Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
File:                     ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft (raw, json)
Hash identifier:          KYaFpjdVgo+4BHh2em2srEFyyx9Ros9SEBddfh+I19o=
Subject key identifier:   E8:97:31:09:05:71:98:87:BA:4F:06:57:B7:95:20:65:B4:AE:06:56
Authority key identifier: 66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
Certificate issuer:       /CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Certificate serial:       0193587783FF2A0B2FF709D4989DAF2108AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
Manifest number:          104F
Signing time:             Sat 23 Nov 2024 10:00:47 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:47 +0000
Files and hashes:         1: ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl (hash: gHXN8sqIOVAaf+CsUs8eWcT7OBN2CRP1C6Pl0AZ63iE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:83:ff:2a:0b:2f:f7:09:d4:98:9d:af:21:08:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
        Validity
            Not Before: Nov 23 10:00:47 2024 GMT
            Not After : Nov 24 10:00:47 2024 GMT
        Subject: CN=e897310905719887ba4f0657b7952065b4ae0656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:49:12:97:7f:b3:a0:3b:2a:fa:b3:32:ed:0d:
                    c7:48:3b:db:b6:ff:2f:92:9d:d8:7f:d5:ec:31:21:
                    c9:44:0c:af:86:6d:ca:35:41:83:25:c3:43:ba:3d:
                    08:33:e0:be:39:d3:da:53:cb:36:31:10:f3:2f:61:
                    3b:c6:57:b8:99:a7:7e:18:ee:76:32:46:d4:27:60:
                    1b:87:27:d8:a7:ff:4e:bd:b2:f7:5f:57:a3:fd:1a:
                    a6:35:bf:1a:bd:47:9d:5f:09:89:9c:d3:66:d4:23:
                    61:d5:2f:f6:7e:77:0f:51:74:38:cd:85:74:59:fa:
                    e9:d1:fe:5b:e3:7f:13:63:ce:98:d4:70:33:8c:14:
                    3e:ad:5c:3d:f6:d8:65:58:15:cf:b8:31:6e:b6:5a:
                    50:ce:35:46:8a:3f:a3:14:cd:ef:31:84:68:c1:96:
                    7e:44:41:de:2f:e5:f1:bd:c3:6a:da:58:6a:42:43:
                    ab:cb:07:02:88:eb:37:c2:1e:6e:e9:0e:59:0a:67:
                    93:70:1f:2c:51:c6:01:cf:75:fa:3d:cb:3e:6e:6c:
                    c4:f6:19:30:73:65:76:d4:5c:11:8d:03:20:96:b3:
                    63:4c:d0:3e:eb:6b:97:18:37:29:5d:da:81:db:20:
                    9a:de:dc:e6:86:8c:2c:dd:cc:6e:ff:79:4c:ba:3c:
                    89:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:97:31:09:05:71:98:87:BA:4F:06:57:B7:95:20:65:B4:AE:06:56
            X509v3 Authority Key Identifier:
                keyid:66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e1:88:2e:d4:21:79:58:34:74:73:3c:9f:2e:34:83:f4:49:
         4e:b7:ae:11:7c:45:32:29:a6:b8:ff:0b:71:90:69:ef:8a:1f:
         00:8c:2c:0f:7c:1d:8d:09:34:0d:9e:b5:5c:b3:4e:c7:ac:fe:
         57:5f:5a:84:5e:8f:43:00:6e:73:fb:68:18:94:dc:15:e0:83:
         4c:31:dc:9c:97:e2:96:1c:c0:47:f1:80:aa:be:ff:4c:fa:9c:
         33:91:91:80:fd:94:39:f9:96:e5:25:6a:d2:24:df:e0:14:fc:
         a3:c2:1b:33:8f:6c:fc:12:fd:3b:2c:c9:22:80:76:8b:5e:66:
         2a:7b:d5:30:90:b1:df:38:ba:46:18:38:16:e7:7a:13:01:d8:
         01:82:3a:7a:3a:ad:c6:72:d7:fa:9a:08:0b:f6:83:14:32:5b:
         ae:e4:45:30:c7:4e:2a:0b:dd:6e:9a:ee:d8:ca:e8:3e:ca:2c:
         19:72:23:05:dd:4d:dd:f8:8a:f3:f8:2d:26:91:e5:f2:0d:af:
         ed:32:7a:e3:06:97:40:62:a5:84:3a:7d:6a:c2:0e:a7:10:52:
         7e:63:cf:5c:4d:9d:03:22:bb:7c:a1:a9:da:d7:3f:08:49:eb:
         e0:96:00:da:41:53:9c:a5:c8:85:b0:e8:95:69:80:44:30:a7:
         32:92:54:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----