Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.mft
File:                     0elU3oMurd0srwpAxtM-8RiJlLw.mft (raw, json)
Hash identifier:          /4LI8MLg4S6mXxCQs+YFjZUO0AFf/LhsDx+MzRR7u2M=
Subject key identifier:   29:C5:3B:7B:D5:5E:22:08:D4:4C:4F:2F:B1:E0:17:B8:47:61:D2:64
Authority key identifier: D1:E9:54:DE:83:2E:AD:DD:2C:AF:0A:40:C6:D3:3E:F1:18:89:94:BC
Certificate issuer:       /CN=d1e954de832eaddd2caf0a40c6d33ef1188994bc
Certificate serial:       018F8749824F20E3D1877DF5F98CB5F52B99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0elU3oMurd0srwpAxtM-8RiJlLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.mft
Manifest number:          026F
Signing time:             Fri 17 May 2024 16:01:32 +0000
Manifest this update:     Fri 17 May 2024 16:01:32 +0000
Manifest next update:     Sat 18 May 2024 16:01:32 +0000
Files and hashes:         1: 0elU3oMurd0srwpAxtM-8RiJlLw.crl (hash: UpbBnBn7tXa7O4y/IULZ/8Wp4f+wP7Vkc3zdiUe4EOE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0elU3oMurd0srwpAxtM-8RiJlLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:82:4f:20:e3:d1:87:7d:f5:f9:8c:b5:f5:2b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1e954de832eaddd2caf0a40c6d33ef1188994bc
        Validity
            Not Before: May 17 16:01:32 2024 GMT
            Not After : May 18 16:01:32 2024 GMT
        Subject: CN=29c53b7bd55e2208d44c4f2fb1e017b84761d264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:da:96:24:bb:51:13:fd:69:d8:26:bb:e6:
                    57:3c:79:48:b4:c4:d3:1c:28:b2:be:68:9e:18:84:
                    f9:29:c3:72:5f:a2:c1:22:07:57:c3:12:e1:09:e6:
                    a9:b4:1f:20:a2:6d:71:ee:91:53:77:0b:17:65:a5:
                    17:55:cd:92:15:a9:ac:88:a4:25:c9:ad:3a:9d:2f:
                    db:d6:25:ac:dc:62:d9:2f:7a:23:68:c7:24:6d:bf:
                    ef:aa:60:f5:a9:7b:6f:73:15:cf:fb:9a:65:37:f8:
                    cd:3a:35:0e:50:79:5a:d7:70:7f:c8:4a:26:c3:1e:
                    66:02:39:1e:8e:b3:c4:37:58:0a:32:77:de:9b:20:
                    93:28:18:ac:01:7b:1a:4d:39:d1:29:25:58:e6:b0:
                    dc:d3:49:d3:ff:f1:82:f1:ad:14:68:de:1d:6a:7a:
                    67:05:f1:70:69:f0:b0:aa:55:b7:b4:f3:56:50:28:
                    51:44:8b:02:9a:2f:d3:86:57:15:7b:ca:a4:84:d4:
                    1d:9f:67:24:32:06:d0:39:b7:9c:c6:e2:56:ba:6f:
                    d4:ab:25:27:e5:ff:e2:c6:6d:81:0d:cc:5f:ed:e1:
                    90:c1:2b:1f:67:0e:17:0e:dd:cc:34:4b:86:19:f4:
                    82:9a:fd:2e:1b:e2:91:4c:c5:90:44:00:1f:e9:47:
                    4b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C5:3B:7B:D5:5E:22:08:D4:4C:4F:2F:B1:E0:17:B8:47:61:D2:64
            X509v3 Authority Key Identifier:
                keyid:D1:E9:54:DE:83:2E:AD:DD:2C:AF:0A:40:C6:D3:3E:F1:18:89:94:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elU3oMurd0srwpAxtM-8RiJlLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f9:9c:3e:78:2b:bc:d8:65:a4:31:23:38:76:9b:7a:83:83:
         d0:0b:0d:46:9b:e2:80:38:9d:97:d1:bd:a6:ce:d1:6d:a3:2a:
         da:0a:5c:b3:da:35:94:d7:72:1e:bf:4b:2b:78:ec:3a:11:4f:
         17:21:3f:d5:e4:d5:4e:48:2e:33:a0:7a:b9:f6:bc:5c:f7:d1:
         2b:f7:4a:18:60:cf:ee:73:83:7a:8b:5b:60:eb:ea:1a:6a:61:
         ff:62:b9:0c:d8:94:33:be:10:87:15:2c:61:fe:42:c6:f6:3a:
         6d:e7:34:5e:14:a5:e1:64:05:7f:58:49:de:8c:b6:e6:67:95:
         81:b1:c9:d2:96:01:33:b9:4d:64:aa:e3:58:a9:67:eb:bc:14:
         c8:cc:be:60:f8:e4:6d:89:59:e8:63:e0:9b:bd:fb:63:90:88:
         cb:b5:31:e2:24:30:c4:97:65:c7:17:c1:e6:c4:7a:a9:09:10:
         53:9d:23:d4:39:b4:ed:61:65:bc:5f:45:de:6a:02:a0:7b:b4:
         fd:84:13:81:63:98:06:04:85:29:4b:59:ed:4a:2c:fb:b0:ea:
         53:d6:41:de:5a:33:c9:30:ae:ee:54:0e:fb:ee:b3:8f:1c:ca:
         b0:54:22:4d:5b:48:53:28:53:de:25:59:b7:21:3f:85:47:f3:
         4d:5a:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----