Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
File:                     nnagejNft6He1jqsxRM4rchHJnA.mft (raw, json)
Hash identifier:          /wbL8M/5g+yztiFCZ5ec63ZOeMDMpVaFwPKuzOGBv5I=
Subject key identifier:   FA:88:D2:9E:1F:BD:6F:FB:E4:D1:7D:69:E2:96:53:0C:94:D3:EF:1E
Authority key identifier: 9E:76:A0:7A:33:5F:B7:A1:DE:D6:3A:AC:C5:13:38:AD:C8:47:26:70
Certificate issuer:       /CN=9e76a07a335fb7a1ded63aacc51338adc8472670
Certificate serial:       01936A4691C4C33FA297A9AB034CA3128A00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
Manifest number:          0A4C
Signing time:             Tue 26 Nov 2024 21:00:29 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:29 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:29 +0000
Files and hashes:         1: nnagejNft6He1jqsxRM4rchHJnA.crl (hash: ZbjYGxK9UO9+JBcSGhVdM19q5eWYKxVtB0bOD5viOXE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:91:c4:c3:3f:a2:97:a9:ab:03:4c:a3:12:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e76a07a335fb7a1ded63aacc51338adc8472670
        Validity
            Not Before: Nov 26 21:00:29 2024 GMT
            Not After : Nov 27 21:00:29 2024 GMT
        Subject: CN=fa88d29e1fbd6ffbe4d17d69e296530c94d3ef1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b2:cc:4d:a3:3c:6a:a3:54:c9:e0:06:2f:7a:
                    b5:3c:5f:e6:7d:37:17:1b:c7:4f:b3:51:dc:93:f5:
                    36:b7:36:52:79:d1:cf:9b:8d:ab:e9:ba:68:dd:78:
                    aa:21:39:a7:41:bb:5a:f0:3e:16:e7:a2:e0:ed:92:
                    f4:3f:31:71:06:4d:dd:25:c8:ab:31:af:84:f8:2b:
                    46:2d:f8:6e:a4:62:55:be:d3:db:94:b1:40:4b:a7:
                    ac:60:1f:5d:c6:5f:fd:1a:af:fa:55:f4:84:f8:9c:
                    3a:7a:5b:21:29:9b:48:b0:86:6b:c5:eb:a7:8d:af:
                    31:74:50:90:70:3d:1f:7c:ec:cf:fe:2b:37:2f:17:
                    9f:92:c8:9c:f4:40:b1:d5:97:0f:20:40:33:23:28:
                    b9:3a:7b:16:b0:07:24:21:13:22:5d:db:3b:29:19:
                    52:56:fb:6a:10:8c:2a:0f:0a:2e:f1:70:12:98:dc:
                    58:b9:d4:ee:ce:5a:c0:27:a6:a4:2b:36:b7:6c:9a:
                    ff:1d:7d:44:d0:da:58:f9:b4:2b:17:af:8e:23:4a:
                    4a:3f:8b:91:c7:00:3d:7e:22:69:f3:c4:e9:46:05:
                    9d:b2:6d:b7:b7:bf:cf:45:fd:06:b4:b3:4d:c8:f8:
                    b6:51:f2:fc:40:e9:71:a4:71:ad:36:a9:df:cc:ad:
                    19:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:88:D2:9E:1F:BD:6F:FB:E4:D1:7D:69:E2:96:53:0C:94:D3:EF:1E
            X509v3 Authority Key Identifier:
                keyid:9E:76:A0:7A:33:5F:B7:A1:DE:D6:3A:AC:C5:13:38:AD:C8:47:26:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f5:e4:03:1b:79:84:84:76:5a:8c:71:ea:aa:8a:be:b6:43:
         68:91:09:ad:c1:5f:2b:ea:10:f3:74:15:2a:e4:3c:1a:d5:75:
         a1:07:ff:42:a8:77:43:7e:3d:29:28:83:76:d9:4e:c1:53:d1:
         d5:93:64:88:b2:16:98:57:52:d4:a4:0d:0f:1a:58:41:0b:1c:
         8d:c4:2d:09:13:13:1b:55:cb:64:5f:9f:66:58:a5:52:e5:a2:
         f3:a8:1c:91:49:47:fd:c8:b3:a4:e4:96:03:b6:8f:1a:79:51:
         d0:b6:f0:dd:68:db:10:54:dc:d7:1e:22:21:97:7e:98:b7:11:
         d3:3b:7c:15:0d:46:6d:81:cc:09:e6:b2:e4:b5:73:89:be:db:
         58:a5:2e:bf:c8:00:e2:fb:73:e4:85:9e:ea:25:f3:2b:81:20:
         57:ec:3a:a6:6c:27:08:9c:3b:d3:c1:df:03:9e:0f:b4:9e:bb:
         38:0b:4d:1d:b6:e9:83:f8:43:13:09:73:c4:48:61:9c:f7:73:
         ea:47:69:6c:3e:f9:8f:aa:31:ef:44:6c:a5:25:c7:f1:5e:18:
         2a:32:3c:d0:c9:8c:1a:5c:b6:e4:fa:88:f8:8c:41:01:f3:63:
         38:d6:e0:50:9d:06:ac:45:13:dc:16:78:b7:c9:bf:e1:87:1e:
         e0:4d:b0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----