Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
File:                     ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft (raw, json)
Hash identifier:          uUGKjguVKwVJPTKa3m3sufbuhC0B0SaeYS2mRRgnzac=
Subject key identifier:   CE:1D:42:28:68:DE:A1:03:0F:F0:55:4D:5B:4E:FB:A6:9F:73:F9:B8
Authority key identifier: 65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
Certificate issuer:       /CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Certificate serial:       018F87B6727BA8761DDA5DEF93050EF9E5FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
Manifest number:          0156
Signing time:             Fri 17 May 2024 18:00:32 +0000
Manifest this update:     Fri 17 May 2024 18:00:32 +0000
Manifest next update:     Sat 18 May 2024 18:00:32 +0000
Files and hashes:         1: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl (hash: +jAxcMmoiLOnusm/lchwN8RRlDdqR7cDp34uiastDVE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:72:7b:a8:76:1d:da:5d:ef:93:05:0e:f9:e5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
        Validity
            Not Before: May 17 18:00:32 2024 GMT
            Not After : May 18 18:00:32 2024 GMT
        Subject: CN=ce1d422868dea1030ff0554d5b4efba69f73f9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:d8:36:c2:ad:a5:e7:57:9f:f4:71:c0:2d:
                    77:4f:28:48:b2:2f:ba:ae:94:ee:b4:80:5b:f2:d5:
                    03:e9:48:82:9d:0e:c4:1f:97:83:43:8e:46:9e:9a:
                    83:f8:6e:72:56:2f:7b:40:d6:3c:45:16:69:7b:c2:
                    3b:66:9c:70:d3:ed:fc:fc:52:72:d3:ec:2f:57:1b:
                    8a:02:5b:8d:d1:73:5a:87:a0:75:9e:a7:76:15:79:
                    04:98:be:31:7a:4d:55:54:b3:fd:90:db:8d:6f:54:
                    d5:36:37:7c:82:a6:7b:38:63:d2:11:40:6e:39:b7:
                    bd:fe:2e:82:2d:d4:cb:4e:a9:55:c6:12:be:df:7f:
                    af:82:33:ec:4d:9b:8c:c2:b2:ba:b8:d3:af:61:ab:
                    87:17:9a:38:10:11:47:dd:73:9d:7b:be:e5:67:58:
                    98:0a:27:cd:ae:48:2d:17:1d:82:7a:00:b8:1f:d7:
                    ac:ee:84:37:5d:1b:2f:59:cd:bd:e4:62:52:79:be:
                    5d:fc:62:61:d9:f5:0c:96:a9:0f:11:cc:6e:16:64:
                    77:f2:92:fa:84:dd:5d:c9:1a:b8:ea:55:cc:c4:f7:
                    23:f7:e3:a4:39:68:d8:71:57:d7:7f:0a:fa:35:7b:
                    c6:ac:db:9b:03:25:07:ba:2c:ac:52:a2:da:6a:26:
                    8c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1D:42:28:68:DE:A1:03:0F:F0:55:4D:5B:4E:FB:A6:9F:73:F9:B8
            X509v3 Authority Key Identifier:
                keyid:65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:11:9e:b3:9c:96:34:35:bb:a3:88:99:8d:6b:c0:99:b9:05:
         e2:eb:ba:02:89:9b:e5:f2:3e:44:b7:6d:da:b0:c7:0f:99:66:
         06:6a:52:e1:aa:a4:45:71:b0:b9:6f:64:dd:90:ac:46:57:74:
         98:d9:1b:57:9b:53:0e:5e:d9:36:a0:26:29:40:c2:4d:22:29:
         8e:ac:ab:87:3f:85:37:32:31:8f:bf:6a:84:b7:78:4e:3b:5e:
         82:2a:c4:50:4f:b6:5e:d9:d4:f8:40:1f:8f:02:a9:55:4a:ac:
         8c:80:88:56:54:27:a6:57:3d:3f:b3:9b:06:a1:e8:ec:8a:ee:
         86:54:3f:13:ad:aa:2a:42:e1:e4:ba:d1:3e:8d:05:50:34:3f:
         a1:50:cc:4f:fa:d8:64:ac:3d:02:85:fd:a1:e9:ce:89:33:37:
         4c:c4:0b:e2:a9:ce:d1:62:9d:87:db:78:89:28:e2:06:72:3e:
         c6:88:1b:98:a5:15:44:ed:ec:e8:db:7c:cb:a8:4b:af:7f:ff:
         10:74:ca:64:13:df:19:ca:e4:32:13:1c:0e:01:a1:30:c0:45:
         c6:31:b6:94:b5:33:36:78:4d:4d:78:08:82:73:a7:1a:6b:be:
         80:fc:1c:c8:fc:e8:81:78:ca:47:2c:b6:08:b4:0c:25:ae:87:
         4f:d7:a2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----