Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.mft
File:                     DtBp69i6c1aNl9ixv7Q84upNqd4.mft (raw, json)
Hash identifier:          nKsp9C5Y+gD9mTWvrHR+Ccl9DxCwihRcvXXw2prIXkY=
Subject key identifier:   91:B2:6D:0B:E6:E9:B3:2E:7E:E7:52:6B:EA:B6:FF:6F:78:EF:AC:0C
Authority key identifier: 0E:D0:69:EB:D8:BA:73:56:8D:97:D8:B1:BF:B4:3C:E2:EA:4D:A9:DE
Certificate issuer:       /CN=0ed069ebd8ba73568d97d8b1bfb43ce2ea4da9de
Certificate serial:       019406B427DDC88D922DC23C3FFB6550A999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DtBp69i6c1aNl9ixv7Q84upNqd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.mft
Manifest number:          13C8
Signing time:             Fri 27 Dec 2024 06:00:57 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:57 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:57 +0000
Files and hashes:         1: DtBp69i6c1aNl9ixv7Q84upNqd4.crl (hash: w1iT+DJEEeq8FDG6bYPGAR5OtUbIcI8cQIAfUBV67xM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DtBp69i6c1aNl9ixv7Q84upNqd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b4:27:dd:c8:8d:92:2d:c2:3c:3f:fb:65:50:a9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ed069ebd8ba73568d97d8b1bfb43ce2ea4da9de
        Validity
            Not Before: Dec 27 06:00:57 2024 GMT
            Not After : Dec 28 06:00:57 2024 GMT
        Subject: CN=91b26d0be6e9b32e7ee7526beab6ff6f78efac0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7c:13:1e:04:0e:21:11:a3:af:0b:c3:83:75:
                    a8:cb:29:2c:d8:c4:d3:f7:7d:78:5b:93:c5:6b:6b:
                    4f:1f:ed:04:50:70:e1:2e:54:af:90:b3:0c:5a:68:
                    88:6c:ef:05:83:8d:81:d3:35:a0:f3:ab:2a:d4:04:
                    b6:a9:24:58:39:01:f3:df:3c:b1:b5:80:de:8c:af:
                    a1:23:34:1f:c9:9c:b9:e5:74:12:32:dd:0c:3b:1c:
                    bc:60:b0:6f:a4:46:fb:c2:73:06:f4:8b:b6:f0:88:
                    91:91:5e:77:73:bb:9f:2a:ca:df:18:d0:6d:c5:07:
                    c8:8a:f7:d7:e7:a4:be:d0:1e:d1:87:b0:9a:83:23:
                    eb:79:91:40:3a:d0:0d:d2:05:b0:99:1a:1d:00:7f:
                    90:5f:44:62:99:fd:a5:33:8d:b0:f5:66:3e:09:1e:
                    43:23:01:81:61:5c:b3:02:cc:61:0b:d0:75:36:08:
                    07:9c:4b:e6:93:72:0a:6b:e7:20:dc:0b:ba:64:d6:
                    98:cc:d6:49:f7:ca:60:be:8c:9a:94:0b:2f:e3:21:
                    1b:1e:50:25:4d:fb:6d:0c:17:b5:c6:62:83:fb:a1:
                    60:24:09:d4:b4:fe:db:57:3e:3e:4e:b2:58:c7:21:
                    d2:69:e2:3b:65:70:e8:1f:4e:49:01:6f:03:9d:06:
                    02:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B2:6D:0B:E6:E9:B3:2E:7E:E7:52:6B:EA:B6:FF:6F:78:EF:AC:0C
            X509v3 Authority Key Identifier:
                keyid:0E:D0:69:EB:D8:BA:73:56:8D:97:D8:B1:BF:B4:3C:E2:EA:4D:A9:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtBp69i6c1aNl9ixv7Q84upNqd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:ce:19:8b:70:6b:2a:14:09:d6:c1:be:ad:45:75:5d:c7:d8:
         df:07:1d:43:e1:74:7e:1b:24:70:3d:11:06:03:fe:03:b2:d3:
         26:b4:69:2c:17:47:99:01:7b:40:b0:25:57:72:50:6b:89:63:
         84:a2:15:ce:16:ff:e9:50:6f:1b:82:03:48:46:a4:17:bc:59:
         3e:ef:fd:75:48:b0:a4:eb:d1:a9:60:d0:31:eb:ec:b3:82:8c:
         fe:c6:db:ab:c5:05:fb:bf:d8:92:dc:dd:76:41:d5:cc:6f:0e:
         cb:45:d4:20:5d:7b:37:4d:ae:f2:46:40:b5:27:4e:e2:f4:b0:
         08:c4:50:1e:41:99:0d:38:39:4b:75:c5:33:4e:ec:25:11:05:
         95:b1:3f:bb:0f:5d:58:af:9d:18:cc:d5:73:0d:be:01:7c:ce:
         a9:07:1f:15:88:d7:f6:d7:03:73:cf:b6:e4:33:d1:a0:6e:df:
         76:2f:da:63:85:12:cf:93:a0:c8:ad:0d:6d:d0:fc:db:a0:60:
         c9:e8:c3:25:d5:7d:dd:b8:ea:42:7a:ed:20:b2:72:4e:49:3a:
         b8:54:c7:72:3a:c2:38:54:1a:7e:50:3d:23:eb:81:7d:35:26:
         28:dd:7d:85:81:d4:ca:09:79:ce:b9:6e:f9:36:4d:73:b4:47:
         a5:75:38:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----