Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
File:                     EMTixWLflMzKm0ggghD9Fs-6kjU.mft (raw, json)
Hash identifier:          3Uj43zIbVMAhZBQDPzU6/boCh13es1VKpqqxgAnUFcE=
Subject key identifier:   0A:74:89:F2:3C:0A:9B:0A:F5:AB:4E:4D:2E:E5:F9:53:4F:0C:F6:8C
Authority key identifier: 10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35
Certificate issuer:       /CN=10c4e2c562df94ccca9b48208210fd16cfba9235
Certificate serial:       01935688DC135658B582EE2EB526371B7C89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 01:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:29 +0000
Files and hashes:         1: EMTixWLflMzKm0ggghD9Fs-6kjU.crl (hash: Na2AVpmhBq4F/at9HKmhCqBzkI4wTJc2EGLBG/GR0cU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:dc:13:56:58:b5:82:ee:2e:b5:26:37:1b:7c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c4e2c562df94ccca9b48208210fd16cfba9235
        Validity
            Not Before: Nov 23 01:00:29 2024 GMT
            Not After : Nov 24 01:00:29 2024 GMT
        Subject: CN=0a7489f23c0a9b0af5ab4e4d2ee5f9534f0cf68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0e:82:f7:c6:34:dc:5c:7b:51:09:e3:55:67:
                    d5:2a:cd:47:bd:1e:fe:db:22:99:68:f3:3f:9b:25:
                    fa:b7:27:f7:f1:8c:36:59:be:7f:3b:5b:f6:59:14:
                    94:24:5b:44:a3:1d:76:e9:28:76:56:b6:7b:c8:f3:
                    8e:93:12:84:b6:e2:4c:4c:1d:e4:72:57:85:09:6a:
                    ad:e7:08:f3:27:c3:3e:c6:54:b3:c1:72:1a:d7:b9:
                    e1:9c:b6:0c:79:95:cf:29:9a:70:63:57:b5:cd:35:
                    94:b2:cb:1e:b1:f0:d7:23:3f:44:f7:4e:48:58:84:
                    af:ab:a2:31:97:c3:f2:60:ba:62:a8:ca:92:aa:ed:
                    53:6f:71:9d:79:fc:f5:cb:59:a6:13:de:11:b6:bf:
                    44:02:b4:12:be:c7:91:0f:05:1c:fd:30:1a:5e:ed:
                    a0:5d:d0:7c:c9:f5:77:2e:0c:89:e2:92:a1:b8:7b:
                    73:68:49:cf:dd:47:4e:c3:3f:a8:12:33:94:13:fa:
                    c9:10:07:f9:eb:e7:46:13:63:e7:d8:42:14:f8:7b:
                    ee:40:c8:8e:9e:68:a6:1e:b7:8b:9a:15:7e:22:a7:
                    8b:45:0a:26:3f:fc:35:5c:37:f6:ea:c0:dd:75:5f:
                    9a:73:37:37:59:d8:5d:26:c4:ef:f9:50:da:de:c6:
                    99:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:74:89:F2:3C:0A:9B:0A:F5:AB:4E:4D:2E:E5:F9:53:4F:0C:F6:8C
            X509v3 Authority Key Identifier:
                keyid:10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:41:2e:70:cb:91:82:ad:2e:c2:ec:7c:a2:8a:06:0e:e2:a0:
         fd:49:52:5f:58:13:07:1e:51:4b:cb:f3:3b:93:a1:0a:f5:48:
         7e:d0:3c:2d:0d:a4:6f:b8:d9:3e:f1:b9:f4:29:22:55:70:f7:
         6d:63:5b:fb:59:cd:3e:10:f0:0c:8d:2f:a4:04:10:6a:d2:b9:
         b1:76:29:d1:75:35:39:32:eb:c1:dc:13:c7:e2:ff:11:7d:51:
         a8:34:bf:c7:b8:78:6b:58:b7:a2:ba:8e:31:f7:53:51:12:18:
         ed:60:71:ab:36:18:c6:7f:21:07:19:16:d6:f0:d4:d4:91:5a:
         40:1e:06:20:29:ea:fa:f5:fc:de:9f:0c:d3:4a:be:b9:1e:8c:
         3e:13:27:e2:9c:c4:16:a0:46:93:3b:62:32:73:e6:32:2b:e8:
         cc:82:ba:fa:98:91:bd:9c:c8:d1:4f:7e:f3:0c:7c:59:dc:0a:
         8f:bc:8e:04:38:26:6d:df:80:a1:73:15:21:d8:de:7c:4a:cb:
         35:6d:bb:28:73:3f:03:ed:5d:22:66:62:d4:21:e0:ff:34:d7:
         3e:a7:c5:e7:d9:84:a2:4e:b7:4d:94:6c:84:28:28:3d:c1:3a:
         ef:95:3d:6b:54:58:bd:51:a1:ca:6c:67:e1:aa:39:6d:09:26:
         1c:61:3b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----