Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File:                     JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier:          V/u11dYxEk6bFY+QDbStobibfUg6/sExxVyMvs5I3Pc=
Subject key identifier:   95:BF:C7:70:D9:41:7D:7E:48:F8:EC:1B:15:92:6F:F6:25:34:A0:D8
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer:       /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial:       019369D981ED8EB848D087C21F38F3CF547C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number:          1377
Signing time:             Tue 26 Nov 2024 19:01:22 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:22 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:22 +0000
Files and hashes:         1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: Ds6Zqjwt4FW/wY4whjthCdLOZSF8TFhaI/cVm3HOsCY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:81:ed:8e:b8:48:d0:87:c2:1f:38:f3:cf:54:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
        Validity
            Not Before: Nov 26 19:01:22 2024 GMT
            Not After : Nov 27 19:01:22 2024 GMT
        Subject: CN=95bfc770d9417d7e48f8ec1b15926ff62534a0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2f:d2:e6:ff:93:95:ec:48:aa:63:f2:31:01:
                    fc:16:fa:c8:c3:5b:9b:16:e4:bf:a3:ed:7b:74:79:
                    9e:2f:e3:4d:d2:37:7e:fd:2a:d6:6f:c9:83:65:ae:
                    2c:63:31:23:73:22:54:63:29:23:76:cc:34:f1:61:
                    94:58:7b:40:c8:39:30:2f:6e:b4:0d:21:62:08:71:
                    5b:90:a5:25:a7:67:40:03:f4:04:fa:68:0c:a1:2d:
                    b3:e7:73:78:a2:c6:ee:6f:40:cb:f2:f1:ee:5e:e9:
                    13:d5:72:f2:0c:70:bd:61:78:fc:a8:6a:24:28:3d:
                    1e:05:f8:d9:ae:3a:54:e5:ae:fc:75:c2:48:42:a6:
                    e1:9f:9b:3d:1e:4c:99:7a:0f:c3:39:2f:36:72:3e:
                    a1:2f:d3:af:58:3f:ac:77:07:af:c4:3f:95:08:e7:
                    eb:89:34:c5:fb:63:5c:88:47:fa:9d:dc:4d:74:58:
                    c1:2b:10:2e:65:1a:9b:9a:62:35:91:ed:4d:d3:32:
                    f1:42:c3:96:4f:e6:2b:ce:b9:13:1e:1c:3d:92:2e:
                    bc:70:43:34:e2:b9:85:58:5c:ba:ee:62:46:72:35:
                    33:f3:47:fb:3e:77:d9:86:4d:ee:6d:c1:0c:0d:6c:
                    bb:7e:a7:6a:92:26:32:ec:1d:da:71:6a:4b:3c:76:
                    28:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BF:C7:70:D9:41:7D:7E:48:F8:EC:1B:15:92:6F:F6:25:34:A0:D8
            X509v3 Authority Key Identifier:
                keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ab:95:c7:09:92:9c:d6:db:e4:ce:1a:5a:5a:ec:d7:b9:a2:
         93:94:e4:8a:28:df:85:ed:01:a6:57:73:5b:f7:4b:c0:7a:06:
         15:2c:76:ee:9b:93:f0:21:b8:eb:a9:3a:4d:5b:68:10:eb:8e:
         4e:5e:d2:91:59:a0:d6:09:93:54:bd:df:0f:d2:7a:c5:42:62:
         70:5c:b4:e9:5e:e7:78:2a:7f:3a:cf:6e:8e:82:cb:b1:da:f3:
         e1:25:c0:55:41:55:f8:0c:cc:3b:0a:7c:8a:98:d9:2e:51:77:
         ba:a3:f4:4d:f7:79:7c:37:ad:77:3b:f4:ef:9e:15:a3:b0:9e:
         e3:2f:aa:90:93:09:a1:1e:ff:e6:1e:ec:56:fd:db:6d:b0:30:
         68:a7:ce:22:bf:33:86:84:88:16:f5:9e:e8:ed:28:10:07:e5:
         20:5f:48:5d:3a:54:0e:1b:2d:a2:62:bb:6f:1e:58:0f:de:e2:
         a4:12:c0:35:df:6e:db:f7:7f:0c:b3:ff:27:11:1f:2d:25:80:
         ec:63:ce:61:48:04:31:e7:e2:62:82:9b:3e:07:99:23:d9:c1:
         7f:de:72:5f:59:58:c8:22:13:d6:71:56:b1:22:64:fb:17:8f:
         7a:b9:49:1c:98:67:84:93:61:0f:6d:da:e8:95:e1:f2:23:0c:
         15:7a:74:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----