Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
File:                     7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft (raw, json)
Hash identifier:          k0XDgaokTao2opHZQ+uK1sWvQ6QxD/D+22b53NYoC6g=
Subject key identifier:   C3:2F:8C:46:E0:8D:FA:52:91:C4:C5:0C:45:44:0F:22:48:2F:50:18
Authority key identifier: EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
Certificate issuer:       /CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Certificate serial:       01936A7DAF7B1F295242D549658A71064AFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
Manifest number:          0BD2
Signing time:             Tue 26 Nov 2024 22:00:41 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:41 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:41 +0000
Files and hashes:         1: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl (hash: F8QSFkOx66yOIdczmaHVQwfhQcjNBsSbu5HAH05NP/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:af:7b:1f:29:52:42:d5:49:65:8a:71:06:4a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
        Validity
            Not Before: Nov 26 22:00:41 2024 GMT
            Not After : Nov 27 22:00:41 2024 GMT
        Subject: CN=c32f8c46e08dfa5291c4c50c45440f22482f5018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9c:06:a8:db:a8:65:49:70:81:e7:b1:74:fe:
                    fe:da:f6:cb:19:72:71:30:55:9c:b9:60:a6:a2:39:
                    7c:5c:9a:d4:35:ff:6b:c8:46:fb:17:d7:f6:83:f2:
                    2d:89:f0:ba:9b:b2:c2:5e:4e:d1:87:cb:33:fc:c5:
                    ed:3e:b3:16:91:c4:d6:e2:5e:da:b0:b0:64:39:3c:
                    8c:6d:2d:57:91:85:90:6b:3c:c3:12:05:fd:d4:54:
                    0a:96:d8:60:fe:49:a1:7a:a9:b2:cd:30:eb:3d:ef:
                    68:7e:13:cd:79:f6:91:12:31:dd:0f:57:4d:a6:f1:
                    4e:7c:fb:45:52:ac:e8:de:dd:b5:8e:bb:04:d8:14:
                    32:a0:07:65:5c:18:2a:22:83:d4:b6:13:1d:bb:62:
                    fd:72:fb:3a:77:89:e4:ca:70:5e:25:7f:c9:1a:03:
                    0a:de:65:1e:b5:99:ed:d1:55:f9:9b:a7:27:bc:14:
                    97:c7:5b:5b:cc:8c:6a:3e:5f:a1:28:f0:5a:3a:6e:
                    2d:5e:98:70:e8:82:fe:22:08:d9:a0:2e:c7:f8:de:
                    e1:24:87:bf:0a:28:93:5e:7e:c5:8b:8c:c6:47:04:
                    b5:ed:92:c0:b1:ef:69:5b:af:96:21:db:49:1d:ce:
                    d5:91:b0:7e:74:65:b5:89:4e:12:9a:cb:9b:6b:e4:
                    d7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2F:8C:46:E0:8D:FA:52:91:C4:C5:0C:45:44:0F:22:48:2F:50:18
            X509v3 Authority Key Identifier:
                keyid:EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:de:1c:7b:49:08:95:4e:82:9f:cf:cc:d0:49:c9:5b:dc:c7:
         9a:81:4a:f4:50:90:23:32:33:dd:2f:d6:85:dc:30:df:89:a5:
         f1:c2:63:e7:d5:8c:d1:c5:37:df:23:bd:9f:74:14:50:2c:48:
         97:f3:7f:56:48:2f:af:8d:ac:50:0e:ec:28:73:84:fc:2d:88:
         a5:37:ac:64:3d:d3:07:75:31:36:7d:42:e0:2e:74:a4:f8:72:
         14:ea:9a:31:b4:a1:2a:7b:3e:87:2f:da:5f:b0:1a:f4:9b:ef:
         8f:15:28:ff:79:5d:f0:d4:a9:b2:dd:9b:3d:3c:3d:e9:23:a7:
         e7:4d:e1:05:7c:3c:c1:a8:51:af:9b:f3:eb:6b:a6:2d:70:1e:
         e5:8d:54:55:d4:09:b2:48:da:6c:1d:5d:2d:51:6a:d3:2f:77:
         fe:3f:97:b9:a4:f2:2c:4b:4b:17:85:ac:6a:54:95:cc:57:9f:
         d8:f7:32:fb:ac:41:19:c6:79:c6:1f:6e:47:df:d6:6a:5a:8d:
         0c:c2:83:c5:07:3f:e1:e9:1e:b2:41:cc:8c:96:a0:14:1a:87:
         53:e1:26:87:28:14:49:b3:00:e6:31:44:e8:39:7f:5e:93:95:
         ed:e9:16:d7:0a:4e:8e:7e:2f:bb:24:53:1c:49:10:32:6f:99:
         24:7e:32:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----