Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File:                     1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier:          d6gNUWKNYaxceaY8OiD6gVtbt9HQ4Ddg2OupaBw6618=
Subject key identifier:   71:C3:05:82:F0:02:67:BD:CA:79:E6:34:48:B2:3C:2C:C6:47:9C:21
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer:       /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial:       018F22DE352B739C518739C1196799014C20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number:          0A3B
Signing time:             Sun 28 Apr 2024 04:02:18 +0000
Manifest this update:     Sun 28 Apr 2024 04:02:18 +0000
Manifest next update:     Mon 29 Apr 2024 04:02:18 +0000
Files and hashes:         1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: +MYINiYRpYbyGSa/hyqqrZ0Z+0pxYXqa7OxNDJqUpS4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 04:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:de:35:2b:73:9c:51:87:39:c1:19:67:99:01:4c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
        Validity
            Not Before: Apr 28 04:02:18 2024 GMT
            Not After : Apr 29 04:02:18 2024 GMT
        Subject: CN=71c30582f00267bdca79e63448b23c2cc6479c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:45:41:7e:42:fb:98:55:31:cd:7f:98:ff:
                    ac:37:77:c7:36:0d:9f:40:6f:be:5b:be:e7:fa:30:
                    91:d8:61:a2:7d:e4:b1:2a:fb:6a:cd:73:99:be:c4:
                    f2:cb:ae:ec:d5:7c:fe:91:44:0a:fb:e6:31:8b:4d:
                    6a:60:87:57:33:98:db:e0:0d:38:3a:84:8e:17:99:
                    35:af:18:d3:84:7a:21:76:b4:40:cc:8f:f0:87:a6:
                    31:22:90:42:e6:cf:74:1f:27:52:c1:59:07:bc:c5:
                    44:ce:7f:2f:71:3e:ae:47:d5:45:e1:95:f5:c4:b0:
                    29:56:cf:93:2d:de:b7:67:87:0b:32:10:a3:3a:d5:
                    ea:7a:c9:de:07:18:8e:32:f9:4b:42:2d:d3:b0:c5:
                    a1:4a:b7:c0:34:32:19:3d:f2:5d:06:a5:56:40:cb:
                    a2:3b:2e:f2:04:98:6e:1b:8d:5d:c9:f4:88:be:9d:
                    1c:44:16:a9:66:57:71:96:a1:1a:39:6d:c0:dd:cf:
                    31:ef:8d:4c:9d:ba:c1:3b:1d:22:56:c7:19:71:c5:
                    6c:ac:cc:db:c3:b3:8d:55:35:e6:c6:b4:fc:87:94:
                    05:8e:01:e1:c4:1a:19:9d:90:2d:c1:8d:ed:af:e2:
                    f8:6d:9a:ae:87:f0:e1:1e:4b:dd:86:2b:fc:7a:c6:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C3:05:82:F0:02:67:BD:CA:79:E6:34:48:B2:3C:2C:C6:47:9C:21
            X509v3 Authority Key Identifier:
                keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:cb:44:6c:9f:bc:d5:00:47:b9:d9:fd:2d:0d:9e:5d:07:e2:
         bb:f1:d9:e7:28:85:4d:b6:e5:f2:39:81:42:f0:c6:ae:8a:9a:
         1e:2c:62:6d:42:17:5c:b3:00:8e:0e:b2:14:af:60:0b:a9:19:
         1c:35:d1:53:0f:14:9e:36:70:49:43:aa:e4:bb:fc:20:01:b6:
         7f:c9:c3:ab:f5:87:d8:5c:c7:76:02:10:06:59:57:a5:c9:9f:
         9d:ed:71:3e:36:de:43:01:a6:96:48:55:cd:ce:7a:d1:35:a7:
         ba:2a:ca:c4:94:1b:cd:6e:89:74:c3:4c:95:8e:bb:76:36:5d:
         52:2e:92:22:b6:a2:83:b5:8c:d5:6c:84:14:4a:d5:8d:57:9d:
         97:9f:20:c7:1e:a2:05:b7:28:e2:60:51:db:96:ff:aa:0e:c8:
         e8:04:74:bd:65:bd:43:76:5b:26:51:8f:e7:1a:ef:e2:fc:f4:
         5a:c8:92:2e:7e:55:ad:24:09:49:59:45:64:b8:f1:03:17:95:
         95:b2:1e:4b:91:07:a8:1d:63:a3:ea:4a:23:97:12:9a:1e:e1:
         c5:40:16:8c:73:ea:a0:08:84:44:92:df:98:1f:df:1b:53:d0:
         a2:41:61:a5:f0:d1:f0:18:8c:85:09:38:41:ea:da:49:64:bc:
         83:6d:12:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----