Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
File:                     F1oeMrvmeal2_GGmA-3NalQHK48.mft (raw, json)
Hash identifier:          sLNfp/0X8ueYXjatFEjvZTnlrX0q3z9lAucFE8WSGUc=
Subject key identifier:   13:EC:EB:32:DA:F4:8F:F2:4D:A0:2E:B9:F0:B7:4D:86:82:19:C5:DC
Authority key identifier: 17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
Certificate issuer:       /CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Certificate serial:       01936A7DB5DFE5C4D569E1FC7B0813D969D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
Manifest number:          0246
Signing time:             Tue 26 Nov 2024 22:00:43 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:43 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:43 +0000
Files and hashes:         1: F1oeMrvmeal2_GGmA-3NalQHK48.crl (hash: mkb2O48XcZZc4rXFYMOd4bT2m3gpDPWj6c3KWOIrs98=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:b5:df:e5:c4:d5:69:e1:fc:7b:08:13:d9:69:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
        Validity
            Not Before: Nov 26 22:00:43 2024 GMT
            Not After : Nov 27 22:00:43 2024 GMT
        Subject: CN=13eceb32daf48ff24da02eb9f0b74d868219c5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2a:ff:16:ee:b6:e7:df:08:04:a1:00:54:17:
                    d6:17:1c:a2:e4:07:37:a9:93:c1:9a:b5:51:13:44:
                    2e:76:c6:05:0e:cc:e2:69:2c:a6:ee:1d:fc:a1:7c:
                    f7:5d:e7:38:e5:d5:ec:bc:7c:b1:c6:31:25:5b:41:
                    91:6b:77:c4:82:a9:4b:74:0a:3f:33:51:8c:40:8f:
                    2f:de:ea:65:a7:50:7a:27:d4:8d:34:ac:ed:f1:63:
                    30:5a:1b:bb:ce:70:38:2e:0e:a5:29:be:27:e3:9c:
                    80:a9:a5:4d:09:4a:9a:dc:a0:8e:21:91:d8:d2:64:
                    96:b4:c1:7f:42:c4:66:d8:8c:61:7d:bb:e5:86:6c:
                    0a:76:84:2a:fb:b4:d6:43:9e:8f:82:cb:5f:f4:0d:
                    03:6b:7e:54:43:81:a2:85:e4:98:0e:e6:5c:97:9d:
                    c6:73:3b:72:3e:23:fe:eb:85:46:bf:9e:92:59:fc:
                    8f:5a:4e:07:71:77:c7:55:5c:7f:0e:25:a9:95:ad:
                    de:d6:54:3c:78:c3:68:5b:36:b7:ff:d0:25:a7:fd:
                    f1:00:e7:e3:2e:12:9c:62:c0:da:89:8b:53:2f:77:
                    6e:25:12:d9:fb:c1:e6:59:8a:99:72:f9:de:cf:7f:
                    c8:34:8b:ce:f7:15:3a:30:0f:6e:7a:9d:5a:9d:d0:
                    5c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EC:EB:32:DA:F4:8F:F2:4D:A0:2E:B9:F0:B7:4D:86:82:19:C5:DC
            X509v3 Authority Key Identifier:
                keyid:17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:15:4f:0d:bf:43:d1:93:b4:db:93:89:e6:de:85:ae:58:a7:
         ed:6c:36:ef:de:25:b6:68:54:50:90:c7:c2:a2:6b:2d:ec:ae:
         6e:c1:62:33:57:2e:27:1c:51:d5:0a:02:3e:a0:70:01:58:be:
         4d:86:5d:5c:6c:e2:aa:13:31:2e:2c:fe:c7:af:27:8a:d3:71:
         32:22:83:07:43:8a:a4:3e:ed:5a:ca:15:ac:b4:2d:3c:4e:fb:
         66:8e:da:2f:d1:c5:ea:3f:39:18:07:76:3c:d4:c2:d4:c1:db:
         32:19:a3:78:8a:e5:55:f6:50:68:3c:e0:d4:0e:7b:91:8c:15:
         79:5d:1e:38:f9:cb:1f:d6:52:58:c2:75:a8:99:10:51:7e:17:
         da:f7:2e:ba:32:f4:98:1c:de:db:c1:26:c5:d9:eb:78:8a:f1:
         2a:67:c4:43:84:3d:6b:3d:1b:b5:16:1c:27:54:bc:5c:47:5c:
         71:80:fb:fa:76:aa:c4:3d:0a:1f:48:8a:bb:d3:0a:e3:15:cf:
         f6:56:f6:54:46:6e:96:4e:11:42:fe:45:4a:23:d5:34:92:cc:
         6f:a7:9a:a7:e4:44:9e:8a:fa:78:a3:e3:57:dc:7f:d5:20:9f:
         89:d9:d7:bb:38:ff:56:49:f6:26:a8:0f:71:d8:f6:3e:de:be:
         7e:05:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----