Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
File:                     8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft (raw, json)
Hash identifier:          +tU5pwn+ZGLUjfEiL67S4R5OeSpsT+tcQea6YyOKULQ=
Subject key identifier:   85:D6:38:EC:82:18:2B:45:40:E8:FD:2A:F3:C4:ED:BC:56:1C:1C:E2
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Certificate issuer:       /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial:       018F9C8727D1DBEDF63845ADD98C9BC6BFAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
Manifest number:          0217
Signing time:             Tue 21 May 2024 19:00:54 +0000
Manifest this update:     Tue 21 May 2024 19:00:54 +0000
Manifest next update:     Wed 22 May 2024 19:00:54 +0000
Files and hashes:         1: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl (hash: 099DvAEzzsYgaGF+Lu4aQEpdAYgl3JKpmXFT1XVhLLE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9c:87:27:d1:db:ed:f6:38:45:ad:d9:8c:9b:c6:bf:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
        Validity
            Not Before: May 21 19:00:54 2024 GMT
            Not After : May 22 19:00:54 2024 GMT
        Subject: CN=85d638ec82182b4540e8fd2af3c4edbc561c1ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:31:a0:55:da:6d:b1:6f:a3:4e:ac:65:29:
                    7c:21:98:24:de:90:2b:19:fa:1a:41:cf:ce:c8:99:
                    95:e4:f7:21:4b:77:90:86:1b:63:d4:75:5f:6e:35:
                    0f:dd:ad:7e:5d:33:ca:2f:b8:40:db:93:9b:61:22:
                    7e:0a:20:71:61:aa:61:f0:21:6b:98:0b:a1:e9:46:
                    57:d6:7d:6e:c0:68:28:70:50:9e:1b:18:81:e2:ae:
                    c5:0d:8e:70:1b:e4:9d:d2:7e:a1:da:33:b8:99:f3:
                    bc:ef:ef:90:b2:59:ea:ea:b6:8d:18:d9:f5:df:44:
                    75:f1:5c:d7:9e:02:cf:6c:e5:79:eb:1f:b0:03:8f:
                    be:0e:40:5c:60:89:b8:a0:ad:f4:c8:57:74:c9:6e:
                    3b:1c:aa:6f:d8:f3:44:15:11:06:b8:83:fb:e5:5e:
                    15:51:4e:78:15:ee:1a:6e:2c:e5:e0:d2:50:9d:f8:
                    c3:86:7c:8a:df:8b:45:ea:38:e8:48:e2:94:f8:76:
                    1c:79:f3:e8:f9:65:d1:60:f4:5b:64:8d:71:cc:d9:
                    e5:b8:1b:28:9c:c4:a7:85:8d:5d:28:4f:3c:3b:7a:
                    ae:6c:31:ca:d6:46:3d:8c:10:aa:5c:b2:ea:b0:7f:
                    99:36:6d:25:7c:56:f1:66:21:fa:9f:ee:01:8a:57:
                    1a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D6:38:EC:82:18:2B:45:40:E8:FD:2A:F3:C4:ED:BC:56:1C:1C:E2
            X509v3 Authority Key Identifier:
                keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:af:b4:74:d4:65:bd:35:51:25:7f:cf:7d:47:11:11:a4:ca:
         d1:bf:a9:32:ed:ad:43:e2:1c:85:b7:7a:69:90:67:bb:e3:5c:
         5f:fa:14:33:ed:f5:73:0b:14:37:97:01:b7:df:fc:b2:5b:59:
         43:c9:10:3a:fa:fc:c7:2c:fe:52:3a:8e:a6:e5:cc:51:19:09:
         e3:12:d0:22:43:1f:3f:a6:0f:c0:05:29:bc:32:25:c3:04:c1:
         0c:38:df:aa:f9:79:2d:bb:96:c6:c2:de:25:66:0b:4c:b3:e6:
         26:5d:8f:e4:56:da:db:b9:60:48:25:47:b3:fb:54:d7:da:8f:
         7e:9f:02:3f:11:2d:33:99:ff:1a:22:c7:94:8d:15:26:3a:f2:
         58:ef:78:44:32:0e:60:1c:95:de:79:33:15:f7:80:3d:00:11:
         f9:86:c1:57:e0:68:bd:d7:ff:5e:c7:74:e3:42:e6:98:14:b1:
         66:88:81:af:27:87:bc:d4:24:38:18:7b:0d:b3:ca:9d:e2:5f:
         75:96:17:9b:87:8a:88:43:1e:68:a0:f8:ad:a6:41:fd:52:ca:
         11:6d:dd:4b:d2:79:fd:c9:2e:7d:f6:d8:bc:40:a4:c4:99:9b:
         d1:c4:82:16:5f:a8:b6:b6:18:43:8a:51:f2:ee:61:01:54:29:
         90:bf:54:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----