Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
File:                     I8cVVBujctWQ1odn14zmmEABMFk.mft (raw, json)
Hash identifier:          XNcLTYB9KNOyGsU+i8xsQyAybQMfbYkH3pQesfj4Wq4=
Subject key identifier:   20:08:9E:C2:51:8E:88:F7:50:6C:7A:F9:96:CA:11:F5:E6:B1:60:D0
Authority key identifier: 23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
Certificate issuer:       /CN=23c715541ba372d590d68767d78ce69840013059
Certificate serial:       018F20F1198353438B574CBF01C3F75F59A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
Manifest number:          113F
Signing time:             Sat 27 Apr 2024 19:03:42 +0000
Manifest this update:     Sat 27 Apr 2024 19:03:42 +0000
Manifest next update:     Sun 28 Apr 2024 19:03:42 +0000
Files and hashes:         1: I8cVVBujctWQ1odn14zmmEABMFk.crl (hash: joVJA5aqOHDhNeVog2xgF5M8GqkN3lXHa1OPZ4KVv5k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:f1:19:83:53:43:8b:57:4c:bf:01:c3:f7:5f:59:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23c715541ba372d590d68767d78ce69840013059
        Validity
            Not Before: Apr 27 19:03:42 2024 GMT
            Not After : Apr 28 19:03:42 2024 GMT
        Subject: CN=20089ec2518e88f7506c7af996ca11f5e6b160d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:87:55:61:fe:ee:bd:50:b2:7f:d9:79:5a:
                    4d:5d:f6:33:e6:90:91:4f:9b:ba:4b:61:86:b0:10:
                    65:cc:d1:ad:25:6f:e2:ce:a3:22:17:f8:d3:0b:13:
                    b6:cd:7d:19:09:c5:91:a7:e7:5f:43:00:5a:39:90:
                    c1:58:2b:1e:f2:b5:0c:af:a4:f0:cd:2b:93:1b:b3:
                    64:7e:f5:64:de:b2:e2:39:fa:33:28:ea:df:32:41:
                    13:6f:25:e9:f8:fc:fa:9d:b0:8e:bd:a4:48:8c:f1:
                    3f:ad:76:ec:bb:56:e4:01:87:9d:73:7f:6a:44:6a:
                    32:95:ba:d7:f3:8b:33:ee:b1:55:4a:fc:90:0c:11:
                    b7:87:3d:96:ce:b5:25:12:e8:32:f6:ed:e6:d9:fd:
                    0e:69:34:85:bf:70:5b:5c:4c:a4:01:fa:89:eb:a3:
                    72:76:c3:bc:d7:a0:f8:49:c9:2a:33:78:f6:92:ab:
                    1b:ac:d0:d6:1e:12:97:ed:8d:95:b4:a4:4a:55:1f:
                    55:6a:36:77:82:a8:7a:2d:f2:b7:de:4d:6c:86:a7:
                    83:8c:f4:68:ad:35:d0:81:ad:d4:b1:5e:c6:05:96:
                    0d:eb:f9:d1:80:ac:e2:38:ad:f7:5a:d4:8e:ee:63:
                    c4:fb:83:6f:f8:7a:b9:33:3b:ab:2a:c0:6d:7d:76:
                    a0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:08:9E:C2:51:8E:88:F7:50:6C:7A:F9:96:CA:11:F5:E6:B1:60:D0
            X509v3 Authority Key Identifier:
                keyid:23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:25:b9:ca:47:d6:af:d2:f0:b8:36:72:26:a9:bf:95:0f:ce:
         5b:32:0f:4d:39:2e:63:1f:f7:d7:a2:68:b6:b9:39:2a:40:ec:
         d4:17:4b:44:ad:c6:78:34:60:0c:0a:1c:44:cd:7a:10:f1:e2:
         ea:a7:8e:22:45:0f:c2:10:d1:dd:cf:2a:04:0a:2e:b1:fd:da:
         2a:1f:f4:a0:4d:2c:77:d3:a3:8a:7b:57:85:dc:8f:b4:77:4d:
         cc:7f:f4:b6:b3:4e:50:18:e9:50:ae:23:9c:b1:9d:c4:17:0f:
         2d:ea:30:ec:59:72:5f:0d:19:17:57:5d:1f:4f:35:40:b6:e4:
         0a:6d:fe:fc:43:ba:f1:50:1c:f6:26:ab:12:75:64:5d:96:15:
         2c:59:44:b3:1f:6b:bc:52:a2:61:db:d8:96:42:e4:c9:be:ec:
         7f:6b:ab:df:69:ee:00:57:6f:39:9f:c5:d2:4d:22:d7:eb:0b:
         8c:5a:a4:10:90:04:db:72:c8:16:64:de:da:6f:ed:2f:f7:2a:
         40:89:0f:6d:dd:0d:05:b1:28:35:e6:84:6b:ba:db:d7:48:c8:
         04:01:08:05:9e:78:46:74:34:a0:1f:9e:52:43:02:2e:b7:e3:
         e1:05:37:bf:ea:dc:81:b4:1c:ec:8b:85:c4:db:98:7b:cb:7f:
         59:c4:3d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----