Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
File:                     Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft (raw, json)
Hash identifier:          EGZSeEGWIW2LuNKCItWFrsOMyjE9L1PPjC7rYrWanDI=
Subject key identifier:   31:57:DD:0B:CB:F3:E7:CC:C3:70:0C:C3:85:E2:20:09:26:20:A3:D4
Authority key identifier: 0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
Certificate issuer:       /CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Certificate serial:       0191FA7E3D07B56CBDD066481F4433EEB41D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
Manifest number:          0129
Signing time:             Mon 16 Sep 2024 11:01:02 +0000
Manifest this update:     Mon 16 Sep 2024 11:01:02 +0000
Manifest next update:     Tue 17 Sep 2024 11:01:02 +0000
Files and hashes:         1: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl (hash: Fw96aIE5ueAYqRXTU6g1bdVZXpqWUxSnlHkVfLempPQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:7e:3d:07:b5:6c:bd:d0:66:48:1f:44:33:ee:b4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
        Validity
            Not Before: Sep 16 11:01:02 2024 GMT
            Not After : Sep 17 11:01:02 2024 GMT
        Subject: CN=3157dd0bcbf3e7ccc3700cc385e220092620a3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:d4:57:68:14:87:7c:f7:6b:2d:80:e3:dd:
                    92:0f:cd:29:c0:4f:84:0f:27:c4:cd:08:f8:4f:a1:
                    22:3b:ca:16:72:59:26:fc:52:00:3c:e5:de:fa:e9:
                    98:7f:a7:2e:c5:68:30:08:76:46:10:98:6a:31:0e:
                    94:ce:f3:1c:02:2a:3c:56:14:de:a6:19:55:5b:a4:
                    17:3b:d7:9e:58:2e:97:2a:a0:64:40:c5:16:8d:39:
                    8b:48:2a:53:21:f0:34:b9:bd:27:78:3f:bc:69:5b:
                    be:1c:7e:51:5b:36:42:0b:52:ab:a0:fd:7b:2d:41:
                    21:d9:f2:3e:9e:ef:bc:f3:7b:b2:e4:8a:14:52:d3:
                    70:26:d1:47:51:54:86:6e:3d:45:59:0f:04:a8:3d:
                    12:ad:1f:7b:3b:4e:cd:32:e4:fd:4c:80:68:6f:61:
                    06:ee:c3:6b:af:20:c1:2a:77:54:92:14:e2:e1:1d:
                    84:da:81:91:03:bc:f9:e8:d7:b4:88:1b:aa:cc:b0:
                    81:b3:22:9c:4e:45:42:3a:ef:d6:b0:69:ee:b9:f9:
                    10:35:5a:e3:15:68:ba:77:17:e8:ae:72:1a:9f:28:
                    30:07:b4:dc:21:30:0f:4c:43:de:9a:ef:07:71:11:
                    a9:b3:6e:08:58:48:39:50:bf:2f:d4:21:e3:da:11:
                    f8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:57:DD:0B:CB:F3:E7:CC:C3:70:0C:C3:85:E2:20:09:26:20:A3:D4
            X509v3 Authority Key Identifier:
                keyid:0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8f:4e:9b:af:11:03:da:d8:bc:5c:f8:69:15:73:1c:60:e0:
         bd:ea:2d:6b:f8:95:61:20:ab:7b:a7:99:6e:d5:84:1e:fd:10:
         ba:aa:25:ef:4b:10:2a:c5:30:2e:6e:bd:6c:f2:9d:64:a3:0b:
         1c:48:e0:d6:d4:5d:71:39:f4:bc:af:21:4d:f8:92:8e:9b:ea:
         27:39:01:d7:ea:b2:6b:59:bf:5d:15:b6:39:a8:06:ef:5d:4c:
         60:6b:40:35:b6:1f:5e:f3:13:f6:71:92:87:e3:35:12:e1:44:
         4e:eb:3f:16:36:ee:74:8e:62:0f:56:7b:6d:50:0a:69:3b:10:
         6b:f6:68:d0:12:c3:46:e7:96:5f:7f:d2:05:33:2c:24:b0:f3:
         06:87:6e:e5:71:05:42:1e:cc:38:e2:b1:6d:75:22:8b:92:77:
         b0:d0:38:64:58:6d:2e:8b:17:20:be:0b:93:2c:80:a8:09:2a:
         8e:98:ad:a1:27:bb:e6:7d:26:19:18:39:75:05:35:44:21:65:
         fe:f6:ee:5f:3a:b8:91:b2:b3:61:87:dc:8b:31:75:c8:fc:ef:
         d7:ca:26:4a:df:3c:b1:9a:1d:2a:eb:e7:cc:d0:45:e8:9c:23:
         08:18:d8:b2:35:8f:c0:21:34:fb:47:7f:42:58:0c:14:6b:82:
         eb:f9:35:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----