Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
File:                     AclpL7GkCf800a87grjj2mRnXDI.mft (raw, json)
Hash identifier:          ffEXTmi1lfIXz6No0shWIdp52DFTCwi4f53mLpAphoM=
Subject key identifier:   05:ED:7A:0F:DD:DC:6A:1C:1D:B9:FF:72:C1:FB:EB:EC:71:4C:7F:CD
Authority key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
Certificate issuer:       /CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Certificate serial:       019406468D623DC9377ECE078457F1954C15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
Manifest number:          0941
Signing time:             Fri 27 Dec 2024 04:01:14 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:14 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:14 +0000
Files and hashes:         1: AclpL7GkCf800a87grjj2mRnXDI.crl (hash: U8N4WPTCgC7P1N0w4w0cWWWUs1y4CnSXOOU0yCrjLK4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:8d:62:3d:c9:37:7e:ce:07:84:57:f1:95:4c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
        Validity
            Not Before: Dec 27 04:01:14 2024 GMT
            Not After : Dec 28 04:01:14 2024 GMT
        Subject: CN=05ed7a0fdddc6a1c1db9ff72c1fbebec714c7fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:92:b9:6e:13:11:35:17:2c:8a:9b:1b:0f:42:
                    9d:ed:ca:b5:af:42:81:da:69:4f:45:20:2c:a3:6e:
                    bf:a0:a4:53:fe:56:a8:99:37:5f:86:8c:e8:19:a2:
                    37:d3:e0:9c:b3:89:47:e8:c2:d0:5e:b8:93:47:c5:
                    cd:cd:44:bb:7e:1e:ce:91:94:09:be:e8:f8:8d:75:
                    48:f6:ba:39:a4:96:26:a7:be:02:ed:69:f6:c3:24:
                    3c:df:9e:32:6a:39:7b:e0:b0:62:8c:ac:fa:40:dd:
                    fd:07:74:ad:36:21:69:a9:78:a6:26:3b:42:62:35:
                    e6:df:a8:d3:15:7c:ed:f5:b4:38:fa:bb:63:86:c0:
                    db:6c:d3:da:57:eb:34:4a:71:8d:38:fc:40:35:90:
                    9c:75:60:66:5a:db:ba:d2:af:23:2c:bd:1d:61:98:
                    f5:3c:f5:2c:ec:d8:18:06:e6:6d:d2:03:fe:df:fc:
                    ae:a6:98:64:cf:74:46:8c:4a:88:e5:89:35:f2:ff:
                    0e:95:ba:eb:90:1a:a5:db:96:34:3c:b8:a8:a6:2f:
                    51:b7:39:56:62:1c:bc:53:22:3b:7d:06:13:6a:cd:
                    04:1c:f8:7d:df:72:a9:80:6e:c3:36:83:2f:8c:98:
                    d1:9a:84:d0:48:93:08:f1:35:bb:b1:e9:93:65:3c:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:ED:7A:0F:DD:DC:6A:1C:1D:B9:FF:72:C1:FB:EB:EC:71:4C:7F:CD
            X509v3 Authority Key Identifier:
                keyid:01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:57:1b:2d:2b:83:58:52:66:49:9f:ba:05:b2:96:e4:9b:e7:
         ef:28:77:30:72:c9:83:ef:a5:fe:3b:df:15:e8:58:c3:be:76:
         aa:fc:5a:0e:01:96:bb:3c:d5:e3:89:ef:b2:96:34:a2:79:59:
         52:d3:96:4a:3b:27:1f:3f:8d:97:90:03:9e:eb:77:cf:3d:01:
         2a:66:e5:ea:e9:f1:61:3e:95:61:e1:e7:b8:80:ff:58:80:cf:
         84:3f:97:ed:1c:43:b5:5a:b3:a1:16:62:45:aa:6e:07:d2:05:
         ae:5c:2e:df:5e:a3:4c:98:f4:d9:cd:db:e8:11:c6:14:b5:e9:
         83:aa:7f:b3:6a:76:0e:60:b0:58:d1:59:ca:39:e1:d7:f7:b5:
         0c:a6:75:b1:78:2e:37:95:4a:6d:ff:e6:eb:56:8f:69:99:89:
         00:01:a7:f3:4d:f3:70:0f:6e:93:02:6e:f4:6f:57:d0:a3:39:
         87:08:cf:0a:a9:20:73:ca:52:86:51:c0:31:38:a6:f5:20:31:
         17:2c:be:d6:08:2a:1d:10:20:3e:db:69:7a:87:ec:8e:58:60:
         02:39:e2:ce:d4:05:a2:4b:1b:8a:48:4d:62:5b:aa:0f:c2:a8:
         7b:f4:35:f0:d8:66:10:b1:36:81:97:35:b5:a3:fe:d7:bc:20:
         6e:e0:16:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----