Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
File:                     Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft (raw, json)
Hash identifier:          eYTjFfUDyFy7smfVNp8xzj6MWAhwnuANiPc8EdvX/Eg=
Subject key identifier:   3B:1A:F6:17:67:CF:88:E9:B1:02:73:D7:13:9D:65:50:5B:80:06:7D
Authority key identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
Certificate issuer:       /CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Certificate serial:       018F98057E0BF0E7F2F93243D2F466B86D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
Manifest number:          0AB2
Signing time:             Mon 20 May 2024 22:00:47 +0000
Manifest this update:     Mon 20 May 2024 22:00:47 +0000
Manifest next update:     Tue 21 May 2024 22:00:47 +0000
Files and hashes:         1: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl (hash: nP9nPOjlpY4B1ok84l0F+4YSLjI4564BDN7zuFWvlJA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 16:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:05:7e:0b:f0:e7:f2:f9:32:43:d2:f4:66:b8:6d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
        Validity
            Not Before: May 20 22:00:47 2024 GMT
            Not After : May 21 22:00:47 2024 GMT
        Subject: CN=3b1af61767cf88e9b10273d7139d65505b80067d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:23:eb:50:f0:fb:84:19:41:6f:b7:36:26:
                    43:44:e6:54:58:0d:c6:6c:7d:cb:31:e8:79:a7:9b:
                    20:06:16:44:07:dd:0d:2c:68:91:24:62:d0:c4:52:
                    5d:64:18:c0:fd:a6:87:bf:26:c0:6c:1b:0d:32:ad:
                    b4:fe:90:e4:38:b2:59:de:b0:07:38:9a:6d:85:cd:
                    d6:be:b4:46:6f:dc:56:f5:14:11:63:61:c2:7a:ca:
                    12:22:4e:81:99:ac:0e:5d:98:de:2c:39:e3:4e:d3:
                    5d:18:63:c1:55:41:09:6f:4e:53:95:e6:16:fb:c5:
                    9f:b0:6c:b1:81:46:77:8b:12:df:25:ac:a2:db:a7:
                    13:89:3d:3d:54:f1:88:e3:45:75:5c:fa:8b:56:fa:
                    a0:ee:58:4b:7b:74:94:72:c5:63:0e:4d:0c:7a:b3:
                    6d:6a:05:11:50:cc:c8:9c:4c:94:a8:c1:de:38:21:
                    11:67:5c:e1:0e:64:24:1c:81:50:ad:d1:26:91:8e:
                    47:0c:05:3d:f8:84:af:f9:46:8c:ac:19:fb:ab:35:
                    87:4e:c5:d5:08:77:5d:2b:16:92:6c:9e:f8:cd:1d:
                    c5:6a:55:4b:c9:84:d9:53:12:a3:4f:b7:58:93:3c:
                    2f:6a:6b:b3:d9:6d:02:e5:9c:e2:2c:69:b6:99:4d:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1A:F6:17:67:CF:88:E9:B1:02:73:D7:13:9D:65:50:5B:80:06:7D
            X509v3 Authority Key Identifier:
                keyid:25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:78:f3:e1:08:b6:c1:74:64:2f:86:fc:00:8c:c9:25:7f:ed:
         0a:14:5f:93:70:89:85:1a:0b:d1:23:d5:ce:5d:18:5d:76:74:
         1a:f2:04:49:22:99:c9:74:1c:7b:4a:3a:b8:90:08:a0:7e:a0:
         6e:17:e1:4c:77:36:5f:de:3c:eb:82:ea:2f:7c:a7:39:06:c6:
         bb:63:7d:ea:e5:8a:5e:83:a8:f9:23:5f:ae:d1:68:06:88:ea:
         c8:e9:2a:c8:06:1c:12:7a:b0:00:4e:36:37:f3:71:94:04:cf:
         82:13:4d:30:c8:84:e1:79:cd:0c:a6:84:2f:ad:25:1d:c0:db:
         92:ab:ce:c2:a4:d0:73:f8:ff:82:f5:0e:04:03:1a:b6:a0:41:
         0d:43:93:8a:e8:0d:e1:62:a6:0f:22:1f:03:cc:61:15:d6:52:
         89:3e:42:b7:a5:de:80:5c:6c:db:06:00:63:67:bf:8a:86:2e:
         bd:ca:58:ca:d2:45:6f:62:43:a3:7a:13:a6:27:70:73:c6:8f:
         2f:4b:1b:b9:37:d7:28:69:ba:30:57:f8:bc:70:02:c9:cb:79:
         82:89:b7:f1:24:01:92:10:d1:00:1d:6f:e2:b8:e3:e9:84:7c:
         45:30:1a:6b:91:69:b8:ec:e6:d4:ec:34:16:cc:cd:14:51:8a:
         d8:c6:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----