Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
File:                     _CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft (raw, json)
Hash identifier:          8WAs26kVylsmtRfpIxxNDymzZme51tgEiDX6TBhK9CU=
Subject key identifier:   85:D6:94:2D:7B:89:BB:6F:7D:6A:58:2E:E1:5E:99:F2:81:8E:60:70
Authority key identifier: FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
Certificate issuer:       /CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Certificate serial:       01935508BD614A504A6D03A95AFA0C2C2C4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
Manifest number:          0EEF
Signing time:             Fri 22 Nov 2024 18:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:56 +0000
Files and hashes:         1: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl (hash: JOYQFWb+7Go8DsRTErJGNDogUt2/BIuiE6BGOmXsxZs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:bd:61:4a:50:4a:6d:03:a9:5a:fa:0c:2c:2c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
        Validity
            Not Before: Nov 22 18:00:56 2024 GMT
            Not After : Nov 23 18:00:56 2024 GMT
        Subject: CN=85d6942d7b89bb6f7d6a582ee15e99f2818e6070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:09:82:05:73:8b:e3:46:02:fa:3d:0a:35:63:
                    10:da:a7:99:b8:34:89:45:17:7a:67:3b:dc:89:50:
                    ff:d5:38:8f:bd:5d:e1:6e:ab:4a:b3:0a:b6:4c:db:
                    90:63:5d:71:08:7d:c2:c4:37:26:08:68:81:9c:32:
                    3b:67:df:4e:79:59:5c:50:39:03:b1:56:23:6c:08:
                    69:24:23:05:de:2d:fb:dc:9a:ec:27:cd:6e:7c:64:
                    25:53:b8:5c:c5:86:06:2d:21:a5:2f:b2:42:bc:59:
                    11:82:56:70:6d:39:3f:c5:25:a2:eb:91:9f:9f:39:
                    f4:86:67:0d:74:62:b3:8e:50:5d:86:9d:ca:4a:de:
                    fd:46:e6:ec:0f:be:e2:54:16:b6:02:a8:9f:a8:69:
                    01:19:39:5a:0e:8e:8c:6b:74:35:71:c5:90:6e:5b:
                    68:c6:5c:a0:0d:4a:18:95:0a:a7:c7:5d:59:2a:0e:
                    da:f8:70:05:a2:11:b0:a1:43:66:64:c6:7a:a2:dd:
                    37:01:09:fc:bc:92:e0:aa:40:de:20:1e:cd:21:c5:
                    7a:38:0f:bb:8b:7a:68:94:42:7d:fa:42:ff:2f:a5:
                    0e:d5:b1:bf:65:bf:ae:56:09:37:c0:8b:88:74:43:
                    6b:24:b2:b5:57:98:81:7a:ce:88:45:ee:85:8d:6a:
                    50:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D6:94:2D:7B:89:BB:6F:7D:6A:58:2E:E1:5E:99:F2:81:8E:60:70
            X509v3 Authority Key Identifier:
                keyid:FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ea:59:3d:16:cd:a6:1a:e7:45:87:63:f0:bb:22:4c:80:28:
         e6:0e:62:91:ad:2f:14:84:50:e6:f8:c1:28:f0:f9:76:f4:b0:
         8b:0a:a6:92:6f:04:c6:1c:e8:51:ad:62:2c:f8:e2:a6:ea:63:
         b6:02:59:88:e2:c1:b4:d3:2f:b5:88:2e:c5:5e:88:88:aa:be:
         d5:7d:d7:d5:36:d0:91:ab:ef:39:07:3a:de:b5:f1:8c:fd:46:
         98:ba:9d:bc:76:6c:51:84:7e:72:c4:9e:b3:8d:76:b1:76:d8:
         c4:f7:da:f8:ee:d1:8f:27:d8:ad:52:0e:0e:e8:c6:8b:76:84:
         fa:8c:88:12:1e:da:59:3e:07:83:63:df:57:d9:dd:ab:c9:b9:
         60:15:15:1f:24:06:c0:df:ed:44:3d:86:67:e6:1a:72:59:8d:
         08:71:31:8f:90:b5:26:a7:e0:53:d3:92:c2:0b:09:fa:c5:ff:
         ae:46:85:77:48:00:87:89:d1:19:eb:d6:8a:dd:f2:a8:57:84:
         a1:c8:ce:96:09:f6:08:30:b4:2b:43:d0:8c:3b:c0:7a:96:36:
         99:f7:4a:9b:e3:ca:9f:5e:68:c4:c7:5f:d9:59:88:55:cb:da:
         f4:ec:6e:95:84:6e:34:6e:e9:24:e5:a8:a9:e6:f3:20:c7:20:
         79:8f:68:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----