Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
File:                     JUIq59QSPce_KI8TeeQ39uHLKpo.mft (raw, json)
Hash identifier:          eJyqxJcFUMDWa7NN6GEuSEk2c+HOQ5xBPcdRWuwQhD4=
Subject key identifier:   2A:03:65:BA:A5:C5:E5:0E:3A:A6:F5:5C:3A:67:74:01:46:1A:C1:7C
Authority key identifier: 25:42:2A:E7:D4:12:3D:C7:BF:28:8F:13:79:E4:37:F6:E1:CB:2A:9A
Certificate issuer:       /CN=25422ae7d4123dc7bf288f1379e437f6e1cb2a9a
Certificate serial:       018F87ED3F0CBE4CA1DACD2528A8C1E44E9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
Manifest number:          0AF4
Signing time:             Fri 17 May 2024 19:00:23 +0000
Manifest this update:     Fri 17 May 2024 19:00:23 +0000
Manifest next update:     Sat 18 May 2024 19:00:23 +0000
Files and hashes:         1: JUIq59QSPce_KI8TeeQ39uHLKpo.crl (hash: SVCVCaGcb/xg5J2frHrSuHJkw+ivPrzntqkVjmlCQko=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:3f:0c:be:4c:a1:da:cd:25:28:a8:c1:e4:4e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25422ae7d4123dc7bf288f1379e437f6e1cb2a9a
        Validity
            Not Before: May 17 19:00:23 2024 GMT
            Not After : May 18 19:00:23 2024 GMT
        Subject: CN=2a0365baa5c5e50e3aa6f55c3a677401461ac17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:d6:8d:3a:90:db:41:93:49:5c:54:13:d9:
                    bf:a1:fd:be:1d:be:da:66:a5:71:1b:05:ca:5e:4f:
                    0f:4e:46:d8:5e:49:ce:20:1f:a9:60:9d:c5:41:33:
                    9d:e5:8b:a3:3e:f5:bc:79:f4:c5:90:fa:ec:a5:9e:
                    b3:19:d5:f4:5b:95:62:fc:28:36:09:b5:fd:c3:27:
                    f4:5d:af:aa:4a:67:4e:fd:68:81:92:49:cd:5b:25:
                    2f:f0:86:ea:e0:d0:c5:ce:a7:47:5b:b6:2a:36:d4:
                    af:2f:43:23:1a:6c:e1:cc:33:c2:b4:74:17:48:38:
                    d3:d7:df:9b:13:2f:8f:7f:3d:52:37:11:69:03:9e:
                    7f:a4:22:d9:e4:3b:7f:3f:64:35:ea:77:50:1b:b7:
                    65:e7:ea:26:1b:27:b5:bd:17:a4:44:d4:2b:0c:c4:
                    89:25:9f:74:fb:39:28:f5:0e:14:ff:3c:3b:43:d4:
                    ba:85:b6:53:cb:34:4e:0c:75:e0:d7:a1:4e:2b:d0:
                    4b:73:e7:7c:13:bc:55:23:4c:46:27:4e:bb:b0:2a:
                    1e:9c:75:25:1a:5c:30:40:da:d8:b7:be:37:59:ce:
                    13:83:c6:a8:52:81:ba:0c:a4:91:dd:f0:4a:c3:a7:
                    ab:9f:0b:5a:68:22:89:53:20:bc:51:ff:b2:84:7c:
                    ab:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:03:65:BA:A5:C5:E5:0E:3A:A6:F5:5C:3A:67:74:01:46:1A:C1:7C
            X509v3 Authority Key Identifier:
                keyid:25:42:2A:E7:D4:12:3D:C7:BF:28:8F:13:79:E4:37:F6:E1:CB:2A:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:36:4a:98:e7:df:b5:de:99:39:d2:bd:bd:87:87:22:68:ab:
         f0:91:07:a7:a9:60:8f:6d:a3:b0:98:78:75:85:9f:d0:0a:77:
         87:11:18:6d:39:44:e4:ad:0e:71:de:27:c1:01:1f:ec:91:5a:
         f0:8a:94:24:3d:f2:15:66:c0:8e:4f:90:bb:8f:6e:d2:35:3f:
         fe:78:5c:77:2e:20:d8:c2:c3:4a:13:0b:2f:f8:d0:81:2b:fb:
         1d:a5:3a:82:1a:2e:01:de:1a:db:50:d8:d7:d5:91:44:75:f7:
         2e:3c:f0:06:93:d7:1b:f5:d1:6d:33:94:85:bb:81:ec:64:c2:
         f1:4b:61:93:f7:55:48:31:9f:ac:7a:bf:dc:fe:af:46:e5:04:
         6d:12:92:e2:1d:4f:2a:0f:3e:a0:1b:fe:7b:28:41:a0:b3:bc:
         41:44:68:dc:be:e0:bd:0b:6f:46:16:69:2b:5e:60:28:96:28:
         be:58:16:53:2c:43:40:3a:7a:4c:44:3a:18:15:5f:9b:a7:95:
         82:97:ce:bd:4e:36:1e:b6:38:ec:de:1c:2b:a6:57:39:ad:79:
         eb:d0:8f:d3:5d:2a:28:34:1d:c1:c3:ab:c5:2c:4b:98:52:58:
         83:99:f3:8d:74:32:1f:df:ea:59:5f:62:a2:d7:43:e4:a8:9b:
         8c:48:31:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----