Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
File:                     SW1fsJjEMw63plGNkDZC2jYZsEc.mft (raw, json)
Hash identifier:          se/ceoW2ybNs6CBly2n4SqV4crPVbpby83fk7raQG6g=
Subject key identifier:   41:5F:C9:26:BC:92:2E:B7:80:E5:FA:64:74:8E:5E:1D:F8:8E:E3:8C
Authority key identifier: 49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
Certificate issuer:       /CN=496d5fb098c4330eb7a6518d903642da3619b047
Certificate serial:       019369D8CE588EB11E8E0136AB563388666D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
Manifest number:          0A60
Signing time:             Tue 26 Nov 2024 19:00:36 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:36 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:36 +0000
Files and hashes:         1: SW1fsJjEMw63plGNkDZC2jYZsEc.crl (hash: WibDvGYNe6tWhDeWunXbcfoe2y8TVrynAE+fRsJuf0E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:ce:58:8e:b1:1e:8e:01:36:ab:56:33:88:66:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496d5fb098c4330eb7a6518d903642da3619b047
        Validity
            Not Before: Nov 26 19:00:36 2024 GMT
            Not After : Nov 27 19:00:36 2024 GMT
        Subject: CN=415fc926bc922eb780e5fa64748e5e1df88ee38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:18:1e:5d:56:ec:10:3b:8f:dd:bb:f6:b4:
                    2b:45:08:7b:65:d6:c1:75:46:b7:27:fd:e9:29:cb:
                    18:97:ec:9e:a7:11:d9:d9:3c:28:96:0d:e6:4d:db:
                    7f:f0:fb:a3:41:00:c5:33:67:7c:97:2b:fc:b1:f6:
                    7c:e5:58:50:66:90:b0:ae:8b:0a:78:19:66:e7:ef:
                    f1:ac:d9:7f:69:37:ab:eb:50:de:40:df:96:67:d3:
                    c8:43:cf:51:31:ca:35:15:89:e6:f5:69:58:17:ca:
                    e5:67:56:1a:37:a6:fe:64:6b:36:53:e4:9b:a2:a0:
                    a9:57:e5:8c:a6:bd:c0:b2:ec:80:84:6a:2f:e4:0f:
                    56:ae:17:48:3a:7f:22:11:74:4a:f9:bd:32:85:dc:
                    d0:08:49:bc:38:ac:23:7f:2e:28:6d:ba:a4:c6:e7:
                    b2:b1:f6:48:06:f9:9d:8c:52:7d:db:5f:33:51:0d:
                    16:ef:13:7c:c1:aa:ba:c7:53:48:1f:fd:b3:42:28:
                    e5:0e:ce:35:65:8f:81:ca:ee:88:93:c9:38:ed:0e:
                    a5:a1:da:06:3c:64:1d:3a:04:d9:83:41:0a:75:08:
                    af:d6:b6:33:76:89:ff:4b:11:b8:76:cb:a9:53:b4:
                    ca:45:47:f2:4a:7f:d2:ea:b6:5d:e7:e5:8a:d1:fa:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5F:C9:26:BC:92:2E:B7:80:E5:FA:64:74:8E:5E:1D:F8:8E:E3:8C
            X509v3 Authority Key Identifier:
                keyid:49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a6:fd:4d:6c:b9:79:04:dd:ac:2b:48:32:89:2b:93:0c:9c:
         73:ff:3c:fa:fd:a9:89:c7:10:0c:99:00:50:11:6f:ca:dc:ee:
         5f:81:8a:fe:87:4b:e7:4d:a0:6b:31:29:2d:6f:35:c0:c3:88:
         58:58:16:02:c3:3f:00:14:43:51:96:e9:55:41:16:1d:be:7b:
         b0:f5:f2:95:67:61:4d:a3:96:4d:f4:76:7d:03:89:b2:a6:93:
         15:2a:25:36:d1:83:14:04:eb:19:39:18:e3:98:30:ae:fc:f2:
         0d:7f:27:2c:2e:e7:b0:3e:b9:48:3f:9c:5e:4b:d5:e3:27:f4:
         5b:62:d2:61:63:e8:40:f9:db:63:f5:30:35:16:ca:f1:42:47:
         8e:d8:07:44:c1:ed:84:1e:e1:3e:6d:11:af:0a:ab:b5:ec:79:
         90:01:8e:b2:da:01:b1:66:03:64:18:c6:d0:1f:e6:d4:ca:d8:
         e9:ad:f4:2f:92:e6:96:18:6a:3d:31:44:44:31:18:a4:2f:f0:
         ea:f4:dc:1e:e1:af:75:4c:f1:44:04:b5:6c:ef:73:f1:ba:1a:
         ce:67:2b:10:2b:66:d1:51:3d:db:15:00:1c:46:9e:46:a6:d0:
         03:e7:72:ba:99:ce:6a:5d:3b:62:d4:06:71:21:ff:0d:3c:74:
         a6:94:d3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----