Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File:                     _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier:          QeDJKn8HzURVar3chyxMq2zWTSHG59zNQbEsqERSwEY=
Subject key identifier:   F2:80:BE:68:B4:58:27:8E:36:BD:F7:E2:17:A7:0B:D4:18:23:02:FB
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer:       /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial:       018F8823F21C13FD9C2B71C18687200F7151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number:          0493
Signing time:             Fri 17 May 2024 20:00:07 +0000
Manifest this update:     Fri 17 May 2024 20:00:07 +0000
Manifest next update:     Sat 18 May 2024 20:00:07 +0000
Files and hashes:         1: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: KX2E9z01CrKHWTyUifFN2blk8wxE5t1PoRDfRUe0Ff4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f2:1c:13:fd:9c:2b:71:c1:86:87:20:0f:71:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
        Validity
            Not Before: May 17 20:00:07 2024 GMT
            Not After : May 18 20:00:07 2024 GMT
        Subject: CN=f280be68b458278e36bdf7e217a70bd4182302fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:76:59:9d:df:3d:27:e6:4b:10:10:74:ea:
                    d4:3b:62:4e:48:22:ae:e4:a2:e9:63:6f:bb:2b:ec:
                    1f:c5:51:72:bc:b9:a9:90:b0:9a:56:31:81:7e:21:
                    57:b1:24:1e:30:a3:14:71:82:3d:a5:eb:97:3d:b0:
                    32:11:9f:63:e4:d4:7d:ec:55:af:ab:71:f8:d6:35:
                    ba:35:c1:a0:ae:77:90:d3:43:e3:4b:12:02:e7:e6:
                    86:03:48:57:19:f1:90:f9:ee:7e:da:f7:4c:34:3a:
                    e0:ff:de:b3:08:a9:27:c8:7e:90:7f:64:9d:de:17:
                    d5:47:bb:bb:d8:33:1c:e0:cf:82:88:ed:53:bd:b0:
                    8a:a5:cc:a5:66:2b:05:92:de:b2:e3:f1:51:10:93:
                    87:3b:6a:d4:aa:f1:54:13:a7:44:cd:aa:a3:dc:41:
                    0a:dc:09:ef:43:09:c4:11:f3:c0:a6:86:bb:e8:01:
                    d5:79:0f:2a:ce:6b:b9:92:64:d7:7e:f2:26:24:9e:
                    41:e2:9d:f6:ad:08:fe:72:62:29:1e:b6:57:b3:be:
                    59:39:0b:b4:ff:17:49:04:54:d8:c0:03:f2:4d:59:
                    c9:e7:80:6f:8f:a9:42:04:bf:56:7d:d0:21:1b:6e:
                    b9:85:c0:f1:d9:f7:45:01:2d:4d:41:36:e5:43:52:
                    f1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:80:BE:68:B4:58:27:8E:36:BD:F7:E2:17:A7:0B:D4:18:23:02:FB
            X509v3 Authority Key Identifier:
                keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:2d:33:2e:b7:04:e8:f5:58:2b:63:f0:47:61:10:3e:21:94:
         76:2d:d2:1b:2c:05:6a:c4:46:bf:97:91:bc:cd:be:c4:08:d0:
         02:d8:98:fe:4a:9d:5e:2d:7e:a2:9a:c4:0f:0d:0a:1b:bb:91:
         59:69:1a:0a:4f:70:b0:55:12:da:6e:2f:29:45:e3:75:63:6f:
         30:a4:12:e7:60:29:7f:8b:e9:98:b9:af:fc:c9:2f:47:ab:ee:
         06:d9:51:43:24:78:27:96:42:f7:74:63:f6:7b:8b:a4:10:09:
         e8:cb:25:b5:ae:31:b8:78:54:66:a2:ce:5a:7e:60:82:d4:72:
         d2:ef:b1:d8:9a:a5:71:b4:b1:bd:d7:62:8f:f8:59:94:83:52:
         28:8a:ae:9d:df:dc:c1:3c:5c:6e:fd:5b:9c:c7:cc:f7:cf:e4:
         54:f9:d2:bb:75:c7:63:ca:40:7d:df:88:6d:fc:1d:02:60:c5:
         d6:91:16:24:2a:79:46:e0:54:ea:98:47:87:0d:fb:61:3b:b2:
         ea:10:b9:5f:e0:a9:d8:35:b4:e4:79:d6:4f:7d:23:12:04:46:
         ef:18:e8:a8:52:f7:2d:37:3e:2d:c4:c9:b6:09:5b:3b:f0:03:
         c7:b8:f3:fb:84:1d:26:e1:06:7e:66:2d:38:1b:02:4b:1f:82:
         ea:7e:eb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----