Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
File:                     Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft (raw, json)
Hash identifier:          5q9jXK07lubVtFxcOV25bGnM8QEK9w137ol8U+Wa1M8=
Subject key identifier:   F6:86:C0:6F:9E:E4:5E:70:8E:F7:EE:9F:D0:C7:C8:DF:09:52:2C:57
Authority key identifier: 32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
Certificate issuer:       /CN=322d6d4be163123242185dd451f14777974f7c62
Certificate serial:       0193568A5EAC56BC1E0E7C81B87618EA8B97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
Manifest number:          03AF
Signing time:             Sat 23 Nov 2024 01:02:08 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:08 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:08 +0000
Files and hashes:         1: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl (hash: Ov4Ut5PxfQdwFjEs0DzaVk7Fu8w99jMA15Iso8miPrE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:5e:ac:56:bc:1e:0e:7c:81:b8:76:18:ea:8b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322d6d4be163123242185dd451f14777974f7c62
        Validity
            Not Before: Nov 23 01:02:08 2024 GMT
            Not After : Nov 24 01:02:08 2024 GMT
        Subject: CN=f686c06f9ee45e708ef7ee9fd0c7c8df09522c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e1:92:67:8d:63:3a:1c:4c:ea:c4:74:d5:b4:
                    16:8b:f9:27:d8:43:b4:32:0b:66:27:4f:9c:00:22:
                    12:25:62:17:2a:98:97:85:e0:32:92:d7:8e:21:18:
                    68:90:96:2b:3a:4c:f7:c9:72:95:2f:73:5d:85:21:
                    1c:51:23:be:a5:cf:8a:b0:55:a2:3a:aa:04:c9:34:
                    7b:ab:6d:87:c6:5b:e8:2a:72:23:d3:bc:99:54:0c:
                    be:11:dc:52:41:4f:15:1d:de:6a:4d:74:7b:37:df:
                    29:6b:80:39:fc:77:c8:4e:e9:97:d4:87:89:d1:f5:
                    fd:0c:1d:10:c2:23:24:f8:5d:8f:75:d9:93:0a:65:
                    c4:ec:20:f3:aa:34:ad:7c:88:02:48:72:3f:a6:cf:
                    24:71:7e:50:92:90:8f:a8:ac:39:70:18:d3:6d:10:
                    58:a3:a8:f7:f0:0f:4c:6b:f2:4e:89:a3:e9:48:00:
                    f5:8b:52:f1:10:37:c1:30:cb:b2:f7:17:79:97:7f:
                    fd:0d:dd:4a:f4:d5:83:d8:c4:b7:a0:d7:79:bc:ad:
                    f1:75:b1:3d:e2:9a:20:18:dd:db:b9:79:e8:34:7f:
                    af:97:67:da:17:4b:43:a4:62:7d:5b:72:60:8e:6b:
                    14:11:43:ab:c6:ba:c6:88:b0:03:5d:c2:da:ca:66:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:86:C0:6F:9E:E4:5E:70:8E:F7:EE:9F:D0:C7:C8:DF:09:52:2C:57
            X509v3 Authority Key Identifier:
                keyid:32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8f:8b:85:e7:20:46:93:fa:49:dc:1c:b7:5e:53:d0:84:fa:
         fb:64:3b:84:cf:7f:de:ec:37:7c:1f:24:c9:8a:5d:77:5f:ba:
         5c:c5:7b:43:76:39:04:02:e0:cd:41:40:dd:cb:72:ae:a9:9b:
         af:cc:aa:63:fa:18:b5:c1:c7:d7:c0:6b:10:43:60:26:29:c1:
         fd:f8:9b:f6:9b:8b:32:ac:83:90:0c:19:6e:8a:7d:3f:1b:72:
         14:f5:54:4b:6a:fe:38:be:15:f7:04:fc:9a:28:6e:0f:a2:80:
         59:db:c8:33:c7:a6:d9:e1:b3:83:e7:88:44:ba:96:61:78:70:
         b0:12:e6:41:24:f3:97:ea:7c:03:80:cf:05:cb:f6:bf:9f:9d:
         74:20:9a:6f:b7:63:07:fa:67:4f:1f:44:ff:22:bf:f8:5f:73:
         c5:2c:7a:e3:3a:3e:e1:83:05:6a:c2:59:45:30:72:19:82:26:
         13:a7:ff:33:02:19:d8:b4:ce:f0:17:fc:47:f9:90:a5:b2:b4:
         34:f3:99:ae:c5:b9:11:29:74:4c:79:60:3f:09:e1:cb:79:28:
         f3:3a:56:ed:8f:0e:56:01:27:c0:b4:f5:e4:ae:86:60:05:86:
         32:7d:f9:3a:23:da:57:6d:a4:ca:a1:10:c3:c1:7e:72:8d:fd:
         09:23:05:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----