Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd61c7-873a-4dd5-8237-6cb4752cff6a/1/j16lJA6n2tcx0YuL6flbQjgLfDE.mft
File:                     j16lJA6n2tcx0YuL6flbQjgLfDE.mft (raw, json)
Hash identifier:          FOl1YhRplxyklj1qNF6cE5rPk5d+Rkh+IoeR3Aj1bB4=
Subject key identifier:   6F:A0:2B:10:F0:8C:BC:9E:E6:58:65:37:AF:44:F7:14:D8:D4:2B:B8
Authority key identifier: 8F:5E:A5:24:0E:A7:DA:D7:31:D1:8B:8B:E9:F9:5B:42:38:0B:7C:31
Certificate issuer:       /CN=8f5ea5240ea7dad731d18b8be9f95b42380b7c31
Certificate serial:       018F87B683856832637FDAA76CA6795893D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j16lJA6n2tcx0YuL6flbQjgLfDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/cd61c7-873a-4dd5-8237-6cb4752cff6a/1/j16lJA6n2tcx0YuL6flbQjgLfDE.mft
Manifest number:          72
Signing time:             Fri 17 May 2024 18:00:36 +0000
Manifest this update:     Fri 17 May 2024 18:00:36 +0000
Manifest next update:     Sat 18 May 2024 18:00:36 +0000
Files and hashes:         1: j16lJA6n2tcx0YuL6flbQjgLfDE.crl (hash: sXb1qf/5RgnbsZ0KH5PqWkIAICKmaWImHiMXxx8/aHM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/cd61c7-873a-4dd5-8237-6cb4752cff6a/1/j16lJA6n2tcx0YuL6flbQjgLfDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/cd61c7-873a-4dd5-8237-6cb4752cff6a/1/j16lJA6n2tcx0YuL6flbQjgLfDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j16lJA6n2tcx0YuL6flbQjgLfDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:83:85:68:32:63:7f:da:a7:6c:a6:79:58:93:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f5ea5240ea7dad731d18b8be9f95b42380b7c31
        Validity
            Not Before: May 17 18:00:36 2024 GMT
            Not After : May 18 18:00:36 2024 GMT
        Subject: CN=6fa02b10f08cbc9ee6586537af44f714d8d42bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:59:3e:2f:84:95:02:4b:47:67:32:36:fb:7a:
                    ae:11:fd:45:3f:4e:4b:50:57:b9:37:93:b6:07:12:
                    d6:4c:c7:5b:fa:65:39:be:47:37:f4:d8:86:91:ad:
                    bb:81:83:71:36:ca:c3:46:ba:ae:95:70:bc:3c:e8:
                    42:7a:7a:2e:42:25:11:db:fb:4e:7e:95:e2:45:d7:
                    5b:f4:4c:8f:22:c8:da:f2:03:02:10:65:66:46:c8:
                    06:5b:ee:2c:4c:6e:a5:e5:68:c9:05:5d:a5:fe:6a:
                    54:c1:3c:67:58:48:84:b9:fb:41:6e:63:6a:0f:29:
                    38:27:ad:74:cf:7a:e2:8f:fb:8e:08:e3:0b:b7:2c:
                    98:cc:a9:c9:84:bb:8f:54:81:fb:40:30:ad:19:36:
                    41:d2:b7:bf:a3:71:95:7f:2e:db:f1:57:50:bc:6e:
                    68:5b:88:69:c4:94:c4:08:4f:40:8e:0e:a4:28:c3:
                    94:8b:f2:f6:05:37:17:ac:59:79:e5:cd:84:c5:31:
                    e7:07:76:1e:80:b1:1a:ed:f2:55:7a:f5:9b:9e:31:
                    ae:21:42:3e:66:ad:60:0d:77:52:5b:2b:77:1c:90:
                    30:ed:09:a4:08:2a:e2:ba:42:82:91:bd:d8:98:f9:
                    8c:49:86:66:59:cd:ff:89:ac:4d:52:b1:d0:66:45:
                    61:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A0:2B:10:F0:8C:BC:9E:E6:58:65:37:AF:44:F7:14:D8:D4:2B:B8
            X509v3 Authority Key Identifier:
                keyid:8F:5E:A5:24:0E:A7:DA:D7:31:D1:8B:8B:E9:F9:5B:42:38:0B:7C:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16lJA6n2tcx0YuL6flbQjgLfDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd61c7-873a-4dd5-8237-6cb4752cff6a/1/j16lJA6n2tcx0YuL6flbQjgLfDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd61c7-873a-4dd5-8237-6cb4752cff6a/1/j16lJA6n2tcx0YuL6flbQjgLfDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1c:44:72:63:6e:c4:e6:81:2a:5c:63:bc:cb:31:a3:43:bc:
         3f:f3:a4:ad:aa:b0:48:49:92:3f:b9:3d:06:1c:0f:c0:23:5e:
         9b:02:76:1f:8d:6f:28:5c:61:bc:bf:8f:34:b5:1b:5f:ef:9d:
         ce:31:23:40:84:68:33:e1:9f:85:d0:20:dc:d1:07:52:97:44:
         33:0a:5c:9b:4d:cf:c1:3c:40:16:ad:0a:94:9d:c0:a2:db:dc:
         e9:a9:66:2a:1d:19:31:83:2f:a2:b5:1a:07:84:c0:01:9c:86:
         ab:47:62:ef:e2:5a:80:c1:f2:4d:cc:d1:d8:1d:3a:ff:58:5c:
         be:fb:a2:0c:25:26:4a:f9:a2:29:d4:86:77:8e:83:5a:39:98:
         a1:c3:ed:b9:33:47:43:ce:4c:7b:45:19:9a:05:50:b4:3d:39:
         03:cf:77:13:66:c7:b5:eb:22:15:26:72:63:27:db:62:61:81:
         fd:35:b8:9c:05:a2:3e:a7:04:d3:c5:d6:32:a1:ad:87:0c:0e:
         ab:3e:7f:59:29:90:e5:b5:b6:a7:49:fb:6f:48:dc:eb:e9:da:
         af:ef:b9:73:88:e7:d6:36:a9:b5:3b:c0:6c:92:c9:b2:39:91:
         11:ea:37:a2:43:86:8e:55:31:8b:eb:d6:68:2e:c9:91:24:fc:
         59:f7:64:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----