Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
File:                     qxSu-APVDXALuYUq6LsrtAkmFqU.mft (raw, json)
Hash identifier:          vUi4Eqj4HyHGKtg0u16va01c66VV0XAg1tStIPr4OKk=
Subject key identifier:   14:40:04:3E:A0:13:2B:68:D1:98:77:D4:A8:E3:E7:1C:C0:02:57:67
Authority key identifier: AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5
Certificate issuer:       /CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5
Certificate serial:       01936A4695E07DD53606A3E565E61BAFCF8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
Manifest number:          0A93
Signing time:             Tue 26 Nov 2024 21:00:30 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:30 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:30 +0000
Files and hashes:         1: qxSu-APVDXALuYUq6LsrtAkmFqU.crl (hash: LP7wcMpyXn2tRdDAkfyCVv2wQC73URRU30XfKGAdFhk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:95:e0:7d:d5:36:06:a3:e5:65:e6:1b:af:cf:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5
        Validity
            Not Before: Nov 26 21:00:30 2024 GMT
            Not After : Nov 27 21:00:30 2024 GMT
        Subject: CN=1440043ea0132b68d19877d4a8e3e71cc0025767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:8d:79:b8:5e:a5:77:7d:29:8e:cc:ce:cd:
                    3e:56:4b:04:23:d4:51:b2:60:02:c4:51:d1:05:92:
                    b4:72:32:86:fa:44:df:72:aa:ca:0f:27:ff:c2:8a:
                    a9:f3:b5:b1:3c:bf:83:fa:25:de:08:2b:bd:b3:94:
                    12:69:af:da:79:50:47:16:94:46:f1:e0:6f:64:b9:
                    94:aa:49:2b:23:6d:75:95:25:56:aa:75:6b:2b:4b:
                    95:8c:11:b8:66:9e:70:9a:be:41:11:03:5f:33:0f:
                    f0:11:07:2d:fa:68:76:76:d6:f7:1f:0c:1d:f7:4a:
                    f4:ca:b3:2f:1b:59:b8:46:c9:ee:a0:08:a3:4b:a8:
                    ed:79:85:5f:ee:91:45:68:b5:17:91:80:0a:be:78:
                    c4:a9:c3:37:89:74:63:8f:6c:4f:b4:5d:7e:d7:74:
                    bb:d0:e9:6d:8b:d6:2d:6e:ae:fe:8d:5b:f3:3b:5a:
                    1a:3f:47:0a:23:17:94:ea:20:e7:76:fb:5a:9d:2d:
                    ec:09:9c:93:19:34:db:7e:1f:bb:b3:4f:bd:24:2e:
                    cb:a9:9e:51:8a:41:2d:ab:2c:b7:0b:29:f5:d1:5a:
                    b8:35:63:aa:d7:15:07:ae:ba:0a:a0:43:72:96:40:
                    77:d0:cd:ca:bd:01:c7:05:6d:c0:b3:5c:5c:e7:65:
                    46:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:40:04:3E:A0:13:2B:68:D1:98:77:D4:A8:E3:E7:1C:C0:02:57:67
            X509v3 Authority Key Identifier:
                keyid:AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e5:a0:1e:0d:a4:3b:4c:c1:14:ca:a7:c2:e1:8e:c7:05:2e:
         d5:a6:24:06:4f:ed:47:61:13:19:d6:d2:71:6e:2b:55:5c:b7:
         55:6b:b5:2f:90:7a:8c:66:90:63:61:35:b0:5f:06:7c:50:47:
         e4:1e:68:29:a8:c1:3c:58:05:7c:7c:67:0e:31:e2:0b:d8:87:
         b6:d4:77:96:3e:18:ea:b8:82:73:0d:6a:fb:5a:7e:5b:27:50:
         f6:ea:33:aa:d6:8d:6f:5a:b1:91:33:e5:7c:b5:93:b3:5e:4d:
         60:f7:f0:dc:80:f0:99:da:37:92:54:47:53:ae:08:c9:a0:c2:
         9c:b6:4f:a4:70:27:25:85:6f:3c:a7:17:e2:bc:d0:c4:31:47:
         8d:7d:47:08:1f:5a:71:8b:ac:f2:16:18:b1:e9:a2:2b:5f:e9:
         bd:8b:24:08:f9:05:97:4e:0f:7c:3a:2c:08:5b:49:3b:d5:1b:
         ba:6d:a2:ac:e2:4f:3a:4c:46:a1:2d:f0:83:58:f1:1a:65:9d:
         28:07:ee:0e:ee:24:24:91:b5:a3:9c:27:6d:29:a3:5f:52:a3:
         23:5c:b5:da:78:f7:87:80:bb:25:fb:eb:3b:a9:d0:66:40:3e:
         f7:e3:18:cc:ed:59:97:00:40:97:80:b0:15:24:17:d7:e9:6f:
         ce:92:00:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----