f8:9b:e2:b6:38:64:fd:
                    d0:96:63:da:00:b3:ba:9f:54:07:c1:b8:0a:22:92:
                    24:d1:62:3c:2a:67:3f:42:f7:5d:0b:4b:d9:c0:11:
                    85:cf:c4:1a:5d:a5:73:35:f6:fe:4f:7e:18:a4:b4:
                    e2:ec:1c:18:0b:6f:78:5f:a6:1a:11:30:31:3b:55:
                    55:e4:e9:ac:47:1a:dc:fb:3b:cd:ac:5f:01:37:3d:
                    ed:ef:ab:0f:ec:af:4c:ec:dc:be:bb:0a:0b:a9:0a:
                    a8:38:45:15:b1:e9:51:07:1e:24:c7:4c:8e:aa:de:
                    a6:17:30:d5:7c:b3:2e:8d:a5:90:53:82:aa:86:4f:
                    92:cb:4b:f3:a1:fe:88:2d:97:ca:0e:00:3b:86:4f:
                    49:b2:5b:fa:4c:14:72:f2:21:48:65:62:3a:e5:87:
                    e1:45:e6:13:0b:3c:33:11:b9:03:33:79:75:ed:33:
                    27:48:77:f2:fc:83:ca:c9:09:c1:7f:2c:fb:c8:d7:
                    7f:a5:7a:93:df:04:3e:35:c6:f6:5e:ab:c6:96:fb:
                    fa:b0:79:0e:7b:7d:21:51:ff:f1:4b:a4:7e:14:1f:
                    88:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A2:7B:D4:88:31:5E:7D:36:1A:7F:EA:0F:C1:6F:BD:D0:E7:ED:14
            X509v3 Authority Key Identifier:
                keyid:23:A9:54:B9:23:BA:20:08:E9:85:EB:A2:41:D1:B7:00:71:7F:88:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e5:44:17:21:30:38:10:58:22:fd:38:39:12:ab:ee:be:bc:
         bb:93:03:0e:08:0e:f6:17:da:b6:22:99:e7:30:e3:98:92:dc:
         85:73:de:9d:a0:62:e1:75:c8:0d:ae:46:07:54:a0:53:0b:7f:
         f8:0e:b9:07:eb:12:c3:ff:4f:82:32:e0:31:46:0e:8f:0f:58:
         0d:68:e4:4d:69:09:d7:68:0e:fc:6a:76:0d:ca:ee:35:9c:ec:
         5e:2c:68:f0:68:51:d5:80:0e:74:82:aa:df:12:fe:6f:a5:bd:
         c9:c1:be:96:75:b7:6a:27:98:c6:83:3a:3a:fc:c1:f3:30:a1:
         8b:71:c6:1f:e0:a1:91:f7:9b:6b:ae:0b:48:ac:c0:08:a4:d5:
         f4:a1:43:74:ea:f2:83:7e:82:b4:65:1d:42:db:02:0a:77:12:
         05:47:f1:01:d3:4e:f4:42:29:78:b1:47:6d:59:7c:de:d6:46:
         04:be:f4:cc:c4:10:50:e0:17:c3:e2:5a:a8:03:a1:d2:c9:c3:
         34:60:ba:a3:4c:48:82:6b:c0:9c:c9:6d:46:80:69:f8:75:1e:
         a7:9d:03:d9:6c:46:87:44:5e:aa:5e:56:ef:d0:1a:b9:72:0f:
         a2:64:1f:cd:3b:ee:5b:5f:78:d6:db:95:99:7d:4a:46:0d:80:
         83:0d:6b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----