Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
File:                     rh967y8S0HaqitWli8uNyvPwvUw.mft (raw, json)
Hash identifier:          0MwwQtT7lYKXA3vxl1NS9LnYIkI40TatC1/wPHfskOs=
Subject key identifier:   8E:CB:B0:60:49:86:DD:BA:95:33:7F:16:6E:10:E3:E7:EA:7D:C6:D3
Authority key identifier: AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C
Certificate issuer:       /CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c
Certificate serial:       018F87ED6A2AE1076E86E18CD4D209509BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
Manifest number:          0CC7
Signing time:             Fri 17 May 2024 19:00:34 +0000
Manifest this update:     Fri 17 May 2024 19:00:34 +0000
Manifest next update:     Sat 18 May 2024 19:00:34 +0000
Files and hashes:         1: rh967y8S0HaqitWli8uNyvPwvUw.crl (hash: vOiTUdOE4wowS+lCbIwjCfIpy9WjRoQ5O8c6M+KNTlc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:6a:2a:e1:07:6e:86:e1:8c:d4:d2:09:50:9b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c
        Validity
            Not Before: May 17 19:00:34 2024 GMT
            Not After : May 18 19:00:34 2024 GMT
        Subject: CN=8ecbb0604986ddba95337f166e10e3e7ea7dc6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:be:21:62:01:0f:78:e4:77:b2:17:4f:5f:09:
                    6b:84:3b:b6:07:8d:17:39:7d:da:05:07:e5:64:cb:
                    64:64:5b:19:b0:a3:5f:5b:47:47:6f:83:8a:10:1d:
                    34:47:88:be:e0:cb:6a:ba:3a:e9:94:6f:cc:16:2d:
                    d7:05:ba:2e:a8:34:ce:7e:3b:62:fe:3c:c2:41:6c:
                    06:93:97:0f:6c:40:85:00:3f:da:b1:9c:d9:34:22:
                    55:9d:1e:96:72:4d:8a:78:87:e4:88:19:af:80:78:
                    a3:c8:06:8d:82:01:c3:69:31:52:06:14:ff:83:fe:
                    e8:e5:d5:53:50:c1:10:ab:fb:1a:10:42:32:57:39:
                    40:ff:94:31:fd:24:9e:4b:32:45:01:99:65:5b:5f:
                    56:54:d5:77:68:98:90:d5:a5:87:2f:d0:da:41:8d:
                    1f:10:82:f1:bc:ed:ee:c1:6d:60:32:f9:8a:aa:64:
                    51:17:d7:ef:5c:81:d8:f3:ce:e5:22:da:68:dd:a1:
                    e6:f3:8a:5c:56:3a:c4:73:aa:e6:2d:72:5c:19:b7:
                    21:70:75:fb:11:21:e5:55:e5:e0:ee:82:47:29:66:
                    f8:cc:e7:c3:88:91:64:b8:8a:0f:03:c1:5f:c3:42:
                    e3:8f:09:a3:ee:ea:57:cb:de:2b:9d:88:2d:35:43:
                    ca:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CB:B0:60:49:86:DD:BA:95:33:7F:16:6E:10:E3:E7:EA:7D:C6:D3
            X509v3 Authority Key Identifier:
                keyid:AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a2:14:01:01:24:3a:cc:6d:0e:82:a1:be:b5:26:89:ef:ad:
         57:31:82:06:d9:83:82:2f:b6:2a:37:40:43:46:5f:4e:c9:fb:
         6a:24:8f:69:3d:a5:72:dc:0a:b9:8c:c9:60:24:c7:98:c9:91:
         db:3e:bb:7a:df:f6:26:db:84:80:25:61:8a:60:15:04:e4:12:
         53:44:2c:d6:47:0e:e5:c1:55:b7:6b:da:67:e1:ff:51:31:86:
         20:e8:15:60:7c:61:79:ab:a3:44:67:3f:95:54:8e:97:40:c8:
         b6:e3:58:24:5c:ae:b1:10:e3:d0:b3:b9:ad:66:0f:95:f9:66:
         a1:2c:b4:2d:0b:be:ef:3e:6a:ad:6f:cc:02:75:3e:32:6b:43:
         04:13:84:b2:85:a5:6c:b7:2b:8b:9a:d0:ff:ea:19:ef:54:64:
         60:05:d0:1f:4d:8b:6f:3c:a0:5c:9e:f6:71:ce:f8:e1:6b:33:
         be:be:99:9c:7f:14:c6:58:1b:b2:dd:32:b2:91:2b:0b:1c:d7:
         84:17:59:b9:d3:0f:2c:14:d7:8c:f7:5e:cd:25:e2:6c:fc:07:
         75:7c:33:fa:e9:44:95:05:81:15:af:f3:a8:6a:1b:88:bb:7b:
         ce:2a:92:6d:2b:8a:c9:74:46:e4:43:9a:a0:34:0c:f0:21:2c:
         6c:1b:f4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----