Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
File:                     EDfew086MutlAvFmKoKiD4teohw.mft (raw, json)
Hash identifier:          AXT8rZEUpgJfs+a5URbmOjpgIPPphp6Rhgpwv248Fio=
Subject key identifier:   99:3F:B2:AE:92:F0:39:5C:4F:16:35:5D:3D:3A:7D:75:B5:9D:01:6B
Authority key identifier: 10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C
Certificate issuer:       /CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
Certificate serial:       019356F71C28407122474FA25E6F444B47CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 03:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:55 +0000
Files and hashes:         1: EDfew086MutlAvFmKoKiD4teohw.crl (hash: McBvvIwdV5RmJKD6TcALKM/6qHxzyeaS4NZnNEQU/OY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:1c:28:40:71:22:47:4f:a2:5e:6f:44:4b:47:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
        Validity
            Not Before: Nov 23 03:00:55 2024 GMT
            Not After : Nov 24 03:00:55 2024 GMT
        Subject: CN=993fb2ae92f0395c4f16355d3d3a7d75b59d016b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:a8:be:c6:44:c7:95:33:85:ce:6a:30:17:
                    92:e9:8e:6e:45:19:a1:c7:f0:92:b5:1c:63:14:68:
                    75:6b:5e:a1:91:6f:46:c1:1a:27:04:0d:f6:39:00:
                    34:fe:6f:7e:a3:50:0f:a6:92:1b:6f:bb:91:3e:5a:
                    fa:c9:75:a7:f5:64:aa:4f:f4:a0:0f:3c:83:4b:3d:
                    9d:0c:da:dc:b5:98:8d:d5:fc:6e:06:a5:d0:96:03:
                    ec:6e:83:b2:dc:df:bd:8a:5a:9c:ae:b8:87:d6:4a:
                    92:5b:da:b1:c4:48:e3:d7:7e:46:04:95:48:20:e7:
                    fc:90:6f:50:3a:eb:44:80:f7:11:03:36:73:93:12:
                    bd:c6:69:5d:82:29:8f:88:4c:83:7b:e1:a2:08:96:
                    9d:82:59:00:8a:fb:50:a3:3c:07:5c:84:dd:32:f2:
                    47:fc:a4:b2:20:ff:82:da:83:51:cf:9f:90:b5:6e:
                    51:39:1c:13:a6:4f:8c:ee:7e:bb:7a:e7:c8:e6:25:
                    d7:f7:1b:de:85:ea:84:4f:19:49:3d:f5:32:7d:8c:
                    35:ad:85:10:2f:89:91:6c:05:87:8c:d7:9e:41:ef:
                    20:d8:93:bc:9e:1e:86:02:a6:53:91:d9:4f:5b:48:
                    a5:e3:8b:a5:08:f9:4d:11:f1:42:85:87:64:4d:c2:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3F:B2:AE:92:F0:39:5C:4F:16:35:5D:3D:3A:7D:75:B5:9D:01:6B
            X509v3 Authority Key Identifier:
                keyid:10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e2:39:48:47:5d:1b:90:4f:09:83:dc:c3:81:c5:bf:e3:8a:
         b2:49:bd:65:55:51:78:ae:c4:53:d0:4f:8c:8e:63:a1:7c:b4:
         2c:41:84:07:a8:b1:fd:d0:c4:0b:00:0e:19:da:7d:29:a6:19:
         f1:d5:52:9b:cb:d0:9f:28:9d:bd:70:ee:c9:14:2b:d7:19:55:
         0c:06:ea:76:9a:60:e1:83:77:57:71:10:cf:4f:5b:e5:44:f7:
         2a:f5:07:1b:9f:39:4c:19:2b:68:e5:7f:03:4a:e7:51:51:4e:
         0a:f6:a3:1d:f5:43:10:84:88:6b:63:1a:3d:74:15:76:57:d9:
         82:44:32:ad:42:c4:92:f1:b1:80:44:32:2f:0a:9a:77:48:1e:
         03:5b:dd:53:6c:ba:af:4f:fd:f1:94:34:06:ed:d0:e0:c2:ea:
         33:a5:3e:92:65:ac:51:27:4f:b5:31:a0:2e:a0:67:8d:26:a6:
         a2:86:c8:34:de:00:79:44:34:fc:d5:20:ed:d3:7c:c3:75:1c:
         72:36:a5:69:bc:8a:48:93:47:36:81:fc:b7:98:08:8a:5d:c7:
         12:e7:fa:c0:fb:db:01:ea:ea:b5:77:11:d6:93:e6:68:70:db:
         26:9c:ad:0b:15:19:a5:9a:c1:a8:42:5b:ab:03:11:c1:56:4a:
         42:a3:c2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----