Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
File:                     gTpCg40uRe1drUEUYG2XKaZQHSM.mft (raw, json)
Hash identifier:          60N09IDGQX7w3xAy0Lg7BsDo9X6ItZDZEr4ar2UNKS4=
Subject key identifier:   BB:D6:FA:D8:9C:16:7B:6D:15:18:41:D4:7B:AB:C5:EE:52:3A:7C:F6
Authority key identifier: 81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23
Certificate issuer:       /CN=813a42838d2e45ed5dad4114606d9729a6501d23
Certificate serial:       0193647B7DCB4C54A3EC43D1CAD70732DC32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
Manifest number:          0BD7
Signing time:             Mon 25 Nov 2024 18:00:34 +0000
Manifest this update:     Mon 25 Nov 2024 18:00:34 +0000
Manifest next update:     Tue 26 Nov 2024 18:00:34 +0000
Files and hashes:         1: gTpCg40uRe1drUEUYG2XKaZQHSM.crl (hash: Zq2P2tUoK86s8ljH5MY1I5CI7+FsavTbb4kZu1APJN0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:7b:7d:cb:4c:54:a3:ec:43:d1:ca:d7:07:32:dc:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813a42838d2e45ed5dad4114606d9729a6501d23
        Validity
            Not Before: Nov 25 18:00:34 2024 GMT
            Not After : Nov 26 18:00:34 2024 GMT
        Subject: CN=bbd6fad89c167b6d151841d47babc5ee523a7cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:63:b9:28:23:19:0f:cd:81:9d:95:c8:93:
                    e8:e8:fd:c0:81:eb:d1:e5:36:66:e1:ae:29:58:a5:
                    9a:4f:ba:44:06:9b:0f:e1:b2:09:bd:dd:a1:cf:35:
                    ad:ce:0b:6b:2b:f9:27:7b:fb:bc:62:0f:09:31:2b:
                    58:4b:91:17:7c:43:be:96:d7:29:3a:33:fc:20:c5:
                    fe:f5:73:20:a9:61:f8:55:43:98:99:70:8d:a3:ff:
                    15:27:15:9e:10:6b:ba:e7:f0:9c:06:c3:04:61:64:
                    b3:a4:1b:2d:80:86:6e:91:e7:dd:32:a6:82:bb:c6:
                    c8:b6:4a:16:69:34:f8:cc:ea:0f:dd:98:36:3a:43:
                    86:93:2f:3f:27:ee:6d:63:97:31:4d:35:18:90:90:
                    89:53:9e:10:fb:40:e9:fd:fb:67:67:83:0e:c7:65:
                    74:d1:dd:dd:83:a0:38:12:df:f0:11:ea:5c:bc:80:
                    f0:a9:e5:e2:b0:59:ea:e9:94:b7:f8:78:81:ba:6a:
                    65:1a:65:4b:49:7f:95:31:60:e1:d0:aa:76:44:96:
                    2e:80:26:c4:85:ef:55:34:c6:b8:2f:2c:f3:34:fb:
                    17:c4:4f:aa:53:30:bd:4c:81:26:e8:51:94:97:48:
                    6d:e9:96:a3:95:de:54:9d:5f:2f:a4:4e:0f:12:c1:
                    81:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D6:FA:D8:9C:16:7B:6D:15:18:41:D4:7B:AB:C5:EE:52:3A:7C:F6
            X509v3 Authority Key Identifier:
                keyid:81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a3:24:b8:05:02:8a:aa:e9:7a:b5:30:b5:98:56:21:13:47:
         06:1e:0c:f5:28:7a:ef:91:b8:cb:59:b5:0a:9f:f8:97:0f:e5:
         24:ff:5c:40:08:de:5a:30:58:09:dc:ec:9a:ed:b7:73:32:1a:
         c8:a1:cd:e5:ba:34:18:37:06:09:72:e8:ea:57:7a:a5:d9:54:
         2e:a2:3f:4e:02:19:96:45:55:72:0b:d7:ea:f3:15:99:cf:76:
         34:61:91:ee:00:4c:a5:7d:17:49:6a:d0:c7:80:82:12:d0:91:
         a5:8b:da:73:8d:59:1f:2c:7f:81:eb:94:a9:1f:13:d1:35:78:
         78:a2:2b:99:f1:58:a1:d5:15:3f:7e:a3:f5:34:86:e7:57:fe:
         bc:d4:fe:18:3c:38:91:b9:ce:a2:5f:13:62:5b:af:d2:4b:9d:
         03:2f:e6:d6:dc:3d:96:37:86:fe:8e:80:97:4b:2c:f2:4d:fb:
         b0:7d:41:3d:73:2f:8a:36:03:24:f1:0a:b6:02:c4:6c:63:b4:
         2a:d3:fd:ab:28:a9:ae:f6:67:e1:f7:76:f3:8b:3a:51:71:39:
         dc:9f:07:b1:b9:5c:b7:c2:4b:43:6f:40:6c:48:17:a0:93:7d:
         17:90:74:96:f8:09:ac:8d:5d:fb:99:1b:0b:6d:8e:6d:d2:b5:
         94:52:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----