Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
File:                     SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft (raw, json)
Hash identifier:          SefV36Yn7szALWPqFX7fsVDLWLky7P3brHddA9BTwdo=
Subject key identifier:   99:5E:9E:7F:55:EC:0A:61:0A:22:54:80:2B:D4:61:73:B6:3E:55:00
Authority key identifier: 4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
Certificate issuer:       /CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Certificate serial:       018F87ED740D4F0EC6306841FF81FAC0F867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
Manifest number:          0A00
Signing time:             Fri 17 May 2024 19:00:36 +0000
Manifest this update:     Fri 17 May 2024 19:00:36 +0000
Manifest next update:     Sat 18 May 2024 19:00:36 +0000
Files and hashes:         1: SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl (hash: +/x9g6LfcWIYhZT6Bb8Aff/PT+jYz+VsXk2DkP/eFzQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:74:0d:4f:0e:c6:30:68:41:ff:81:fa:c0:f8:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
        Validity
            Not Before: May 17 19:00:36 2024 GMT
            Not After : May 18 19:00:36 2024 GMT
        Subject: CN=995e9e7f55ec0a610a2254802bd46173b63e5500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a2:a9:74:6b:fe:25:8e:20:0f:c9:dc:a8:d4:
                    c6:8b:0e:f3:7a:36:71:86:6e:a1:e6:29:4d:3a:f1:
                    ea:9e:ba:dc:e8:64:5b:7a:d0:82:f6:c3:d1:84:27:
                    83:1a:ed:00:ec:4d:01:79:d1:66:28:c5:7e:ba:f8:
                    eb:81:dd:1e:6a:bb:59:6c:03:5d:a1:ef:01:f3:4f:
                    0f:ad:fe:fa:e8:a3:16:31:20:5a:ff:b0:15:48:43:
                    27:04:42:e9:09:bf:3b:d7:28:a7:2b:06:e6:ef:23:
                    29:80:34:cd:cf:48:13:dd:27:e4:bb:e3:3d:ad:22:
                    11:25:2b:c4:ea:65:f2:55:91:c9:bd:ea:08:b2:96:
                    90:42:62:9c:11:bc:d6:7b:20:09:4b:b1:4a:b0:23:
                    33:04:1b:fb:75:51:58:da:3c:89:f3:f1:17:34:31:
                    d8:a2:07:3c:45:6a:b7:ce:e5:18:0b:02:f2:91:e0:
                    24:2a:c2:4a:48:e4:76:ae:92:b7:f0:94:e2:48:3e:
                    bc:c8:d5:23:58:32:0d:36:74:8b:68:36:fa:7a:2d:
                    2a:58:fe:0f:77:54:5a:f5:56:62:06:18:34:3a:c7:
                    b5:63:2e:87:5a:fd:cc:e5:34:13:e9:b4:c2:9e:f7:
                    9b:08:e9:84:91:68:ba:e3:b8:00:01:00:68:4d:54:
                    34:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5E:9E:7F:55:EC:0A:61:0A:22:54:80:2B:D4:61:73:B6:3E:55:00
            X509v3 Authority Key Identifier:
                keyid:4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:19:9b:72:ee:93:48:7f:a7:03:2c:b2:7a:a8:75:69:9f:79:
         5a:40:15:3c:8d:ac:7c:1d:e2:b5:2a:4c:0d:d7:c0:73:5e:e9:
         a3:50:ff:8e:53:d2:c2:c6:8b:28:d2:18:64:f5:15:40:df:39:
         10:e5:15:3b:8c:4e:33:84:f9:92:83:9a:35:95:60:3a:8c:05:
         98:4a:68:89:5a:04:0f:9f:62:b8:93:be:2c:4e:2a:40:95:7a:
         45:08:b8:ba:d9:e9:ec:33:d5:1b:e3:e0:9b:a1:07:89:ba:21:
         f8:11:c7:8f:9c:94:7b:af:96:c2:5d:1a:40:8c:4e:fd:72:ba:
         06:cb:46:2f:ee:87:cd:46:d5:57:ca:98:cc:c1:47:55:5e:e3:
         f6:ba:cb:7a:ae:8d:31:64:f2:8c:9b:8d:51:66:bf:b4:f7:d2:
         f5:08:37:d3:e5:6b:85:23:18:56:b7:4d:44:7e:f3:16:c8:83:
         cb:93:64:1d:75:ff:1d:de:31:3c:fc:60:24:60:38:be:05:78:
         38:89:bd:e8:09:3f:79:da:aa:62:a9:0f:a8:1c:30:54:19:45:
         c4:49:0b:92:6f:98:ba:ca:bf:de:2c:0e:58:f1:43:f2:f8:5e:
         ff:95:d8:29:b0:28:b9:f6:1b:2a:99:c1:0a:40:e2:29:8a:77:
         f3:f3:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----