Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
File:                     _sQT3TZn54GV5SaKooWupRa8sZk.mft (raw, json)
Hash identifier:          9vX+hHZkov4/gWf5RNr6i2/b+RgXw29OtMNmfkEBKn8=
Subject key identifier:   41:98:3D:BC:D6:F3:28:19:F1:F9:C9:73:0A:4C:0F:C4:F4:C8:46:A4
Authority key identifier: FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
Certificate issuer:       /CN=fec413dd3667e78195e5268aa285aea516bcb199
Certificate serial:       018F86A39C883CDC11014E0C5EE67D26E362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
Manifest number:          0EA1
Signing time:             Fri 17 May 2024 13:00:20 +0000
Manifest this update:     Fri 17 May 2024 13:00:20 +0000
Manifest next update:     Sat 18 May 2024 13:00:20 +0000
Files and hashes:         1: _sQT3TZn54GV5SaKooWupRa8sZk.crl (hash: ltLnBwOGz7VP5vSD5TTdf80b/kDyi62GUgUBaGGe0Bc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:9c:88:3c:dc:11:01:4e:0c:5e:e6:7d:26:e3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec413dd3667e78195e5268aa285aea516bcb199
        Validity
            Not Before: May 17 13:00:20 2024 GMT
            Not After : May 18 13:00:20 2024 GMT
        Subject: CN=41983dbcd6f32819f1f9c9730a4c0fc4f4c846a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:de:83:1a:20:99:72:c6:0f:47:99:8e:ed:aa:
                    ee:3d:0b:46:db:24:25:3d:40:68:96:bc:20:2d:e7:
                    b9:e0:0e:b9:dd:ed:89:d8:74:94:78:0f:d1:ed:37:
                    6f:47:05:2a:ac:82:f4:f9:d3:b6:2d:e2:8e:8f:4f:
                    a0:fb:97:50:20:8c:6d:17:b5:95:29:9c:4b:27:69:
                    fc:bf:ea:98:fa:14:e2:4e:ed:dc:af:ef:7b:a1:8e:
                    42:96:e0:ed:7e:ea:7d:83:1c:64:ab:b5:60:02:30:
                    81:da:7c:4a:f2:6f:6b:2a:89:a5:b6:32:43:3f:74:
                    2f:3e:9c:db:60:55:e0:8e:e8:76:33:5f:1a:78:b6:
                    8c:be:ca:e5:00:71:7d:28:53:1d:7b:f6:0b:5f:34:
                    29:24:f7:35:f9:b0:15:d6:08:a0:a3:5d:bf:24:56:
                    af:cc:04:3f:d5:1a:62:f5:20:7c:81:23:22:71:db:
                    6c:1c:23:97:41:02:ec:b5:b0:1f:4c:c2:20:e0:d4:
                    99:30:05:d5:25:97:5a:b4:20:b9:46:18:cf:89:e3:
                    e5:fa:d3:96:dd:bf:31:ed:87:ea:48:8d:4e:a1:77:
                    92:ec:cf:73:81:0d:f0:df:56:6e:62:ef:89:8c:f7:
                    ca:66:11:4f:60:58:32:87:32:31:ce:bb:da:6f:8b:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:98:3D:BC:D6:F3:28:19:F1:F9:C9:73:0A:4C:0F:C4:F4:C8:46:A4
            X509v3 Authority Key Identifier:
                keyid:FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c1:3c:d9:aa:30:c4:ab:90:12:8b:c2:ac:83:53:0d:f5:72:
         76:bf:4f:06:44:e7:dd:8d:0c:97:40:29:31:43:13:02:84:9f:
         52:67:c5:1f:d8:f1:04:ff:23:67:f4:02:83:9f:2d:5c:f4:03:
         c1:1a:7e:54:ad:9a:88:48:d8:20:73:55:c5:c1:a0:48:34:f0:
         a5:8c:4e:e8:0b:62:f5:b3:81:f5:90:34:7a:24:d9:b7:6a:90:
         78:b5:96:ec:ed:1a:56:da:d1:d3:da:2c:6e:a7:99:82:5b:f1:
         d1:2d:5f:f3:fb:a3:51:b5:88:da:b9:3b:d8:c4:31:6d:98:3a:
         0c:f3:6a:56:b9:eb:e5:d4:b3:f7:28:bd:48:15:51:55:f5:27:
         f5:3c:6f:b3:a6:e7:7c:90:20:de:22:c9:4e:47:a8:27:1a:6b:
         2b:99:ba:44:a2:4a:0e:d4:0b:98:37:15:7d:1e:31:64:8e:7f:
         6a:3c:aa:50:d4:d2:2d:6e:94:eb:59:fe:06:0e:1a:b5:8f:b7:
         bb:ea:7a:bf:d3:18:ec:ba:22:1a:44:f9:b5:a2:35:30:09:16:
         1b:cc:9e:57:35:0f:b3:db:27:93:6f:c2:d6:f2:8b:cc:b6:75:
         02:61:5a:a1:29:37:f2:18:b4:3a:35:d9:65:6e:3a:a3:31:dd:
         2a:49:9c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----