Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
File:                     j31CCyNDzZHsI_UImoNC6J1tkWU.mft (raw, json)
Hash identifier:          ngAai5VOxP86xjj4H4KYWiZ0YzEDJhaSJ1x96kaIIiw=
Subject key identifier:   3E:70:24:A9:89:89:FA:AD:96:BA:4C:FD:8E:B7:ED:C1:87:0A:8D:53
Authority key identifier: 8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65
Certificate issuer:       /CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
Certificate serial:       019369D8DFB8D9BB10460D4076BB6DA7CE70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
Manifest number:          0CE1
Signing time:             Tue 26 Nov 2024 19:00:40 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:40 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:40 +0000
Files and hashes:         1: j31CCyNDzZHsI_UImoNC6J1tkWU.crl (hash: BBc7ImfLUArgmi357HtKE9nyL+YlMmFeS4SCti4fNzI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:df:b8:d9:bb:10:46:0d:40:76:bb:6d:a7:ce:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
        Validity
            Not Before: Nov 26 19:00:40 2024 GMT
            Not After : Nov 27 19:00:40 2024 GMT
        Subject: CN=3e7024a98989faad96ba4cfd8eb7edc1870a8d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:a7:bc:c9:0c:cf:c0:ed:42:76:0e:4f:16:
                    c1:07:1b:97:0d:b9:0d:6f:ff:82:af:cb:89:cd:25:
                    7f:fb:b3:da:4b:7d:92:42:9f:8d:7a:11:b4:59:98:
                    b9:03:27:55:cd:20:3d:37:59:05:0c:4a:1b:7d:27:
                    00:57:96:97:b1:67:26:4d:1e:ac:6c:13:89:7e:ff:
                    c8:f5:e2:a9:57:09:f8:47:9b:d9:04:e0:15:df:22:
                    bf:06:53:a6:b2:6d:ee:2d:fa:f4:a1:03:d8:67:df:
                    e6:a8:f3:82:eb:93:57:8c:f0:a6:8d:07:51:80:e8:
                    bc:91:ee:3c:15:f3:80:32:0b:56:dc:ab:48:be:98:
                    25:e4:fb:ec:8c:53:10:91:de:e2:78:41:e4:62:f2:
                    eb:bb:1d:40:d1:24:85:e0:8a:40:9d:78:5b:2b:f1:
                    e3:56:b2:8f:dd:56:0e:b5:da:c9:94:e7:d3:af:1e:
                    53:07:97:91:76:07:ef:b6:7e:81:de:3d:e4:3f:25:
                    c5:b8:dc:0b:b2:b1:5e:94:9b:ac:da:8e:9e:d8:73:
                    6c:03:ce:56:4c:a8:e4:c4:66:cb:7a:33:87:c7:a8:
                    13:1d:06:5a:cb:e7:a7:fb:5d:fd:1b:f2:f6:3a:9f:
                    5f:c8:4e:bf:fb:74:d4:f2:74:29:20:63:35:c0:30:
                    63:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:70:24:A9:89:89:FA:AD:96:BA:4C:FD:8E:B7:ED:C1:87:0A:8D:53
            X509v3 Authority Key Identifier:
                keyid:8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:20:29:73:63:3d:d1:4d:b5:06:ff:5c:d6:6b:a1:89:5d:6d:
         e6:42:ba:e6:06:de:e1:fa:f0:fb:9f:c8:ec:67:98:d4:5e:08:
         4c:12:78:41:85:2b:d9:fb:7c:dc:04:48:97:a2:67:fc:89:d1:
         d8:0a:7d:42:63:b4:0b:a9:0b:12:d9:5a:ee:ca:66:05:db:1a:
         b3:8c:cc:c9:c9:bf:2a:ce:73:cc:d8:e7:14:d5:6c:9a:20:de:
         d1:8f:9c:2f:9e:3e:f5:94:06:0e:04:2e:41:8f:fd:9c:f6:c9:
         10:1f:08:a0:c8:65:83:cf:c2:09:76:36:f8:b0:de:4f:1a:d7:
         23:06:b5:61:ea:1c:99:63:2c:28:c8:1f:58:28:47:36:e7:8b:
         ab:8f:a1:3f:60:28:a8:fc:6c:aa:45:b0:2d:41:73:78:0d:d6:
         eb:31:99:63:69:f3:b2:9d:ea:8a:92:aa:c6:2f:5f:0b:48:80:
         c0:87:cb:80:42:04:9e:af:d0:86:fd:9e:a9:c4:19:27:a3:b0:
         f5:e7:32:91:3e:82:c6:97:ff:45:77:59:fe:68:8f:8b:8a:36:
         0a:6d:48:a4:81:07:88:ef:4c:6c:90:54:cd:bd:a3:b1:ac:c3:
         a2:3c:72:d8:84:41:77:3c:4a:87:f1:81:73:59:01:1d:cf:60:
         e5:1f:82:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----