Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft
File:                     EOuDUEaH-ei6SAzUbqCMdd2U15U.mft (raw, json)
Hash identifier:          K1za1HSxLYnEGFVpN199A0bBdT1oKyB6LZLZqJbUYjc=
Subject key identifier:   60:E6:38:83:8A:F6:DF:93:F0:A3:48:5A:C0:BE:B7:27:23:D6:B2:9A
Authority key identifier: 10:EB:83:50:46:87:F9:E8:BA:48:0C:D4:6E:A0:8C:75:DD:94:D7:95
Certificate issuer:       /CN=10eb83504687f9e8ba480cd46ea08c75dd94d795
Certificate serial:       019364B25286B442CFC676B81071E9382531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft
Manifest number:          1033
Signing time:             Mon 25 Nov 2024 19:00:28 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:28 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:28 +0000
Files and hashes:         1: EOuDUEaH-ei6SAzUbqCMdd2U15U.crl (hash: K9MP5DnIpAemfu1CIwFw38QoustpAehA5zMAdjpj3Hw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:52:86:b4:42:cf:c6:76:b8:10:71:e9:38:25:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10eb83504687f9e8ba480cd46ea08c75dd94d795
        Validity
            Not Before: Nov 25 19:00:28 2024 GMT
            Not After : Nov 26 19:00:28 2024 GMT
        Subject: CN=60e638838af6df93f0a3485ac0beb72723d6b29a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:70:a9:27:52:f8:3d:70:12:54:26:15:bd:
                    2d:5d:c2:c1:99:ff:37:f2:6f:17:28:ff:86:a3:15:
                    0a:79:e2:87:8e:37:d4:b8:36:e9:ca:3d:ab:d5:d5:
                    b7:b1:7f:0b:eb:a9:18:01:ef:af:de:e7:cd:97:10:
                    95:5d:0e:bf:b0:2d:5a:ea:81:ec:1d:09:71:81:7d:
                    26:6a:58:d2:fb:d9:b2:19:7b:a8:f7:d1:a8:ce:42:
                    e5:37:b0:56:5e:b3:46:ea:f1:e5:aa:c2:2d:68:d6:
                    0e:2b:54:0d:81:67:62:75:cf:bf:52:c1:96:fd:0a:
                    3e:bf:51:b4:74:37:68:57:12:08:8a:32:50:1f:62:
                    02:6a:6f:3f:14:4d:05:7e:90:92:f9:f2:c7:fa:1d:
                    61:03:9f:9a:e7:0c:da:0e:90:08:c8:d4:cd:5f:75:
                    42:f3:47:54:36:1c:fd:3b:a0:52:af:7a:80:82:45:
                    74:4d:37:a9:b7:19:06:f0:e9:82:25:fb:32:ae:0a:
                    c4:a3:5d:4f:7b:4e:b4:85:66:b6:0f:8d:04:57:68:
                    43:8c:98:f2:00:a6:38:81:fd:20:29:ec:8f:8a:65:
                    b6:77:e0:44:4e:51:c7:d0:0e:86:6d:ea:be:87:1f:
                    09:87:4e:2f:70:e8:29:a0:4c:f9:cc:79:06:53:f4:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E6:38:83:8A:F6:DF:93:F0:A3:48:5A:C0:BE:B7:27:23:D6:B2:9A
            X509v3 Authority Key Identifier:
                keyid:10:EB:83:50:46:87:F9:E8:BA:48:0C:D4:6E:A0:8C:75:DD:94:D7:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5a:11:5c:79:7f:4a:5b:d3:3e:e3:01:71:a1:3d:60:81:72:
         1e:7a:f5:7c:86:de:bc:8b:b1:2e:c2:1f:51:96:e6:9c:22:30:
         4d:86:fa:71:48:c4:fb:94:cd:cb:dc:66:00:65:d8:9c:ec:95:
         54:40:52:e2:57:3f:36:90:89:9e:ba:f6:43:ce:1a:ec:c7:0c:
         be:54:94:3c:c4:2a:5f:32:e5:0f:c1:18:2f:6c:76:03:7c:2a:
         f9:d8:45:7f:55:5e:84:ef:33:ed:cf:3d:50:04:e8:ca:fe:ee:
         97:ed:12:54:40:12:dc:83:18:71:99:ed:ed:b6:26:1f:60:df:
         cf:fb:c6:5f:5a:22:f9:ba:21:21:11:64:c5:dc:64:a9:23:8c:
         1f:ff:e6:92:3b:5b:07:27:88:40:03:91:74:51:29:79:c7:05:
         67:80:36:ca:7c:13:09:02:ea:d9:90:d8:df:76:24:31:ba:cb:
         de:75:f6:62:9d:e9:62:6e:a5:b8:d1:b9:c9:29:22:c9:67:0f:
         95:9d:0a:79:80:2f:bc:a7:cb:f8:e2:56:7d:f9:3e:08:34:bc:
         b2:ad:36:b4:59:3e:da:ba:83:df:e0:49:61:eb:aa:bc:d8:1e:
         08:78:4f:4d:02:f7:9a:27:2f:7f:eb:b4:85:dc:57:11:8a:b1:
         5a:2d:de:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----