Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
File:                     LUUkZslYX29anMHDDo17Fu1HSkg.mft (raw, json)
Hash identifier:          2VYhdNXlcRFJPoMlqpwKLhnGOxJqKaC8qfaryLTo4Xk=
Subject key identifier:   7D:3E:66:34:5C:2F:6A:92:A4:F7:B3:58:65:2E:41:B3:59:34:FD:8B
Authority key identifier: 2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
Certificate issuer:       /CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Certificate serial:       018F87ED0BDB93806E8E95509FF2DAC1CD54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
Manifest number:          01EB
Signing time:             Fri 17 May 2024 19:00:10 +0000
Manifest this update:     Fri 17 May 2024 19:00:10 +0000
Manifest next update:     Sat 18 May 2024 19:00:10 +0000
Files and hashes:         1: LUUkZslYX29anMHDDo17Fu1HSkg.crl (hash: P3nEOHo9iJnSKKje7ySJjrMIXu+ZgKK/50cgT7aJSgY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:0b:db:93:80:6e:8e:95:50:9f:f2:da:c1:cd:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
        Validity
            Not Before: May 17 19:00:10 2024 GMT
            Not After : May 18 19:00:10 2024 GMT
        Subject: CN=7d3e66345c2f6a92a4f7b358652e41b35934fd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:b2:77:15:fa:ac:d4:e6:57:b8:b3:bc:24:
                    df:7c:ce:0d:7c:f6:5f:42:44:62:a9:6e:58:aa:23:
                    c2:a0:24:6f:76:04:cb:91:fb:f7:d0:ed:52:60:f3:
                    02:77:89:0d:60:07:5b:53:5b:8c:6e:bd:b1:0d:9b:
                    c6:54:72:1f:18:33:ab:d6:f2:81:9f:3b:a1:1d:6a:
                    5b:81:77:69:38:71:12:aa:fc:47:09:2d:ab:9b:ea:
                    f5:96:c9:2b:f3:01:00:69:ed:32:b4:51:95:50:db:
                    7d:7c:88:06:cc:38:90:db:9a:f3:82:68:f8:f8:01:
                    2c:c2:35:4c:40:c0:42:d8:ca:9a:53:aa:a5:3d:39:
                    8e:ae:44:bc:6b:d8:be:04:51:0c:0c:f0:e2:48:28:
                    7d:e0:5c:b9:b9:37:3c:aa:19:20:f7:53:f9:4a:e3:
                    e6:7c:ee:33:bb:28:1a:16:bc:db:d3:db:a9:20:0a:
                    39:4f:f3:dc:f8:4b:bc:92:a0:58:86:d3:bb:24:1b:
                    da:a7:8c:9d:7c:1f:59:d6:56:ad:e3:5d:7b:61:4d:
                    36:cc:e6:3e:29:12:a0:67:d2:36:00:08:7f:d1:1c:
                    6b:96:3d:bf:70:38:55:cc:28:4c:9f:b9:6e:a0:47:
                    c3:60:ae:05:60:4f:5b:78:7a:cc:bd:20:d4:cc:c1:
                    5f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3E:66:34:5C:2F:6A:92:A4:F7:B3:58:65:2E:41:B3:59:34:FD:8B
            X509v3 Authority Key Identifier:
                keyid:2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:10:4d:97:9d:15:5b:f0:80:01:ca:cf:9d:1e:df:9b:a2:80:
         17:5b:57:c9:b1:14:5a:b8:27:f7:2c:2a:7a:15:89:09:02:85:
         ff:93:f2:2b:83:16:69:47:fd:10:bb:9a:23:46:f2:82:1b:98:
         1d:a3:16:bf:e3:4c:d1:43:d4:09:95:8a:ad:0f:7b:65:0f:28:
         d7:db:bc:78:d7:e0:11:59:72:c7:44:59:2e:77:21:db:79:d4:
         b4:42:c1:6c:d1:d3:97:33:22:e0:40:51:3a:7a:f4:44:5a:6d:
         ba:6c:28:0b:af:88:d5:60:4e:de:09:ca:a5:90:1d:34:99:c5:
         e9:54:e9:f0:6e:40:e1:9f:e8:4d:a3:d9:1a:2e:5a:6f:5d:0d:
         33:92:a2:1a:62:f8:4c:a1:e7:8b:bc:35:b3:9d:67:f0:6a:2e:
         27:39:fb:38:39:11:be:7d:91:42:fb:61:68:9e:6c:4d:f4:81:
         94:56:0c:37:c6:66:9e:92:65:17:20:73:3a:28:82:4f:35:a8:
         18:dd:aa:34:bd:0a:79:b9:dd:f8:f6:92:8e:23:c1:3b:a0:d1:
         4c:f1:a4:0e:22:88:65:a2:dd:3d:d9:aa:ab:12:16:5e:35:2f:
         27:20:7b:b9:35:cc:4f:2f:c1:77:df:8c:52:9d:6d:ed:cb:20:
         69:02:48:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----