Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/SOUJXaNXnKkQpCHWTgyHnI_TaVI.mft
File:                     SOUJXaNXnKkQpCHWTgyHnI_TaVI.mft (raw, json)
Hash identifier:          0j3ARRLGb3Fg3wEKbuqvX9OIgdvwnGP8Xtkir6mVbmA=
Subject key identifier:   83:DC:A1:90:A1:E7:BD:5C:CF:E5:36:DE:61:53:C2:27:F7:0C:43:C9
Authority key identifier: 48:E5:09:5D:A3:57:9C:A9:10:A4:21:D6:4E:0C:87:9C:8F:D3:69:52
Certificate issuer:       /CN=48e5095da3579ca910a421d64e0c879c8fd36952
Certificate serial:       01909FBCDD2ED611A03E58ADCEF326C0E352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SOUJXaNXnKkQpCHWTgyHnI_TaVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/SOUJXaNXnKkQpCHWTgyHnI_TaVI.mft
Manifest number:          04BC
Signing time:             Thu 11 Jul 2024 03:01:13 +0000
Manifest this update:     Thu 11 Jul 2024 03:01:13 +0000
Manifest next update:     Fri 12 Jul 2024 03:01:13 +0000
Files and hashes:         1: SOUJXaNXnKkQpCHWTgyHnI_TaVI.crl (hash: Vr8c2qoafgGLzlTnkmeGHuq61F2hC/gOVL+05DwJa/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/SOUJXaNXnKkQpCHWTgyHnI_TaVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/SOUJXaNXnKkQpCHWTgyHnI_TaVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SOUJXaNXnKkQpCHWTgyHnI_TaVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Jul 2024 20:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9f:bc:dd:2e:d6:11:a0:3e:58:ad:ce:f3:26:c0:e3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e5095da3579ca910a421d64e0c879c8fd36952
        Validity
            Not Before: Jul 11 03:01:13 2024 GMT
            Not After : Jul 12 03:01:13 2024 GMT
        Subject: CN=83dca190a1e7bd5ccfe536de6153c227f70c43c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:e9:9e:3a:60:7a:c2:0b:0e:b9:be:17:01:
                    4f:46:ea:90:78:5e:fe:3b:47:ec:a0:b5:5f:3d:73:
                    da:1d:c4:14:e8:b8:59:b9:63:db:65:f5:64:e6:3a:
                    28:bb:e4:88:fd:84:dd:12:9b:05:18:89:b1:ad:63:
                    f2:1e:dd:b0:94:df:d0:14:3b:ca:6e:65:e6:14:21:
                    41:fa:18:b2:aa:2a:84:91:30:57:b6:86:a6:fc:92:
                    f4:a2:74:af:75:f3:d8:b4:3e:9e:01:fc:90:e0:f4:
                    02:9c:30:fd:7c:80:18:0f:dc:59:ab:1b:69:16:a2:
                    54:7c:18:d9:83:84:0b:9e:a1:0b:a0:51:3e:0e:fc:
                    f8:a6:ca:d8:af:bd:94:d8:69:6d:61:60:ba:bf:27:
                    c9:10:f7:1c:bd:b6:69:15:d8:a4:82:52:6d:30:4b:
                    8a:70:28:ae:d3:eb:f7:eb:be:68:ce:c8:26:5b:47:
                    d6:b7:02:67:ad:b5:76:a1:9f:24:ce:49:56:48:e5:
                    06:7c:85:26:e7:24:1c:77:b0:0b:45:00:89:a7:95:
                    9e:6a:ac:5a:42:db:15:96:70:cb:7c:52:75:ce:ab:
                    df:83:82:33:64:cb:66:54:9b:c3:94:55:54:92:7c:
                    57:ed:2b:63:bc:f7:d9:c9:ef:12:0b:d6:f6:c4:df:
                    2a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DC:A1:90:A1:E7:BD:5C:CF:E5:36:DE:61:53:C2:27:F7:0C:43:C9
            X509v3 Authority Key Identifier:
                keyid:48:E5:09:5D:A3:57:9C:A9:10:A4:21:D6:4E:0C:87:9C:8F:D3:69:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOUJXaNXnKkQpCHWTgyHnI_TaVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/SOUJXaNXnKkQpCHWTgyHnI_TaVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/SOUJXaNXnKkQpCHWTgyHnI_TaVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4a:76:c0:2c:d9:78:ee:46:d7:34:ed:97:7a:97:2d:5a:d9:
         68:a3:28:fd:aa:dd:ea:04:70:e3:de:55:ed:9b:35:7b:bd:4b:
         a5:27:d8:5d:0c:de:ee:8c:ce:58:c7:6f:f2:76:8c:ae:09:7d:
         cb:1a:00:49:a0:27:03:4d:75:dd:dd:d1:cd:3d:e3:52:83:c3:
         37:8e:8c:ff:6b:36:4b:5b:0b:93:ba:75:32:52:9e:94:b3:fb:
         6b:dc:6c:52:cd:c3:64:e3:09:82:15:95:b6:a1:12:6a:cb:59:
         4b:a6:74:43:e6:45:36:65:89:97:d7:0e:3e:40:f9:00:71:92:
         99:28:ed:ca:37:d7:2c:24:51:e3:6f:40:03:9e:ca:1a:aa:41:
         83:71:63:2e:cb:34:61:6a:2b:9e:b0:1c:78:50:91:86:b5:48:
         2c:98:30:69:c0:13:e6:e9:d2:e0:76:2b:69:2d:f9:bd:4e:17:
         04:f7:2e:6c:90:54:f8:e0:ef:7b:75:f1:00:3b:5e:3e:91:a0:
         6c:a4:13:3b:ba:09:28:ab:2f:3e:df:ce:aa:32:4a:b5:79:0f:
         e3:ce:db:1f:b2:f8:ab:22:77:0b:d3:76:5b:61:c1:f4:06:e8:
         a2:26:33:5b:4f:62:1d:5b:53:ad:d6:63:2c:ac:ec:fb:e2:8d:
         4c:07:37:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----