Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
File:                     VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft (raw, json)
Hash identifier:          a66hwc7ylcuEVvtVZiMKy7QAWF0p/+kVEGYekX1XU5s=
Subject key identifier:   6E:95:B9:51:DC:AF:D2:DC:8C:6C:18:AD:C9:5B:F3:AF:3E:D4:0F:E1
Authority key identifier: 54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
Certificate issuer:       /CN=54ba45608c008224ff23268abe03e04cd318009c
Certificate serial:       0191FA10600741AA2995667A23A6547A857E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
Manifest number:          0118
Signing time:             Mon 16 Sep 2024 09:01:02 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:02 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:02 +0000
Files and hashes:         1: VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl (hash: tUzKAy6wTLXE9EsNnDHxdqW6uvnVMcf++2Hio9tlVf8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:60:07:41:aa:29:95:66:7a:23:a6:54:7a:85:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ba45608c008224ff23268abe03e04cd318009c
        Validity
            Not Before: Sep 16 09:01:02 2024 GMT
            Not After : Sep 17 09:01:02 2024 GMT
        Subject: CN=6e95b951dcafd2dc8c6c18adc95bf3af3ed40fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:b6:cc:41:6c:d3:51:94:e6:65:79:7a:31:
                    22:27:ca:95:5e:c6:46:7d:ac:5a:9c:75:46:89:98:
                    d6:e3:80:a2:a3:a5:81:7f:30:a3:30:cf:05:78:5d:
                    05:78:c3:d7:ef:47:a5:7f:3d:e3:0a:c3:2d:d7:c1:
                    9e:d9:a8:5d:41:32:05:35:32:b1:d2:fb:10:87:3d:
                    b4:6c:df:2f:ae:1c:d7:bc:d9:25:23:6d:a6:7c:30:
                    b4:83:75:ee:04:8f:6d:5d:98:33:9a:ad:d8:99:a7:
                    e0:05:3a:a6:f1:b0:4b:bd:b1:b6:70:bf:01:3f:e7:
                    a3:89:2d:c2:87:71:1f:25:2f:89:d2:6b:04:da:a4:
                    2a:04:97:77:be:8b:e3:ac:2d:9d:80:3e:37:98:7c:
                    87:11:e5:a1:af:81:75:a7:88:31:d6:fa:02:f8:1f:
                    07:9f:45:ed:2d:b7:fe:f0:21:00:1d:5e:83:c9:14:
                    a1:bf:fc:99:8b:02:c6:24:bf:f0:5c:50:d3:07:b1:
                    99:2a:73:85:63:83:63:cd:16:98:7f:4f:46:81:7a:
                    2b:98:f2:76:38:66:1b:5b:b4:12:6f:9a:ff:d3:1c:
                    be:0b:15:11:ea:f8:07:c0:56:2c:d7:82:f5:83:41:
                    24:90:61:b8:24:8f:b2:86:f1:14:7a:6b:d1:bd:2e:
                    c6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:95:B9:51:DC:AF:D2:DC:8C:6C:18:AD:C9:5B:F3:AF:3E:D4:0F:E1
            X509v3 Authority Key Identifier:
                keyid:54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:15:8e:cc:f0:3a:62:f7:fc:65:f1:c1:9f:0d:b9:1e:47:ea:
         d9:7f:ed:fe:b7:78:36:92:86:f6:c7:94:6d:1c:4c:ac:3b:cf:
         da:c4:1e:52:f9:8a:5b:c3:b9:5f:36:bb:ed:82:a5:5e:96:13:
         19:74:c5:97:c4:08:28:8c:48:11:7e:98:9f:35:d9:f6:ec:52:
         88:d2:9e:16:8e:73:96:0d:9e:44:be:db:9d:f3:dc:9c:fe:44:
         96:ca:9d:ef:0c:5f:eb:cf:69:cb:59:73:02:99:27:23:f0:bb:
         1d:c3:f7:24:c9:33:83:98:55:fb:70:e7:64:3c:93:aa:07:a0:
         12:5a:80:70:e4:07:4c:7d:99:1f:f6:8b:b0:1a:35:57:87:5d:
         d2:b6:94:d9:49:dd:3c:06:b1:b0:f0:be:ca:c5:47:07:27:26:
         82:8f:5f:32:bb:bd:9c:da:d1:55:e2:f6:c3:d3:5c:58:1f:db:
         80:db:d8:c3:b1:da:82:1c:f2:94:fe:48:ae:d2:c4:43:af:3d:
         c2:a8:c0:7a:8b:35:9c:ef:38:9a:5e:48:42:fc:0d:ec:6a:d5:
         3f:a7:2c:1c:fa:7c:1b:a4:ad:b2:cd:37:85:b9:3a:7b:cb:1c:
         ee:93:5e:40:d0:0b:ea:72:d0:8b:29:38:04:07:ef:d7:f0:7d:
         4a:5d:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----