Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File:                     Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier:          lgF21rnybvKXjPW02wMkOvhZ468iFjU/Y5dIDfD1sUk=
Subject key identifier:   09:20:E8:9E:94:BF:5D:0F:5D:89:B7:F3:67:2E:6D:71:AE:C7:80:D4
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer:       /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial:       0193572D87B689DD92711C1CE0455F32C554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number:          0CF0
Signing time:             Sat 23 Nov 2024 04:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:21 +0000
Files and hashes:         1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: b6rEktKm+H7ypfCtW8kYE7vR9j3dhQYGFP+vn0tKxVA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:87:b6:89:dd:92:71:1c:1c:e0:45:5f:32:c5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
        Validity
            Not Before: Nov 23 04:00:21 2024 GMT
            Not After : Nov 24 04:00:21 2024 GMT
        Subject: CN=0920e89e94bf5d0f5d89b7f3672e6d71aec780d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:c9:51:4c:11:dd:be:76:1c:d3:83:53:27:
                    b1:b5:3a:27:0a:ae:3e:ad:b7:b7:d7:e6:ae:df:da:
                    0f:6e:ed:e1:c6:13:24:b0:c2:27:c1:20:35:47:95:
                    97:ac:5e:f2:f2:6a:c5:62:2a:7e:5f:12:f9:92:9e:
                    cb:a2:81:fe:b4:10:46:79:fe:da:6e:52:d1:58:59:
                    53:12:15:b7:6d:0c:d0:f7:69:57:10:72:d4:9d:61:
                    22:b9:b1:da:1b:a9:05:da:87:d6:82:e8:95:84:96:
                    25:f4:72:74:1a:d0:6c:65:81:c6:3c:64:a7:b2:d7:
                    47:ba:3f:2d:25:fe:1c:50:bd:e3:fe:50:f5:c8:c4:
                    c2:42:4b:38:64:ed:cb:86:a7:39:a3:b6:69:a8:04:
                    a6:a6:cb:da:e9:53:cc:d3:28:50:b4:34:d2:3b:29:
                    e7:17:c7:65:f5:3f:f9:95:71:28:d4:86:74:24:90:
                    28:7b:df:d6:e4:4d:f8:6f:1d:89:9b:40:64:ec:5e:
                    24:3b:fb:e2:a6:0f:c9:b0:e3:a7:e0:7f:ae:be:36:
                    b4:2a:46:aa:a5:86:ce:32:64:6c:63:65:d4:65:85:
                    ac:52:c5:19:38:38:2d:47:6a:7a:9e:ee:47:6a:bc:
                    ed:68:18:35:cf:92:de:53:ad:7b:15:de:71:0b:8f:
                    7b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:20:E8:9E:94:BF:5D:0F:5D:89:B7:F3:67:2E:6D:71:AE:C7:80:D4
            X509v3 Authority Key Identifier:
                keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9e:6a:59:51:7d:c6:78:18:bb:6b:54:70:57:c8:10:af:14:
         56:77:8d:21:90:d9:98:ee:2f:69:2c:11:ca:c1:92:75:7e:d7:
         c4:a3:a7:20:d5:5c:63:12:50:6a:25:c4:9d:57:7c:56:be:05:
         6d:6a:5e:2e:3b:41:26:ad:93:2c:d4:a1:eb:9f:04:04:3c:f4:
         de:c5:62:ba:ef:2d:6a:da:c6:97:a7:37:ad:f7:07:7b:ea:2d:
         13:38:87:0f:87:95:eb:b7:79:3c:cc:43:d8:f4:1b:a6:79:96:
         b5:d3:01:da:ea:8f:66:cf:dc:b3:17:c2:42:c9:45:2b:2d:09:
         c1:db:d3:df:04:fe:29:e8:99:36:c5:77:aa:8a:e0:d7:fa:90:
         d5:71:7e:23:be:36:e7:72:8f:5f:73:67:5f:00:cf:47:68:2c:
         20:b7:51:92:1a:ab:35:dd:e8:98:07:a4:4c:19:fa:09:36:e6:
         d6:91:34:0e:98:7b:5f:a3:88:de:7f:9c:71:f1:c0:4d:9f:39:
         3b:d9:00:de:85:66:16:3f:41:02:8a:3e:42:04:b6:60:8b:9e:
         77:f1:d4:fb:a8:83:fb:04:6c:bb:e8:d4:99:d7:6b:a2:c1:b4:
         2a:b8:78:7b:4a:e6:bc:73:21:5b:e2:f1:d7:47:d2:0a:cc:da:
         e2:95:00:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----