Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
File:                     zfyNbNSfmv4mTVQumpYU89SsHJ0.mft (raw, json)
Hash identifier:          AH5P5xOLEf3Q8NiEzxiQEjit+e5jOBg7sYL7Vyxfuhs=
Subject key identifier:   D8:CC:93:0D:4F:C7:D7:F0:0C:8E:36:0A:BE:A3:D8:72:F0:D5:B2:BE
Authority key identifier: CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
Certificate issuer:       /CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Certificate serial:       018F8748523C099349940871E02DC8C3C33F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:00:14 +0000
Manifest this update:     Fri 17 May 2024 16:00:14 +0000
Manifest next update:     Sat 18 May 2024 16:00:14 +0000
Files and hashes:         1: zfyNbNSfmv4mTVQumpYU89SsHJ0.crl (hash: dEbDi4msw4MjzFbFumaLQlslDyWVknzrf2Wk9FiB89I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:52:3c:09:93:49:94:08:71:e0:2d:c8:c3:c3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
        Validity
            Not Before: May 17 16:00:14 2024 GMT
            Not After : May 18 16:00:14 2024 GMT
        Subject: CN=d8cc930d4fc7d7f00c8e360abea3d872f0d5b2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:ee:be:55:e9:36:ee:97:a6:a4:e8:ae:a5:
                    3a:ed:3b:db:ea:9d:18:c8:2e:99:f0:2d:47:bf:56:
                    99:df:b3:78:8c:73:65:12:f9:04:e6:f2:1f:33:3b:
                    18:6d:58:d2:b3:06:16:79:35:59:7e:a2:12:13:4e:
                    b8:e9:e5:92:43:0d:b4:42:21:30:76:17:5f:d3:f5:
                    65:c6:a8:94:ef:9b:43:8d:f6:8e:14:1f:76:4b:0a:
                    66:c7:72:1c:16:1c:0c:8d:8e:3d:ad:c4:02:b1:2b:
                    a9:82:93:4a:7e:71:a5:e8:20:2c:7c:64:b0:b9:dc:
                    89:70:9b:d3:eb:6b:4f:e8:9b:cd:91:cb:e3:8b:32:
                    93:c2:91:2c:8c:e3:b1:71:a0:d6:61:75:21:fe:c4:
                    c7:c9:fd:66:f7:1f:9d:8a:01:d5:44:d4:3e:7a:61:
                    2d:2d:78:d5:2a:e1:44:a1:d8:3b:1f:88:15:3a:13:
                    d2:8c:d4:bb:3a:a7:5c:79:7e:0a:aa:48:a2:5b:3b:
                    6b:00:e6:10:a5:a2:c4:bf:a4:03:86:01:25:20:38:
                    6a:cd:9d:48:b6:ed:ce:8a:1b:7b:8c:c9:45:d2:44:
                    8c:6c:ca:a9:9e:e3:7d:5c:5a:94:13:94:fb:cc:4a:
                    a1:c4:dc:cc:58:24:2f:74:c0:4e:8d:f0:06:5b:5c:
                    50:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CC:93:0D:4F:C7:D7:F0:0C:8E:36:0A:BE:A3:D8:72:F0:D5:B2:BE
            X509v3 Authority Key Identifier:
                keyid:CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:45:19:6d:19:b3:67:be:52:63:6c:a2:73:4e:92:85:5b:7e:
         a6:01:e3:5a:80:7e:4e:06:f5:c0:0b:83:a4:99:85:2c:d2:6f:
         5b:37:c4:ce:f4:87:59:e9:65:74:c6:77:4f:5c:33:93:07:b6:
         98:0a:e0:cf:d9:de:e9:97:2b:4f:7c:cb:dc:e9:b2:a1:de:10:
         28:d3:9e:48:e1:d6:a5:c0:2d:90:3c:af:53:70:0a:f9:b0:ac:
         8b:de:4d:0f:95:05:da:1e:2e:90:bc:8c:4b:72:0e:5e:80:90:
         cc:8c:40:c4:3c:b6:77:1b:94:24:0f:07:f8:2f:e9:3d:8b:c2:
         39:bd:fc:0e:1b:de:c3:97:83:ab:63:b2:1f:34:b0:fb:f8:9e:
         16:66:97:53:8c:ee:74:e9:16:ac:1e:5c:f1:f6:2f:a8:09:e8:
         3d:ef:36:d2:12:cc:dd:7f:35:02:76:de:8b:88:3b:82:a3:60:
         7f:4c:c9:25:87:55:c3:00:ef:f7:94:e2:d3:3a:59:2e:8d:1a:
         b0:7e:e0:05:bf:2e:ad:45:d1:96:dd:ef:ba:5c:04:f8:e9:71:
         36:74:dc:65:15:bb:16:bb:7b:90:77:f6:5f:11:53:ab:a7:a1:
         0e:2a:d1:a8:a7:bd:4e:77:e0:23:e7:35:5b:9a:ad:b8:39:a8:
         b7:0a:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----