Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft
File:                     2f2qHAH51r-3yaAN4AlCpGY2A2U.mft (raw, json)
Hash identifier:          bojL2hJzt1Wvb6vrNtl1E9GMRUmebZwy5W+pt8kkD44=
Subject key identifier:   6B:A8:57:C3:73:13:F9:60:BE:92:2B:AB:B6:69:D6:3A:15:1C:EC:A7
Authority key identifier: D9:FD:AA:1C:01:F9:D6:BF:B7:C9:A0:0D:E0:09:42:A4:66:36:03:65
Certificate issuer:       /CN=d9fdaa1c01f9d6bfb7c9a00de00942a466360365
Certificate serial:       019369D98745E4644B414B76E841318998ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2f2qHAH51r-3yaAN4AlCpGY2A2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft
Manifest number:          0802
Signing time:             Tue 26 Nov 2024 19:01:23 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:23 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:23 +0000
Files and hashes:         1: 2f2qHAH51r-3yaAN4AlCpGY2A2U.crl (hash: L/QpkflUhZo/iTN1Lj9kPsideJ1tVoqv+Sjh8u3vRng=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2f2qHAH51r-3yaAN4AlCpGY2A2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:87:45:e4:64:4b:41:4b:76:e8:41:31:89:98:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9fdaa1c01f9d6bfb7c9a00de00942a466360365
        Validity
            Not Before: Nov 26 19:01:23 2024 GMT
            Not After : Nov 27 19:01:23 2024 GMT
        Subject: CN=6ba857c37313f960be922babb669d63a151ceca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:2a:ff:e9:01:13:95:a3:19:f3:fa:53:25:
                    f5:81:bb:0c:42:9b:40:f8:b9:7f:67:16:b8:c2:1e:
                    f7:b7:e2:3a:7e:85:45:ce:26:b6:2f:86:34:b6:29:
                    2e:8e:fe:9d:32:7f:92:0d:ee:bf:8d:7d:31:f0:7a:
                    55:90:68:b2:72:61:09:26:fb:b6:85:e7:90:dc:fa:
                    79:4e:dd:08:0f:77:c7:83:9b:6f:33:cd:66:6b:f9:
                    b7:4d:61:1b:62:4f:4e:df:f9:06:f5:35:6d:17:51:
                    60:0c:f6:39:52:b5:2e:da:dd:3d:3e:b8:22:99:ce:
                    61:76:44:e4:4c:74:07:50:20:4b:d8:ae:1c:f3:bc:
                    73:70:6d:68:8a:62:63:6c:2f:15:63:54:ed:68:ad:
                    29:7e:b8:f1:d7:90:b8:30:cf:44:87:d8:90:db:92:
                    29:e7:92:7a:34:1f:73:8f:18:79:c6:68:ec:30:cf:
                    3a:eb:00:e0:b2:62:a3:91:44:79:ae:9c:9d:4b:8a:
                    8d:12:94:bf:1f:15:bb:86:36:31:4f:66:1f:ab:97:
                    39:22:78:f7:14:25:71:83:30:d0:40:dc:68:09:e4:
                    52:d5:0a:ee:a4:25:ba:ae:fa:d9:f4:64:af:09:d2:
                    bb:fa:b2:d0:f8:d0:95:a6:7d:d8:02:f9:a1:15:09:
                    5f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A8:57:C3:73:13:F9:60:BE:92:2B:AB:B6:69:D6:3A:15:1C:EC:A7
            X509v3 Authority Key Identifier:
                keyid:D9:FD:AA:1C:01:F9:D6:BF:B7:C9:A0:0D:E0:09:42:A4:66:36:03:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f2qHAH51r-3yaAN4AlCpGY2A2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:bd:20:be:97:f7:f9:4a:7b:d8:da:4b:df:82:fa:99:a5:e4:
         97:6e:d0:ea:55:09:ca:56:be:fe:97:b1:97:d4:53:35:fb:0c:
         9a:cf:7a:94:cd:a5:97:b3:b6:a2:84:d8:bc:be:4e:3c:a9:25:
         df:71:8b:4b:63:55:b6:2a:39:f4:20:60:7b:02:21:4c:46:b2:
         a9:e2:d3:fe:3b:26:e1:b8:c2:c6:10:f0:c1:ad:90:d8:5b:ee:
         65:cb:ba:0d:ad:eb:17:fd:14:fd:17:a9:74:8d:a3:ac:d8:58:
         25:34:2b:5c:f8:7e:ab:4a:d0:4c:1e:2c:e7:43:0f:25:b7:4d:
         67:7c:19:e2:b9:c2:3d:6f:6a:a0:1b:92:e0:3c:21:2c:d8:93:
         28:f2:cd:b2:fd:cb:a8:71:8c:fc:67:d2:5e:80:97:55:a5:fc:
         6d:4b:a4:69:29:a5:c6:e9:21:26:5b:56:0e:c8:b7:0c:18:09:
         3d:83:5a:06:c6:a0:5d:49:a3:0d:24:76:17:a8:e1:06:63:25:
         71:8d:b0:7a:ea:ae:f3:23:2f:1e:75:e5:45:71:57:84:4d:99:
         17:78:b7:86:1e:4e:37:93:f9:72:66:5f:ea:ea:50:21:45:79:
         0e:88:27:67:78:c8:cf:71:42:ac:0f:ae:de:2a:c8:45:0d:2c:
         14:56:c1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----