Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
File:                     t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft (raw, json)
Hash identifier:          mMQ2Hy4VzyjhAhNWKxKdHO6Y534DtBMFIksv0XnGHZ0=
Subject key identifier:   41:E8:7A:76:F4:7E:69:5A:D6:54:6D:43:DE:CE:7E:9E:5A:77:C5:0F
Authority key identifier: B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41
Certificate issuer:       /CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
Certificate serial:       018F87B6A91C7CEE192EF6F683A9CF8F0AA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
Manifest number:          080D
Signing time:             Fri 17 May 2024 18:00:45 +0000
Manifest this update:     Fri 17 May 2024 18:00:45 +0000
Manifest next update:     Sat 18 May 2024 18:00:45 +0000
Files and hashes:         1: t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl (hash: lwETp03uNs4GE6MeWiI09QOCrKX7ByxuKtPpRsbSAiw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:a9:1c:7c:ee:19:2e:f6:f6:83:a9:cf:8f:0a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
        Validity
            Not Before: May 17 18:00:45 2024 GMT
            Not After : May 18 18:00:45 2024 GMT
        Subject: CN=41e87a76f47e695ad6546d43dece7e9e5a77c50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:98:ba:0f:0e:a2:9b:2d:fc:6f:17:64:3d:
                    68:c1:8b:5c:1e:83:51:e4:b7:03:38:7a:15:87:ce:
                    77:94:c7:c6:aa:26:8f:6b:81:e2:89:e7:47:97:fe:
                    53:be:d0:0c:5d:52:b2:30:09:d3:49:2d:74:a2:4a:
                    5b:4a:e4:14:cc:37:b3:c1:65:75:22:78:7a:d8:7a:
                    81:57:56:b9:1c:04:36:d7:51:29:7e:d6:4a:ff:86:
                    c9:fe:79:29:9f:c5:91:93:9a:e7:0d:d2:28:c4:fb:
                    81:da:4c:a4:77:72:8f:99:98:c2:f4:9a:66:21:fc:
                    97:38:fd:78:3f:a9:64:35:46:43:ea:2e:1d:82:54:
                    35:6b:dc:1d:44:d4:6e:a4:4c:91:3a:b1:e6:3f:8c:
                    c1:ac:c6:ac:ff:ea:8a:e7:93:2d:f8:19:10:ff:41:
                    6d:30:5c:ba:47:ba:a8:8d:28:0d:07:c7:0c:f6:ed:
                    84:0b:c3:33:7b:dc:45:67:49:c3:5a:5d:58:f5:34:
                    86:78:50:61:86:a0:d8:80:dd:7b:58:5e:14:43:ec:
                    f5:2f:72:05:3c:b2:d9:b4:73:03:5c:73:99:a6:eb:
                    43:99:fc:e7:39:6c:01:c5:27:fc:b8:34:18:4b:1e:
                    79:2d:d1:33:de:02:c1:f9:6b:fb:53:be:33:64:23:
                    50:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E8:7A:76:F4:7E:69:5A:D6:54:6D:43:DE:CE:7E:9E:5A:77:C5:0F
            X509v3 Authority Key Identifier:
                keyid:B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:2b:dc:ea:e3:f0:ad:c9:75:e3:4c:ca:67:f6:13:cd:4f:3f:
         43:85:ad:95:82:d6:53:21:8e:72:ad:cb:d9:42:c1:01:a1:94:
         52:40:6d:b8:7b:ee:07:43:12:79:ae:c1:7a:92:9f:06:94:ae:
         d9:3c:0e:cf:a2:50:40:8c:63:6f:57:fd:3b:37:72:69:34:13:
         0c:95:57:65:67:4c:75:34:c3:4e:f9:1a:3c:6f:18:15:6d:29:
         34:1c:d0:48:e4:4d:c0:df:36:df:15:2f:e1:0e:23:81:60:95:
         eb:f3:91:b6:48:02:58:4f:0c:5e:94:6d:69:c3:27:17:21:73:
         9c:47:12:38:f3:86:ef:9d:60:28:5b:a1:28:c1:4c:da:99:1c:
         c1:cd:ed:b5:4b:d0:3f:97:5b:27:e6:f7:d7:69:32:4c:2f:1d:
         32:cc:09:29:8a:cf:cb:f7:d5:6d:7d:05:8c:e9:6e:cd:39:39:
         88:17:65:53:c8:f1:64:1d:93:83:e3:c1:0d:27:10:78:3e:fe:
         99:34:a3:12:0e:36:75:26:00:0e:eb:4f:eb:01:97:0c:91:78:
         be:b4:17:cf:81:5b:18:61:d2:83:ed:dd:a6:a7:96:c1:97:f3:
         a8:a2:f7:0c:4d:f1:10:1d:bb:51:a5:56:b8:d9:93:18:e2:f4:
         71:e8:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----