Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
File:                     G04-M_1PbZy08TyiI3HjCzbPp3Y.mft (raw, json)
Hash identifier:          /uVhXJTxAvpBgaLhBxnm/0v6rXeb4NeyuuMK+zRh9O8=
Subject key identifier:   99:76:F5:97:B7:FB:33:86:8F:2C:9A:5F:87:6E:D1:11:CE:ED:79:35
Authority key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
Certificate issuer:       /CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Certificate serial:       01936A465D71E39C1915B4570FD5DA5E0D54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
Manifest number:          1377
Signing time:             Tue 26 Nov 2024 21:00:16 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:16 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:16 +0000
Files and hashes:         1: G04-M_1PbZy08TyiI3HjCzbPp3Y.crl (hash: NrgxxTEHdjqeFCzRlSyPHoo/74w4xsF27VeZZ9MioPo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:5d:71:e3:9c:19:15:b4:57:0f:d5:da:5e:0d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
        Validity
            Not Before: Nov 26 21:00:16 2024 GMT
            Not After : Nov 27 21:00:16 2024 GMT
        Subject: CN=9976f597b7fb33868f2c9a5f876ed111ceed7935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:9d:e5:09:b6:9c:68:71:50:0b:e6:8a:33:
                    b5:99:33:77:58:68:2f:5b:65:cf:b5:d6:26:30:aa:
                    c3:46:5b:7d:9f:c3:49:c2:98:7a:82:a0:14:d4:05:
                    57:1c:0c:a5:5c:2b:0d:f6:59:2c:40:7f:f7:74:59:
                    4d:74:c3:ac:2e:81:a6:6a:83:37:2f:7f:be:da:ea:
                    fe:a0:7b:b1:15:65:ac:36:9d:63:78:de:12:e7:31:
                    46:9e:6a:12:4c:0e:54:92:4d:a8:0f:c5:4a:1e:37:
                    bf:37:2a:cb:22:d7:bf:88:5c:38:4c:3c:e0:5a:e7:
                    ce:5d:f9:60:f3:22:ce:e3:01:10:70:5e:fa:35:8a:
                    1b:49:56:c1:56:52:4d:66:f4:7a:30:83:bf:76:9a:
                    52:a7:81:6e:a8:a9:e7:f7:2e:fc:24:8a:25:86:bc:
                    ac:16:49:8e:27:56:bf:81:5e:b2:a1:81:1a:e5:53:
                    ee:f7:48:38:4c:c6:09:5d:fc:43:cb:b9:18:83:b4:
                    1f:7b:92:f5:7f:50:e0:2f:e0:4d:f9:fe:04:ae:a9:
                    e1:03:27:4c:5e:08:0f:59:a0:01:81:1c:53:7c:22:
                    b6:84:58:78:26:38:d4:14:79:ee:a0:72:52:13:b2:
                    53:df:6a:e1:27:c3:06:ad:8c:fd:51:87:bf:eb:b4:
                    49:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:76:F5:97:B7:FB:33:86:8F:2C:9A:5F:87:6E:D1:11:CE:ED:79:35
            X509v3 Authority Key Identifier:
                keyid:1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:02:79:8c:fa:53:10:9f:f9:54:b0:a8:0d:91:a1:5a:6b:f2:
         e3:3e:dc:21:f4:07:d5:e8:77:9d:2a:21:3f:08:a2:98:df:a9:
         d6:68:5a:c4:4d:62:f7:41:b9:b5:0d:76:f4:bd:39:c5:56:20:
         2a:6e:eb:6a:42:e4:59:de:89:17:0c:3e:3d:a4:8c:a2:d9:66:
         63:4a:dc:80:5f:79:91:a8:d2:8c:44:96:4d:bd:ab:9e:9f:9e:
         b8:6c:09:a2:9d:25:0d:35:5e:05:f1:dd:be:e4:10:a8:2c:42:
         cd:02:74:28:07:0b:3d:d8:b8:c8:44:d6:fb:bb:6d:96:15:28:
         4f:4a:4d:55:b9:cf:94:d9:a8:46:2c:16:b7:cf:25:c7:49:c6:
         2e:ed:9c:ad:48:67:42:87:a4:6b:55:d1:6d:de:92:5f:bb:80:
         b6:76:8b:dc:6d:b0:c1:06:92:a9:d9:d5:14:37:d5:ac:89:f4:
         4b:38:a8:89:17:f7:59:e4:0d:a3:6a:b6:38:72:06:82:86:ff:
         b7:df:40:d6:f6:04:0e:b0:e3:87:a4:a4:4b:5d:a2:86:77:46:
         c3:0e:bb:c5:7b:d3:9b:29:ee:1f:4a:1b:8e:40:4f:2c:51:42:
         d7:1e:f4:a4:50:6f:c8:08:50:1d:3d:f3:10:31:16:a2:7f:2f:
         d8:40:c9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----