Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
File:                     6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json)
Hash identifier:          3InjgvR7t0czKXw4cFnf0LW8yh6lWYaCYAdDKimKETc=
Subject key identifier:   15:83:C7:4F:2C:B0:3A:F7:4B:76:BA:CC:BC:77:F9:C2:51:B7:53:61
Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
Certificate issuer:       /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Certificate serial:       01935688EDB3FFE13C06F018463219F326B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
Manifest number:          0B98
Signing time:             Sat 23 Nov 2024 01:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:34 +0000
Files and hashes:         1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: uu3PTnwexAnrg6giZo3/E8eGaaYtR17EALGoS3ZgsbE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:ed:b3:ff:e1:3c:06:f0:18:46:32:19:f3:26:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
        Validity
            Not Before: Nov 23 01:00:34 2024 GMT
            Not After : Nov 24 01:00:34 2024 GMT
        Subject: CN=1583c74f2cb03af74b76baccbc77f9c251b75361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:be:fd:34:a9:ef:54:33:e3:0b:e1:b0:ec:55:
                    a3:e6:70:fa:03:37:c6:9a:22:2c:86:b3:d8:bc:7e:
                    12:d0:c9:8b:43:ee:ff:69:f2:f1:11:09:8b:31:bf:
                    27:26:d1:4a:de:da:0d:d1:b0:ff:19:f9:25:37:20:
                    b9:77:31:65:53:75:cc:1d:e1:69:88:6d:bd:e9:2f:
                    03:8e:08:91:55:8c:e4:80:61:0f:87:64:45:a6:11:
                    53:eb:a9:31:e7:3c:0a:87:c9:99:af:6d:a4:ef:22:
                    b4:46:95:79:b2:70:e4:c6:77:cf:0b:92:46:e6:e7:
                    d1:63:6c:d8:17:b7:32:e3:9a:43:95:2b:31:0b:f6:
                    6b:f8:4a:a2:fc:4c:7c:66:89:85:e1:de:11:80:58:
                    56:0a:0d:a5:a8:ed:ca:2c:99:f7:ed:83:bd:b7:60:
                    e3:fe:2b:6f:5d:2b:ca:ad:94:5f:93:da:5a:7d:b9:
                    0b:91:7d:97:de:a1:31:ba:bd:0e:ac:f0:db:c9:3f:
                    eb:d7:e7:93:88:71:dc:dd:88:f0:f3:29:0b:a5:b6:
                    42:ad:9d:d3:eb:89:4f:ee:fc:3b:2c:3c:92:dc:b7:
                    61:85:13:6d:9d:fb:f0:9e:9f:62:79:6b:39:6d:ff:
                    78:fe:fc:3a:a8:e8:56:9c:07:f6:fc:a4:49:7e:e6:
                    15:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:83:C7:4F:2C:B0:3A:F7:4B:76:BA:CC:BC:77:F9:C2:51:B7:53:61
            X509v3 Authority Key Identifier:
                keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:40:ca:06:41:af:41:6b:34:21:57:a9:ac:73:86:00:d2:12:
         0b:87:18:27:24:46:ec:4d:9f:c9:c5:dd:00:c0:44:ec:d0:74:
         81:50:4e:73:3e:1c:6e:b3:e3:29:01:a3:d1:d3:1e:86:c7:1d:
         01:43:1d:5e:ad:88:21:58:f9:b1:c1:aa:6d:d3:de:94:e6:93:
         7b:af:35:70:4d:42:44:a2:be:d3:47:2d:e2:c0:10:8b:22:aa:
         57:8b:08:52:95:e8:88:b0:be:a9:e7:09:65:09:37:90:d9:1a:
         67:26:86:75:61:02:9d:e7:4b:5a:ff:4c:71:a7:0e:18:e8:d7:
         84:84:6f:55:4e:ad:bd:8d:17:55:e1:3d:65:fc:26:e1:69:df:
         bd:38:a5:8d:dc:af:8c:6c:f5:b8:f7:85:b9:9e:46:3b:a2:f6:
         fa:af:ac:3b:78:74:57:2b:fe:fc:50:2d:95:a7:1d:94:c3:b2:
         50:7d:68:7f:96:2c:72:2b:c0:6c:02:fb:a9:72:df:4c:e6:49:
         a4:66:5d:df:15:e1:28:f1:68:d6:2d:e1:54:57:75:7f:43:d8:
         5f:a7:41:95:da:d0:30:45:f4:56:4c:78:19:77:fe:22:25:64:
         3e:1e:23:9c:6b:c6:6c:b3:bf:19:21:b4:1a:45:e1:1a:43:fd:
         5f:80:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----