Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File:                     ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier:          9EsR0Df/UUOd3SZyc4IBtKdmFIMBoDXqJdR37KFwyc4=
Subject key identifier:   87:3C:F9:CD:9A:3C:78:D8:A7:F2:C2:40:F9:83:33:0F:87:25:42:45
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer:       /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial:       019369D938AB980AAABCF4360C284DEB37AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number:          0D38
Signing time:             Tue 26 Nov 2024 19:01:03 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:03 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:03 +0000
Files and hashes:         1: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: vxthysV0NYXQrP6+kndhuOO4wXLV5YroVCx26LYbC6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:38:ab:98:0a:aa:bc:f4:36:0c:28:4d:eb:37:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
        Validity
            Not Before: Nov 26 19:01:03 2024 GMT
            Not After : Nov 27 19:01:03 2024 GMT
        Subject: CN=873cf9cd9a3c78d8a7f2c240f983330f87254245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:8a:a4:03:4d:c8:97:04:3f:a8:ca:7c:11:
                    d3:47:8a:21:c7:6c:eb:8f:e5:96:00:2c:67:3f:25:
                    72:1d:5c:ec:62:67:63:4e:2a:75:12:c8:4d:02:97:
                    de:17:f0:50:74:68:18:db:d5:23:66:3e:91:11:37:
                    12:29:d8:78:f8:63:03:27:ee:6f:25:75:5f:21:34:
                    1f:3b:35:88:5b:ff:72:d5:83:64:aa:bd:32:2d:92:
                    82:a5:43:f9:f6:ec:39:33:54:9d:e7:15:b7:ae:79:
                    e2:18:64:21:e6:90:6c:8f:c7:76:90:5a:2d:e1:d3:
                    0d:0d:d7:ce:bf:a1:08:08:f6:17:25:73:16:d8:b8:
                    22:f3:ea:26:29:82:cb:7e:12:e2:de:c1:52:ac:44:
                    9f:71:c8:eb:f4:36:40:1d:bd:2c:d6:19:6c:1b:f2:
                    42:1b:9e:96:89:0a:5a:59:58:54:7d:1e:60:12:ac:
                    7f:c8:db:f8:d7:c9:a6:d2:30:c4:84:91:35:55:64:
                    ba:45:44:25:9d:2c:25:74:4f:2a:58:38:69:1b:0c:
                    47:75:ee:0e:a6:cb:9a:a0:91:7c:13:10:7d:07:2c:
                    30:50:6f:a0:9f:0f:0e:e1:af:ca:5e:99:22:62:de:
                    65:b8:31:48:c2:44:84:f6:a5:ea:83:19:24:f8:df:
                    84:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3C:F9:CD:9A:3C:78:D8:A7:F2:C2:40:F9:83:33:0F:87:25:42:45
            X509v3 Authority Key Identifier:
                keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:7d:de:d3:3e:8a:ea:98:1e:3a:1c:aa:d3:b9:57:3f:69:e0:
         9b:1d:cc:c2:58:a7:fc:62:1d:d1:5f:38:7b:40:ad:5b:61:cb:
         18:79:1b:fd:7f:5f:37:0f:38:94:63:fa:a2:46:a5:84:56:ab:
         80:9e:6d:61:ab:37:b6:da:13:c2:b9:9e:e7:39:66:39:4e:4c:
         bd:e3:9f:5f:34:3c:99:af:90:6e:42:f8:56:0c:2f:52:11:49:
         a8:eb:9a:61:1b:d3:73:53:e3:69:15:35:4b:74:1c:a5:0b:6b:
         6c:3c:78:4e:87:91:2f:2f:8a:40:55:dc:8b:f9:a4:88:5d:eb:
         c6:a0:6f:b8:a3:ec:5c:64:b8:e7:57:68:57:11:0c:f6:9f:f4:
         e3:d4:d7:d8:52:81:e0:1b:dc:79:c5:4b:9c:1a:91:d1:8f:82:
         e7:f1:6d:fe:fc:8f:e2:11:2a:12:48:25:7f:68:3a:1c:95:00:
         67:f9:69:ec:e5:08:50:74:11:a4:1c:82:cf:f7:7c:c3:cc:de:
         40:6c:8b:d3:8f:48:0d:42:c6:d5:f0:99:63:df:be:82:01:66:
         a7:ad:db:f8:8e:5f:f1:8f:75:40:f0:f5:46:0f:2f:e7:c6:ca:
         ca:bf:30:00:d0:f4:87:65:db:31:87:42:49:dc:82:0b:0b:1f:
         f7:6b:b6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----