Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/db7277-438a-457e-a9e7-027fe3451a38/1/hLBJ87D-hTTmNyFjXrZivHazkrs.mft
File:                     hLBJ87D-hTTmNyFjXrZivHazkrs.mft (raw, json)
Hash identifier:          Ak07sShrS8cdqP0bq5RBvcwrUieQQSqJY5NMPrxl6Kg=
Subject key identifier:   09:6B:A0:82:C8:50:91:C8:81:9F:04:7B:D7:94:58:C7:3E:74:BE:62
Authority key identifier: 84:B0:49:F3:B0:FE:85:34:E6:37:21:63:5E:B6:62:BC:76:B3:92:BB
Certificate issuer:       /CN=84b049f3b0fe8534e63721635eb662bc76b392bb
Certificate serial:       0191FAECDD82D52FD059F7E517E4269E7751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLBJ87D-hTTmNyFjXrZivHazkrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/db7277-438a-457e-a9e7-027fe3451a38/1/hLBJ87D-hTTmNyFjXrZivHazkrs.mft
Manifest number:          0139
Signing time:             Mon 16 Sep 2024 13:01:52 +0000
Manifest this update:     Mon 16 Sep 2024 13:01:52 +0000
Manifest next update:     Tue 17 Sep 2024 13:01:52 +0000
Files and hashes:         1: hLBJ87D-hTTmNyFjXrZivHazkrs.crl (hash: x/UOzNP+U+x8IOd2o9X75CVRdpL6Q/1rLqoJT8wPxc8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/db7277-438a-457e-a9e7-027fe3451a38/1/hLBJ87D-hTTmNyFjXrZivHazkrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/db7277-438a-457e-a9e7-027fe3451a38/1/hLBJ87D-hTTmNyFjXrZivHazkrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLBJ87D-hTTmNyFjXrZivHazkrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ec:dd:82:d5:2f:d0:59:f7:e5:17:e4:26:9e:77:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84b049f3b0fe8534e63721635eb662bc76b392bb
        Validity
            Not Before: Sep 16 13:01:52 2024 GMT
            Not After : Sep 17 13:01:52 2024 GMT
        Subject: CN=096ba082c85091c8819f047bd79458c73e74be62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:b2:3b:f0:76:dc:f5:dc:ad:f3:da:4d:3b:
                    06:9e:92:87:9e:e3:c0:41:c6:67:ca:1a:b0:05:a4:
                    a9:54:6f:e9:ce:fb:10:1d:65:23:bd:f5:57:1d:f7:
                    1d:a6:2b:af:ca:26:1c:d5:48:31:19:6d:d5:a1:92:
                    44:f8:60:a8:ab:50:ee:82:03:1e:4b:81:5b:63:77:
                    06:44:7e:2f:9a:e7:3c:9b:be:a0:ad:2b:23:22:a3:
                    7b:4d:06:07:bc:70:78:35:6e:48:9c:2a:28:10:ac:
                    d8:83:3e:11:f3:51:15:5f:67:95:9c:5b:59:6e:32:
                    25:44:8b:ce:ae:28:b0:b7:0a:be:3d:7f:27:e3:99:
                    1c:92:e6:a4:b5:5c:c4:21:45:7d:2b:e2:25:21:79:
                    f8:61:d3:8c:d8:fc:f6:13:43:d0:bb:84:50:38:5d:
                    94:dd:82:8e:8f:84:84:cb:33:dc:20:69:e8:20:a4:
                    7f:81:f4:78:39:d9:ac:00:f5:89:6a:2b:64:af:e4:
                    ee:87:19:7e:7f:86:55:5d:44:71:64:c0:13:df:79:
                    6a:70:84:74:a9:36:2a:55:7e:94:f4:93:4f:3f:8d:
                    23:24:de:07:35:89:6c:b1:03:4c:15:41:d2:e4:3e:
                    38:8c:e1:d8:4b:fb:82:71:21:8e:08:b7:32:fe:4e:
                    66:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6B:A0:82:C8:50:91:C8:81:9F:04:7B:D7:94:58:C7:3E:74:BE:62
            X509v3 Authority Key Identifier:
                keyid:84:B0:49:F3:B0:FE:85:34:E6:37:21:63:5E:B6:62:BC:76:B3:92:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLBJ87D-hTTmNyFjXrZivHazkrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/db7277-438a-457e-a9e7-027fe3451a38/1/hLBJ87D-hTTmNyFjXrZivHazkrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/db7277-438a-457e-a9e7-027fe3451a38/1/hLBJ87D-hTTmNyFjXrZivHazkrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0d:ff:2e:e5:7c:d6:49:a8:39:13:fe:56:30:43:43:5f:f6:
         49:ff:1a:ea:bb:59:24:ba:e5:ca:6b:75:bf:b1:39:59:51:c4:
         61:20:2c:b0:7b:f0:3d:86:e2:36:00:9a:53:f9:82:f8:e2:93:
         ee:cb:3b:4b:06:66:84:f0:a4:ef:30:06:1b:9e:6c:74:f8:0e:
         30:e5:6e:9f:13:00:d5:90:36:00:9a:56:a3:73:fd:8e:b9:ef:
         39:5f:c6:f7:f2:1a:82:37:8d:74:f2:60:c9:fe:0e:f8:17:39:
         08:14:38:3d:a6:ee:cf:a2:05:38:9b:db:2e:58:7e:49:35:02:
         98:4c:88:0a:16:1c:63:ea:b8:94:93:75:f4:29:ad:79:be:b2:
         5b:86:f3:6b:bb:24:1b:fe:18:29:29:0c:f4:4e:84:ff:ec:ee:
         ef:c0:a2:95:c5:ff:7c:30:78:8e:2a:26:5a:64:68:a0:ea:68:
         6c:0e:5b:4b:42:26:b8:01:a8:6c:e3:e7:7e:b0:2a:db:e9:7a:
         30:d2:28:76:ff:38:e9:14:c6:53:8e:c2:44:7a:9a:6e:7f:c9:
         f3:84:3f:5d:7e:7d:c9:ad:fa:73:bd:cc:1b:7d:d0:37:8f:d7:
         40:1a:a6:d7:b0:d7:9a:d7:21:5d:25:cb:be:7e:b4:dd:35:92:
         ca:71:b1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----