Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
File:                     I-_rMup5TJRQkgia5cE1AvdxbN4.mft (raw, json)
Hash identifier:          lsJ8zU5+kPOTYZA3E6oppV68jGZ7/IrHhEmN0NA4q+k=
Subject key identifier:   6F:A0:B2:C4:AB:49:6C:3E:F3:67:FD:D0:34:19:5A:EA:C6:56:72:BC
Authority key identifier: 23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
Certificate issuer:       /CN=23efeb32ea794c945092089ae5c13502f7716cde
Certificate serial:       0195116BF21C3F028B933E1D74BCF7D034FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
Manifest number:          1453
Signing time:             Mon 17 Feb 2025 01:00:41 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:41 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:41 +0000
Files and hashes:         1: I-_rMup5TJRQkgia5cE1AvdxbN4.crl (hash: gZFw8pp+L0RRbdA9hZpcFxmy+38kGd3y2gkPwCZq5jE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6b:f2:1c:3f:02:8b:93:3e:1d:74:bc:f7:d0:34:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23efeb32ea794c945092089ae5c13502f7716cde
        Validity
            Not Before: Feb 17 01:00:41 2025 GMT
            Not After : Feb 18 01:00:41 2025 GMT
        Subject: CN=6fa0b2c4ab496c3ef367fdd034195aeac65672bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:57:71:dc:51:c7:b7:28:c3:c0:c9:57:5f:
                    70:26:8d:ae:e4:98:3d:f0:d0:9b:a1:d6:ff:46:93:
                    46:18:c2:7b:a3:a1:92:94:4f:41:03:55:4c:33:3f:
                    fe:52:81:5a:a5:51:f0:ca:aa:ba:6a:3b:c5:61:dd:
                    3f:55:77:69:93:13:82:fd:e9:10:06:cc:57:94:44:
                    43:0f:82:06:8f:98:e4:4c:0f:c7:0d:f0:a5:ae:88:
                    3b:ad:5a:94:0a:d8:ff:39:2e:3e:49:51:5d:54:f4:
                    06:fd:6f:ae:79:c6:d7:aa:82:46:50:78:3f:e1:5c:
                    2a:d0:58:12:5a:ac:8b:23:7a:a5:a2:b0:d3:c5:83:
                    ec:57:f2:6f:e8:d8:61:cd:87:0c:ed:9a:e3:16:ea:
                    cb:88:e7:2c:8d:99:3e:3e:8d:bf:f8:b0:cc:58:5c:
                    c5:22:b1:16:c0:17:b0:d8:2e:53:97:b9:9e:7b:dc:
                    c7:4b:82:7c:44:7d:53:7d:d1:31:46:2c:ea:aa:92:
                    9c:96:76:8a:99:a2:75:8e:f0:91:c1:a7:90:b1:93:
                    e5:53:4f:99:ba:79:75:11:90:09:d4:56:13:90:54:
                    94:13:b2:fa:99:24:2c:28:d9:20:e9:43:6e:cb:20:
                    09:66:0a:58:e0:a4:e7:62:90:03:2b:f3:c5:92:d6:
                    da:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A0:B2:C4:AB:49:6C:3E:F3:67:FD:D0:34:19:5A:EA:C6:56:72:BC
            X509v3 Authority Key Identifier:
                keyid:23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c8:cd:fc:39:6d:e9:d7:e2:3b:e4:92:27:16:a5:9b:26:80:
         ca:64:3f:11:cc:35:ab:a7:36:c9:b9:99:01:c5:d2:ee:35:1c:
         86:9b:71:f2:5c:75:77:ea:8b:57:7a:35:99:ff:15:a3:fd:b2:
         bc:1a:76:52:06:55:4b:2a:76:6e:1a:2e:24:1e:40:3f:32:d6:
         12:99:e3:eb:82:75:69:99:1d:ee:f3:6a:82:cc:79:28:aa:d3:
         6f:ed:99:cc:fa:2d:dd:fb:05:77:66:fa:d0:96:14:83:25:28:
         6c:c1:f9:92:9f:5c:43:e4:d6:92:f1:22:2c:4d:ef:33:3e:f9:
         21:a3:6f:11:83:45:ef:f7:4a:ff:aa:32:0f:d3:9c:07:a2:92:
         77:e0:fe:b2:dd:94:54:52:03:4f:03:fc:7e:55:3f:da:49:29:
         b6:54:2e:92:92:d8:71:11:93:e6:0c:da:3b:aa:c0:62:38:63:
         e9:d8:72:5a:b9:c3:3c:6f:ea:3a:c1:c4:33:78:2f:40:e4:51:
         db:08:ca:8a:31:b0:71:81:a3:37:f0:36:ff:7c:23:44:ff:c7:
         1b:d3:c2:7f:5d:e2:92:57:ce:ca:0a:b8:dc:2a:37:18:68:18:
         db:51:48:7d:c9:50:f4:28:c4:f0:b4:17:5f:1b:a9:5f:d2:40:
         80:62:57:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----