Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1df143-7caa-4934-b076-f8bd004c3089/1/dV-du8Al_uzgcje-wLvQXiAchL0.mft
File:                     dV-du8Al_uzgcje-wLvQXiAchL0.mft (raw, json)
Hash identifier:          IWnxzfg0JGQx6snawhdFk0L2nqg5xSCEpYviB4dMOCE=
Subject key identifier:   B5:85:9D:22:B0:BE:F3:F4:BE:10:D4:0B:7B:C7:B7:3C:0B:80:D3:20
Authority key identifier: 75:5F:9D:BB:C0:25:FE:EC:E0:72:37:BE:C0:BB:D0:5E:20:1C:84:BD
Certificate issuer:       /CN=755f9dbbc025feece07237bec0bbd05e201c84bd
Certificate serial:       018F87B6634A53E6479303B9B49A9E123952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dV-du8Al_uzgcje-wLvQXiAchL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1df143-7caa-4934-b076-f8bd004c3089/1/dV-du8Al_uzgcje-wLvQXiAchL0.mft
Manifest number:          0953
Signing time:             Fri 17 May 2024 18:00:28 +0000
Manifest this update:     Fri 17 May 2024 18:00:28 +0000
Manifest next update:     Sat 18 May 2024 18:00:28 +0000
Files and hashes:         1: dV-du8Al_uzgcje-wLvQXiAchL0.crl (hash: QpuESjBfv6gwD/X5O/CPST39dNKIUgwQ+LtWIPgvsa4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/1df143-7caa-4934-b076-f8bd004c3089/1/dV-du8Al_uzgcje-wLvQXiAchL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/1df143-7caa-4934-b076-f8bd004c3089/1/dV-du8Al_uzgcje-wLvQXiAchL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dV-du8Al_uzgcje-wLvQXiAchL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:63:4a:53:e6:47:93:03:b9:b4:9a:9e:12:39:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=755f9dbbc025feece07237bec0bbd05e201c84bd
        Validity
            Not Before: May 17 18:00:28 2024 GMT
            Not After : May 18 18:00:28 2024 GMT
        Subject: CN=b5859d22b0bef3f4be10d40b7bc7b73c0b80d320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:34:ec:0a:47:e0:2a:83:38:92:62:21:32:
                    d6:53:4a:04:3c:ed:63:8c:a1:1c:92:3f:58:3f:84:
                    b5:a2:6b:68:20:ee:97:fb:f2:5c:28:0a:8b:97:cc:
                    26:59:71:6e:d3:a6:7f:20:fe:cd:b8:77:10:8f:83:
                    14:7c:61:4b:f6:25:64:50:59:d8:33:86:2f:e1:b0:
                    2b:1c:61:99:01:93:d7:44:60:d0:81:5c:71:63:24:
                    d3:78:2f:79:14:5a:42:81:6c:1d:1b:76:25:7b:91:
                    b2:14:e2:53:21:98:68:e6:42:33:7c:8a:16:a3:6d:
                    b2:6e:cc:f6:dc:84:ec:ac:f3:af:75:6c:e6:76:2c:
                    6e:65:09:a1:f3:82:6b:dc:ee:3e:f6:8d:7f:d5:d3:
                    92:57:f9:01:6a:29:76:ab:28:d5:fb:90:2a:c9:de:
                    5a:8b:bc:bc:be:e8:bb:6d:18:03:65:50:12:7d:3d:
                    e7:4a:35:2e:d9:62:19:bc:74:a4:ee:dd:1a:53:a9:
                    96:6a:d2:80:10:6f:e0:1e:8b:e7:f0:2b:3a:f9:a0:
                    41:bd:d0:6a:e4:24:d9:76:07:4d:99:96:66:98:6a:
                    0c:69:cc:ee:2f:94:fe:12:be:81:76:46:56:fa:19:
                    e1:88:68:37:66:9b:a1:8a:b3:ae:b5:25:98:54:5c:
                    c5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:85:9D:22:B0:BE:F3:F4:BE:10:D4:0B:7B:C7:B7:3C:0B:80:D3:20
            X509v3 Authority Key Identifier:
                keyid:75:5F:9D:BB:C0:25:FE:EC:E0:72:37:BE:C0:BB:D0:5E:20:1C:84:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dV-du8Al_uzgcje-wLvQXiAchL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1df143-7caa-4934-b076-f8bd004c3089/1/dV-du8Al_uzgcje-wLvQXiAchL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1df143-7caa-4934-b076-f8bd004c3089/1/dV-du8Al_uzgcje-wLvQXiAchL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:41:ae:31:90:47:68:79:b1:3f:8b:d7:35:54:08:ff:05:7b:
         0f:6c:82:53:1c:b6:54:c9:f8:fe:c8:f9:f2:46:97:9a:d4:d8:
         59:c0:be:a8:e6:b1:9c:fe:15:8a:e7:60:6c:d0:19:a2:26:98:
         95:67:40:ed:32:7a:0f:ab:24:3d:18:80:b3:9b:26:6d:62:13:
         57:ae:db:64:5e:14:e7:19:a6:c7:52:3b:5e:b9:5d:bf:b7:9e:
         4a:c4:0e:52:21:07:89:ab:88:67:67:03:86:83:a8:fc:73:39:
         ca:9f:bd:82:ac:96:22:60:59:81:93:ec:18:63:ed:99:9b:61:
         de:b7:4b:82:de:61:e6:40:aa:34:1f:70:cb:98:4d:27:c0:95:
         4f:f3:32:8b:00:83:3c:77:9d:ec:fb:3f:11:89:8b:b7:e2:09:
         ec:18:00:ac:86:46:e7:c2:71:5d:79:f5:5a:d5:55:3e:40:f7:
         f6:ea:a6:45:0a:fe:3f:f2:25:f0:24:56:46:97:fd:6c:60:ed:
         95:b9:18:66:76:e0:2e:75:52:15:8e:94:c8:71:58:b8:64:71:
         56:6b:f7:48:fe:7f:7e:e7:cf:be:c2:bd:47:4f:61:62:55:fc:
         7a:88:d5:e1:ae:c2:b7:87:4e:f8:86:d7:dd:f4:ae:f9:dd:8a:
         2b:5f:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----