Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
File:                     VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft (raw, json)
Hash identifier:          V2gNnAhU6aYQgvcj/pQDVyM0vEBoy8a158IiUKVa2bY=
Subject key identifier:   16:96:37:E9:49:59:75:DE:FB:FC:77:31:3C:A7:6C:0B:7B:7C:1E:84
Authority key identifier: 57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD
Certificate issuer:       /CN=57060106b416792b2a2e9a7eb402a238570168bd
Certificate serial:       018F87ED5627E441EC51209D2D4C1A19DFCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
Manifest number:          0EDD
Signing time:             Fri 17 May 2024 19:00:29 +0000
Manifest this update:     Fri 17 May 2024 19:00:29 +0000
Manifest next update:     Sat 18 May 2024 19:00:29 +0000
Files and hashes:         1: VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl (hash: AKbGyeAbP/KxQD7SV4ga1mwDrsIuPQTTiPJrtcZemVw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:56:27:e4:41:ec:51:20:9d:2d:4c:1a:19:df:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57060106b416792b2a2e9a7eb402a238570168bd
        Validity
            Not Before: May 17 19:00:29 2024 GMT
            Not After : May 18 19:00:29 2024 GMT
        Subject: CN=169637e9495975defbfc77313ca76c0b7b7c1e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:32:9b:9a:31:26:3a:01:4c:69:44:d0:c9:
                    b1:18:17:74:31:e1:0b:03:b0:0f:8f:1d:ea:ff:e0:
                    1d:95:d3:34:16:8f:ac:28:93:f2:31:67:69:3c:07:
                    3d:d1:a9:38:ed:17:9b:77:7c:72:29:d2:5c:6c:61:
                    c1:f6:78:e5:c5:68:00:aa:83:76:f6:c8:33:37:0d:
                    1b:8e:b9:4d:0d:99:29:6c:54:b7:40:75:10:b5:cf:
                    b6:97:fa:66:98:a9:0e:dd:3b:59:b8:53:67:96:7f:
                    ae:99:5e:cb:6a:37:36:1e:e7:d2:af:03:b2:4d:ba:
                    5f:dd:2f:66:43:39:44:b3:ee:65:69:8c:7d:1e:cc:
                    98:8a:d0:e7:e6:b8:f5:93:89:61:fb:06:db:8e:42:
                    dd:0c:cd:46:19:a9:eb:99:7a:3b:f2:d3:4f:b4:6d:
                    73:7a:6b:22:da:68:a7:a6:22:93:37:64:37:c9:04:
                    25:37:de:7e:3c:90:85:82:69:29:e5:9a:ac:61:7e:
                    56:26:85:1c:5e:d6:3e:ac:dc:37:77:1e:fa:ca:22:
                    63:36:7c:39:a1:be:d0:c2:fa:ab:64:2c:ae:9c:9b:
                    42:1a:07:50:aa:b3:77:04:ab:2a:2e:a1:8a:32:cb:
                    9d:0a:10:3f:ec:e8:44:ca:85:c1:d6:1d:67:fc:3d:
                    2a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:96:37:E9:49:59:75:DE:FB:FC:77:31:3C:A7:6C:0B:7B:7C:1E:84
            X509v3 Authority Key Identifier:
                keyid:57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e4:f7:bc:d9:14:e4:13:5a:b7:fa:2b:38:a4:83:72:d8:8b:
         ac:84:21:c3:f5:b8:70:89:6c:8e:ef:e5:54:c6:91:0a:0a:00:
         1f:7d:74:6a:6e:fb:d2:68:c0:93:41:97:aa:e8:d8:6c:91:88:
         7b:82:46:b9:6c:8d:bf:25:09:f7:07:b1:6e:bb:e5:4b:23:e2:
         18:0e:12:bb:a5:ab:61:64:45:d8:5f:99:e2:8e:ca:62:a7:9c:
         ef:6c:fb:d1:f1:6f:91:90:3d:65:f1:82:27:24:8f:f8:90:22:
         b9:3d:d9:d1:05:55:97:83:d1:86:91:4f:af:13:d2:c2:b3:68:
         a7:db:ac:4c:1e:49:83:14:f3:a9:1e:4e:c7:03:f3:e4:eb:fb:
         93:90:b4:8c:55:93:06:52:49:8c:01:fb:ab:ba:f2:8b:da:31:
         f6:46:5e:66:bf:f6:ed:d1:9a:c4:fd:73:24:d9:90:fe:17:b9:
         3f:47:52:25:67:b2:9b:05:53:50:85:0a:6c:24:b8:1a:7d:2e:
         74:7e:bb:aa:39:5c:a5:ca:ac:d1:1b:d9:68:23:87:f6:a2:20:
         bb:35:03:3a:1e:c6:86:6a:6e:67:8e:23:dd:fb:21:f4:e3:ca:
         2b:99:c6:3c:0c:2b:1d:47:ea:0e:13:7f:79:6c:12:06:50:b3:
         fc:00:f7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----