Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
File:                     VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft (raw, json)
Hash identifier:          HMjLC3WqO0CZmoqbJKkvvg88u8tlGRmZW5FLeQGC7uY=
Subject key identifier:   72:18:B2:2D:15:3C:5C:74:E0:12:61:98:E1:F5:F7:5E:0E:F8:F2:FD
Authority key identifier: 54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
Certificate issuer:       /CN=54126f3a35539a0cd05dee05cf73300609771da0
Certificate serial:       019369D8951B54A5F6206F5BB4C388E4FBFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 19:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:21 +0000
Files and hashes:         1: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl (hash: pACQetFBYrbu/Rgk33CoWD7wI7xFlD7nlDHW1dCOmg8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:95:1b:54:a5:f6:20:6f:5b:b4:c3:88:e4:fb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54126f3a35539a0cd05dee05cf73300609771da0
        Validity
            Not Before: Nov 26 19:00:21 2024 GMT
            Not After : Nov 27 19:00:21 2024 GMT
        Subject: CN=7218b22d153c5c74e0126198e1f5f75e0ef8f2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:99:7f:18:99:cf:ad:35:2d:e8:f4:f7:41:b5:
                    89:c1:1d:bb:75:b9:51:6b:51:45:0a:53:fe:80:6c:
                    94:5c:e2:f1:92:80:c3:58:db:07:2c:90:50:ec:48:
                    c7:a8:03:3b:81:5a:2f:92:71:16:36:3e:8e:46:62:
                    35:89:d1:22:6a:f8:d2:6f:53:c2:b9:e9:dc:e3:b8:
                    51:28:fc:a5:7f:7c:b3:b4:9c:64:10:67:d8:a0:44:
                    14:1d:50:5d:db:a1:22:d2:4e:65:b0:07:e7:56:3e:
                    fa:b6:6c:55:e8:63:7f:c9:0e:09:34:a8:95:88:7a:
                    01:70:f2:48:b5:a0:01:0e:f1:2f:21:a8:96:6a:83:
                    3d:c3:94:ca:ac:06:f1:da:8d:a5:47:31:f9:fe:9f:
                    1e:97:cf:6e:04:c1:b2:b8:90:3c:0a:46:4b:8d:50:
                    83:84:bd:ad:6d:89:aa:ca:5b:c4:85:0c:4b:0a:62:
                    8a:c6:4c:d4:03:dc:f2:9c:38:79:9c:2a:64:af:61:
                    6a:29:b4:89:be:9d:42:b9:5f:51:5f:25:9b:16:d2:
                    00:26:d0:d7:45:a5:44:b9:d8:ba:95:ec:a7:51:f0:
                    5a:af:19:26:66:98:5d:63:53:d4:03:96:b6:cc:1c:
                    03:b2:7f:3b:f8:93:23:9d:e0:ed:75:3a:16:f4:18:
                    c3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:18:B2:2D:15:3C:5C:74:E0:12:61:98:E1:F5:F7:5E:0E:F8:F2:FD
            X509v3 Authority Key Identifier:
                keyid:54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:81:1b:28:96:92:38:ea:71:09:3d:e7:18:ae:c6:2a:d9:71:
         f0:85:70:b5:50:e2:e7:69:bb:a6:80:98:91:8f:b0:5a:cd:98:
         b2:5e:eb:1c:3c:b2:53:d3:19:e0:f7:c4:59:c0:57:c7:91:35:
         bb:70:42:ab:c1:26:c6:bc:35:14:b3:ef:6d:b2:dd:da:59:d8:
         57:9c:04:aa:68:42:44:1d:6f:af:e3:d5:26:1d:12:f5:04:16:
         80:7a:32:c9:d1:bf:bd:42:ec:b7:2a:08:96:8e:1c:50:f2:c4:
         42:26:7a:c6:4a:c8:7b:e1:21:01:5e:e2:0e:a0:7d:ce:ac:9c:
         85:46:c0:96:10:a5:cc:ef:1e:7a:31:68:cb:81:51:68:8f:1d:
         37:f2:9b:b3:38:5f:05:3b:eb:a0:15:44:60:19:12:08:f9:39:
         bf:99:dd:87:95:3a:b8:33:8b:d7:54:34:d2:8c:e5:5e:bd:64:
         ba:7b:88:b1:fa:8c:67:a7:c5:75:12:38:f8:87:28:a4:66:b9:
         42:be:26:38:5d:d2:5a:13:69:2f:e4:0c:0b:da:b7:e1:b4:81:
         f4:77:db:9c:81:49:c2:9b:6b:f7:4e:0c:b7:3d:1e:38:9a:a6:
         86:e9:dd:61:cf:39:6c:23:8a:e8:fe:1f:f2:52:43:2b:c1:45:
         04:e9:53:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----