Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File:                     kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier:          fLzkv+iCFlUjbWKHk1QqU/rCdnI4VEMPTWvmmSF8z4g=
Subject key identifier:   72:7C:00:37:60:75:C9:98:2B:41:99:AF:32:73:D7:75:0F:9C:C4:55
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer:       /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial:       01936A0F8AD66B42FAE9998826FE489269C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number:          47
Signing time:             Tue 26 Nov 2024 20:00:23 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:23 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:23 +0000
Files and hashes:         1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: LhwRjEcSiMBzxhB/REKYKvbXGPNHtGMYNjbwVUEf3v8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:8a:d6:6b:42:fa:e9:99:88:26:fe:48:92:69:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
        Validity
            Not Before: Nov 26 20:00:23 2024 GMT
            Not After : Nov 27 20:00:23 2024 GMT
        Subject: CN=727c00376075c9982b4199af3273d7750f9cc455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4b:0a:f3:da:91:2d:23:b4:60:fe:ac:03:2f:
                    42:95:e2:2e:d6:81:2f:33:11:2a:8b:b2:5e:5c:6b:
                    94:06:06:9c:20:5d:d1:f0:1f:a8:2d:14:b3:11:38:
                    5a:12:e8:fc:fc:07:ac:92:f4:fd:61:bd:33:21:9b:
                    45:fe:43:1b:54:11:6e:d5:0b:31:b9:b2:14:e8:cc:
                    78:ca:0d:c3:ae:97:80:53:9e:1f:dd:b2:78:7f:ea:
                    a2:35:54:87:d7:38:6c:c1:d9:50:e2:d1:ef:df:76:
                    3c:1e:3d:36:a1:04:cc:b3:58:b7:af:24:9d:70:b3:
                    6f:4d:b7:c7:dd:40:f7:ba:b8:6e:c9:cd:1f:0e:78:
                    b4:d2:e2:f7:fc:ee:36:8b:56:e1:da:02:6f:bd:38:
                    bf:c0:77:3d:5a:05:20:a6:2a:3d:57:1b:b8:74:b5:
                    d9:ea:fb:15:42:f1:9b:b8:05:67:2d:4b:b0:37:75:
                    43:80:99:87:0c:b2:8c:27:98:85:b2:be:18:54:d0:
                    5b:f0:56:3e:5e:6a:67:f4:5b:62:2b:64:ed:5b:ef:
                    0e:2b:c0:61:bd:c5:a4:36:42:20:bb:da:fa:2a:b2:
                    2a:b3:90:5e:10:a5:94:69:05:41:5d:e2:3e:fb:d6:
                    ad:b6:21:c0:27:ea:ba:0c:f3:10:41:27:ea:a2:c0:
                    2f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7C:00:37:60:75:C9:98:2B:41:99:AF:32:73:D7:75:0F:9C:C4:55
            X509v3 Authority Key Identifier:
                keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ff:1b:f5:5b:41:09:98:11:21:24:b7:f1:56:64:e7:60:71:
         fb:77:9f:cf:8f:94:24:23:52:67:6f:1e:ab:a1:87:ec:ab:95:
         26:72:f7:3f:0d:bb:ab:b6:7a:27:8f:ca:3c:61:26:63:5d:e6:
         24:9f:20:70:11:57:16:3d:1a:a1:5e:14:98:fa:d2:50:66:0f:
         b7:2e:f9:58:7b:29:3f:a0:96:1f:18:aa:7a:7e:d8:dc:da:27:
         29:12:cd:61:9b:3f:58:03:cd:7c:1c:10:b4:4d:b1:7f:54:7f:
         7a:52:00:5c:ab:0c:44:0e:72:68:15:49:3f:bd:10:c6:90:97:
         a9:e2:cd:97:ef:30:84:9c:fb:57:77:96:36:09:a1:c2:93:bb:
         e6:fb:d0:34:67:2a:3a:1e:02:4b:5e:af:fb:e6:9e:96:fc:29:
         d7:bd:46:8e:15:70:f3:50:9e:14:f4:5f:ee:ea:8e:71:74:45:
         86:80:df:d2:61:70:1e:ba:e4:b0:b5:4e:b1:e2:f5:4c:76:68:
         63:bc:c0:a6:b2:b6:cd:d4:7d:28:b8:80:d2:4e:31:02:77:a0:
         92:3f:fc:e0:ca:1e:3f:06:25:c9:ac:c7:de:27:ca:65:a2:53:
         03:0f:b1:fa:d9:cf:c1:ea:78:6f:88:38:9d:6c:e5:82:2d:17:
         3a:a9:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----