Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File:                     fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier:          E/64MV66QGu8iBzVOv1L/3qadVixBpfvYAmwZmRdpfE=
Subject key identifier:   E9:BC:A5:86:BA:57:6F:9C:CC:F9:48:9F:16:87:71:67:22:3B:6B:C3
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer:       /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial:       018F87ED3FE0FB9BD29AF901A5495086EBC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number:          0383
Signing time:             Fri 17 May 2024 19:00:23 +0000
Manifest this update:     Fri 17 May 2024 19:00:23 +0000
Manifest next update:     Sat 18 May 2024 19:00:23 +0000
Files and hashes:         1: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: tuKYgnUAsbvMNBcWLm1Fj2ZlrQyQOqCAwkSe7UiQKc0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:3f:e0:fb:9b:d2:9a:f9:01:a5:49:50:86:eb:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
        Validity
            Not Before: May 17 19:00:23 2024 GMT
            Not After : May 18 19:00:23 2024 GMT
        Subject: CN=e9bca586ba576f9cccf9489f16877167223b6bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:83:55:92:a6:a3:08:03:90:06:90:51:a0:1f:
                    80:59:b5:ba:52:6f:5b:eb:13:f7:e6:5e:76:00:79:
                    48:7a:da:10:70:a7:4a:d6:ec:83:2e:77:7c:cb:f9:
                    c1:55:aa:aa:93:08:62:68:ca:50:a1:34:5f:cb:33:
                    2d:d0:04:3b:52:ab:d1:e5:8a:cc:76:8c:40:d3:2e:
                    57:d2:52:55:d6:57:2e:25:3d:62:0e:75:79:60:7c:
                    84:04:33:90:4c:4d:cf:8b:c6:fb:38:c9:5e:3d:66:
                    65:13:1d:3c:51:e5:84:d5:73:c0:5d:10:d1:6d:19:
                    4b:73:3f:9f:a8:a7:2a:4b:08:87:d6:46:06:2c:3c:
                    c3:53:c3:53:93:24:18:3a:6a:7c:c4:e4:52:48:b6:
                    e2:23:bc:d7:ec:8d:69:d2:35:3a:2f:db:00:45:c5:
                    dc:e4:85:0b:52:aa:28:d3:78:7d:04:c6:91:87:6f:
                    d1:5d:56:1d:75:5a:b9:49:4f:40:e2:bb:a5:9b:cb:
                    a5:41:24:bb:24:18:eb:7e:8e:3c:e1:9c:6b:6e:cf:
                    d3:64:9a:88:02:fe:78:00:a3:21:79:d8:3a:61:c5:
                    2c:a7:65:1d:59:be:5a:dd:a7:a9:28:39:0b:8c:8d:
                    bf:2f:b0:13:e6:92:c4:83:db:cf:ca:ba:cb:ae:56:
                    b5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BC:A5:86:BA:57:6F:9C:CC:F9:48:9F:16:87:71:67:22:3B:6B:C3
            X509v3 Authority Key Identifier:
                keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c4:b0:2b:c7:1b:88:05:87:7b:b5:1a:2f:2a:41:fa:59:2a:
         aa:29:dc:3b:e1:82:cc:31:e1:56:e4:eb:c2:f1:c9:25:d3:29:
         a3:0f:49:5a:ca:90:df:a3:33:bf:0c:df:b5:01:6d:d4:5e:5b:
         32:ae:f0:a7:15:6f:c4:da:c6:db:0e:6f:1f:09:ea:d4:e5:7a:
         3a:47:cd:0c:8d:85:40:b9:93:ce:74:9a:25:3f:62:be:44:52:
         d5:58:9e:8b:57:1a:c7:58:c5:10:a2:78:b5:68:0a:bc:ae:87:
         ef:17:f5:d8:9c:cf:af:8f:32:41:ff:ae:c8:89:11:e7:28:37:
         77:0b:8d:29:63:d9:7c:99:14:81:e2:53:a9:7c:ae:12:a8:69:
         94:80:33:8d:4c:bd:a2:5c:85:c1:6f:fe:c9:51:7c:6d:c5:f7:
         66:e0:aa:83:3d:cf:da:34:ff:7b:cb:7a:7f:b1:96:38:46:f1:
         84:de:55:0a:3a:f1:93:7a:3a:4a:62:00:80:80:15:44:73:b7:
         df:79:e8:13:94:f4:dd:26:fd:96:85:fd:2f:d3:18:77:9d:ce:
         cb:79:23:26:aa:76:1e:62:1c:60:9f:b6:70:81:04:81:1f:18:
         1c:b3:6b:68:5e:3c:d0:1e:0a:a2:88:b3:03:f0:7b:fb:36:dd:
         41:6e:a2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----