Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
File:                     2TLsITGy__Du_D-3jLxbjTLvHGE.mft (raw, json)
Hash identifier:          XlX8hp1hQ7OrEr2UeaXgGu9IAee9QfzCecbyAnVIglY=
Subject key identifier:   52:77:13:79:C9:EF:4D:1C:FD:CB:7D:96:95:06:1F:C1:E1:D6:5C:FE
Authority key identifier: D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
Certificate issuer:       /CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Certificate serial:       01901D4641EC51B841853C5798339A953AD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
Manifest number:          0C91
Signing time:             Sat 15 Jun 2024 19:01:01 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:01 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:01 +0000
Files and hashes:         1: 2TLsITGy__Du_D-3jLxbjTLvHGE.crl (hash: na7R7C0kXztzFn7H8X5fUwKHIzp0pi6+OHicXHDVdhQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:41:ec:51:b8:41:85:3c:57:98:33:9a:95:3a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
        Validity
            Not Before: Jun 15 19:01:01 2024 GMT
            Not After : Jun 16 19:01:01 2024 GMT
        Subject: CN=52771379c9ef4d1cfdcb7d9695061fc1e1d65cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:2d:dc:71:88:d2:8b:c4:f5:51:50:d8:84:
                    e0:f6:97:fe:69:01:c7:ee:f3:f2:36:31:32:ed:a1:
                    97:5d:4b:8b:dd:a8:1a:62:44:cf:ad:b8:49:85:ef:
                    cc:47:f0:e4:65:7a:fd:0a:62:ce:4d:54:d9:4a:2e:
                    b5:5c:44:a6:c0:18:6e:d8:ec:b1:ee:70:e0:01:46:
                    b9:f4:e0:ae:2e:f1:6d:e7:2f:fe:78:d6:69:7f:89:
                    4f:3a:c4:69:84:28:99:2d:85:a1:d5:39:f0:ce:6c:
                    70:23:fc:d7:96:34:48:eb:ae:35:0c:f1:ea:8b:0c:
                    0c:72:e8:60:d2:c2:fd:6c:47:6b:5b:30:72:2f:dd:
                    32:ce:9d:96:2e:80:0f:55:06:91:57:29:35:60:dc:
                    77:e7:77:40:77:18:aa:ae:a0:67:45:7c:88:ff:ec:
                    1a:cd:d4:27:78:e2:5d:47:fe:e8:07:4e:16:ba:da:
                    62:06:7e:2b:d8:0a:8b:fc:bc:81:7e:68:5f:29:1e:
                    e5:21:76:6c:2d:b4:14:5c:5a:4c:14:4c:3e:97:51:
                    29:ef:8a:a9:09:11:b3:ab:43:d9:a1:f7:68:7f:e4:
                    40:3b:f3:a7:06:35:19:81:29:90:d4:f5:d2:9e:f6:
                    26:44:30:23:d3:da:7d:e3:3a:15:15:ea:e4:6b:4e:
                    6b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:77:13:79:C9:EF:4D:1C:FD:CB:7D:96:95:06:1F:C1:E1:D6:5C:FE
            X509v3 Authority Key Identifier:
                keyid:D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ae:2b:82:f8:9c:14:d3:3c:72:e4:54:db:d1:b8:f2:f9:38:
         94:61:00:37:d6:9c:26:37:fb:c7:e8:49:8d:52:79:fb:ce:80:
         e5:20:3e:33:79:93:74:c9:e9:35:23:b6:1c:bc:06:11:6f:c2:
         20:e5:05:89:fe:2a:fa:d0:9b:a0:be:ea:bc:bc:29:ed:46:09:
         3b:3a:e4:30:70:27:ef:45:05:a0:96:af:25:f9:b4:30:22:b2:
         1d:20:dc:17:47:c0:3a:14:1d:2a:bd:f7:6e:12:95:26:91:8a:
         bb:48:45:d5:1b:6c:87:f1:27:f7:d5:38:1f:4a:b2:1b:6a:2b:
         7f:7f:0a:45:68:a7:f8:9a:bf:55:85:07:76:b8:19:46:16:26:
         2d:ba:23:21:bd:9c:7d:04:f6:7c:01:1f:c7:54:04:f9:72:0a:
         4a:d7:d5:a9:df:69:81:27:fc:28:33:7a:7d:34:03:33:39:4a:
         a2:40:3a:c2:1b:b7:de:ea:48:7a:09:7f:ec:7c:d5:7c:f7:36:
         4a:7a:e5:c3:ea:bc:f2:f9:90:36:98:12:55:67:c8:40:0c:9c:
         0a:f5:8d:47:e3:1f:df:13:d6:63:4b:40:b6:22:eb:61:d1:13:
         68:84:f8:04:1a:ff:8d:39:57:83:54:03:c9:da:a2:b4:97:a0:
         6d:7d:fc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----