Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
File:                     w_W0TiSnGM-yONFLvHVe8VLylcE.mft (raw, json)
Hash identifier:          7dnKsyXj3+UcXJKQnkMR30aoEEJ4eWvoBb4BI2YG4JU=
Subject key identifier:   B9:EF:66:E6:8F:97:B7:66:FB:F7:77:59:94:99:20:BD:25:1B:E6:FF
Authority key identifier: C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1
Certificate issuer:       /CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
Certificate serial:       018F87B66F2CF12DC43525BD4272328FD49E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
Manifest number:          0752
Signing time:             Fri 17 May 2024 18:00:31 +0000
Manifest this update:     Fri 17 May 2024 18:00:31 +0000
Manifest next update:     Sat 18 May 2024 18:00:31 +0000
Files and hashes:         1: w_W0TiSnGM-yONFLvHVe8VLylcE.crl (hash: OQctnmhh+IV+dfHgZsqMLQwpP9O1S+y+upMSsXqZJgc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:6f:2c:f1:2d:c4:35:25:bd:42:72:32:8f:d4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
        Validity
            Not Before: May 17 18:00:31 2024 GMT
            Not After : May 18 18:00:31 2024 GMT
        Subject: CN=b9ef66e68f97b766fbf77759949920bd251be6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5b:dd:26:6e:27:89:5e:e6:53:dc:dc:8d:37:
                    10:e0:28:2a:9c:72:00:2d:8c:4f:c5:24:ec:cf:72:
                    c3:da:aa:39:2c:62:38:b9:df:fa:26:2f:fc:d9:95:
                    0a:dd:9c:91:f5:ac:13:60:fa:92:a2:3a:9f:c6:86:
                    bf:b4:be:2a:37:4f:bd:92:3a:30:80:a9:a2:1b:58:
                    73:f6:eb:ad:e4:b9:4c:8b:82:b0:32:71:5d:b3:86:
                    b0:99:b0:26:60:84:ac:ab:d6:fd:2e:5f:2f:80:33:
                    2c:58:da:11:d9:73:7d:49:93:90:ad:af:72:24:6f:
                    b6:bf:c6:1a:ed:c1:ca:40:76:ee:c6:06:b0:ce:aa:
                    41:d6:e7:4c:e5:4f:61:6b:cf:1a:ee:83:6a:7d:35:
                    7d:cc:7a:96:dc:80:16:85:7e:a6:fb:93:13:91:99:
                    0a:b1:b6:55:44:68:f0:56:89:12:0d:5d:dc:4c:e2:
                    33:d3:6e:0a:6c:2c:a3:8d:6a:4b:a1:11:26:e5:73:
                    87:fb:32:44:e9:74:de:be:07:d2:91:13:b1:56:96:
                    c9:9e:d6:f0:77:19:06:b2:e6:43:ff:7c:40:9b:f7:
                    a2:38:cb:e8:4a:e2:95:e0:5d:47:d8:06:58:63:c7:
                    60:1c:ef:82:77:87:07:99:13:98:60:98:3a:5d:89:
                    6b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EF:66:E6:8F:97:B7:66:FB:F7:77:59:94:99:20:BD:25:1B:E6:FF
            X509v3 Authority Key Identifier:
                keyid:C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:06:ee:ab:74:f6:0a:0d:de:a4:8f:c2:56:19:10:95:34:13:
         f3:96:03:38:36:ca:b3:8b:96:d2:45:2d:21:4c:e1:cb:32:0d:
         5c:6b:d6:06:b0:f4:9c:4e:41:31:13:e4:5b:75:c9:ab:17:49:
         dc:db:51:e3:9e:6d:b2:d6:5b:ab:1f:c0:60:4e:4c:0e:3f:54:
         5d:73:44:95:7d:94:f5:3c:ec:09:1a:98:fa:be:60:8e:f9:d3:
         74:65:26:da:8c:e8:7e:2b:a4:ce:39:98:b7:2f:8d:3a:e4:38:
         44:ca:ec:31:e4:07:3d:1e:26:1f:f5:7c:bb:c1:35:bf:b1:2a:
         e2:97:e0:a8:85:dd:13:b4:63:80:b1:9b:8c:eb:c2:f3:02:01:
         d4:07:e2:1f:f7:a1:a1:33:a8:f9:a1:0c:42:4c:fd:76:54:20:
         3b:f2:84:be:69:96:d4:83:a2:cc:0c:0f:7e:12:e2:0e:f0:10:
         7f:81:c1:cb:f0:b6:2c:68:df:84:f4:b3:cb:c4:21:df:43:b5:
         98:a7:7d:d9:15:ca:5b:1e:00:4f:b5:64:af:3f:51:7b:2f:90:
         44:97:84:77:ee:e3:06:cd:46:6a:c6:95:98:f7:0b:b0:a2:ed:
         6f:fb:2c:91:96:00:fc:17:9f:3e:98:e3:b7:b0:ac:42:4c:21:
         e5:73:2d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----