Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
File:                     ep6pPHnsxdXKkDAazTqJLW4uHnM.mft (raw, json)
Hash identifier:          RGUNmAtE3Ot8O43MMhEl6FwOY+THeqPi6pag1h7VvFY=
Subject key identifier:   04:2F:D3:30:83:49:2A:D4:47:8C:AA:2B:82:10:6F:34:36:60:60:B0
Authority key identifier: 7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73
Certificate issuer:       /CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
Certificate serial:       01936B22233E22CD1D13569D7D632D60971E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
Manifest number:          0E51
Signing time:             Wed 27 Nov 2024 01:00:19 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:19 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:19 +0000
Files and hashes:         1: ep6pPHnsxdXKkDAazTqJLW4uHnM.crl (hash: 2pqcmuAcABP5XFoR2v+lZhCwu4RBFir5VB6qP8UmyL4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:23:3e:22:cd:1d:13:56:9d:7d:63:2d:60:97:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
        Validity
            Not Before: Nov 27 01:00:19 2024 GMT
            Not After : Nov 28 01:00:19 2024 GMT
        Subject: CN=042fd33083492ad4478caa2b82106f34366060b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:4d:03:6e:17:06:3c:dc:f1:b9:cd:a1:8e:
                    07:60:67:40:92:ff:d4:0a:3f:02:48:c3:a0:5d:5d:
                    f5:e5:67:af:27:03:27:1e:e5:24:e1:e7:c1:0b:01:
                    50:d7:8d:a4:e2:51:5c:21:8a:f1:c4:49:fd:44:d1:
                    c5:e8:0e:b8:db:13:60:22:d5:3a:94:50:93:b2:32:
                    4f:48:29:ba:c7:a3:38:03:bc:90:90:8a:54:e3:a3:
                    4e:84:ab:75:cc:63:c9:e9:7c:63:ba:67:55:79:fb:
                    c8:87:5d:93:52:28:91:8e:66:4c:b1:76:a1:5c:1a:
                    25:17:f4:dc:00:ea:bf:d4:ca:d1:ff:a8:4a:99:ae:
                    20:bd:9d:29:00:f5:c2:f6:1c:16:73:06:f1:c0:7e:
                    19:78:70:2e:f0:a8:70:37:a1:b7:6f:c7:0c:78:a6:
                    28:3a:86:9b:e8:25:cd:78:c9:0b:30:bc:09:ce:da:
                    a4:72:7b:3b:7b:2b:2a:93:5f:21:f2:2d:a2:f7:df:
                    d7:4d:39:db:66:de:d7:66:fa:a6:00:2b:3e:0d:59:
                    b4:af:96:2d:70:0c:78:15:5c:57:e8:f8:70:75:b0:
                    d3:27:a0:0a:10:ef:b8:b2:91:0c:a3:5f:03:a4:e0:
                    f9:d2:7c:38:32:f8:fb:62:56:1b:24:47:4e:cf:97:
                    d8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2F:D3:30:83:49:2A:D4:47:8C:AA:2B:82:10:6F:34:36:60:60:B0
            X509v3 Authority Key Identifier:
                keyid:7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:78:6e:6b:e0:85:b7:04:37:5b:e8:0e:1e:9f:07:8f:d0:f2:
         9f:7e:2a:70:e7:8a:85:07:ba:a4:8f:41:af:15:75:28:a2:90:
         89:0d:9e:d4:7e:ff:0a:96:29:d6:f3:55:45:29:df:99:88:27:
         d9:8f:de:34:da:b8:f7:49:6e:04:7c:43:a8:02:51:91:44:0f:
         e8:30:2e:d5:e8:9f:06:cf:33:bb:41:60:39:35:a9:11:f7:91:
         a7:07:79:7c:53:42:70:d7:f7:39:1c:a0:b3:c9:a7:4a:c2:23:
         5a:86:40:80:44:b6:3a:4e:42:c7:88:11:b2:84:04:f2:ad:23:
         4c:db:4b:d4:a7:94:7e:e0:06:56:1f:0c:71:f8:52:d4:bb:fb:
         5b:29:a5:bb:ad:12:65:ed:8f:02:d8:ea:aa:97:a2:27:be:76:
         9b:c9:fc:f0:b5:67:3d:05:d4:c6:7b:62:b5:49:fe:67:60:24:
         0e:9a:3e:30:ae:c1:0d:0b:b7:60:25:56:aa:d0:67:44:4e:55:
         f4:8a:f5:1c:cf:85:66:70:a2:5b:4d:10:2d:fd:b9:a7:22:9f:
         93:9a:d8:12:9e:89:9e:bd:e0:33:06:2e:ab:91:52:d0:0f:8c:
         d4:f8:09:34:8b:6b:9d:f6:12:e1:b5:64:a0:ea:e6:0a:98:d0:
         85:f4:7f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----