Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
File:                     NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft (raw, json)
Hash identifier:          wRv0GMKiI0x5VGSLBB8XBBWtalaJNkBPCpmwEFh6PSQ=
Subject key identifier:   D1:10:4D:42:A2:05:68:DE:59:FE:5F:D7:8E:27:75:64:8C:CB:9E:71
Authority key identifier: 36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
Certificate issuer:       /CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Certificate serial:       0193549B3B2134311E7500727636CCEA1C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
Manifest number:          1300
Signing time:             Fri 22 Nov 2024 16:01:19 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:19 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:19 +0000
Files and hashes:         1: NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl (hash: 7uKmJ1em5V1+JW8AtE+lf9oRalee0rKz+xfV3rCMmhY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:3b:21:34:31:1e:75:00:72:76:36:cc:ea:1c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36310a959489d1ac5b8796af626e07c3f1c171f3
        Validity
            Not Before: Nov 22 16:01:19 2024 GMT
            Not After : Nov 23 16:01:19 2024 GMT
        Subject: CN=d1104d42a20568de59fe5fd78e2775648ccb9e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:1f:2f:69:7d:9c:ab:8c:1c:de:0f:1b:6a:
                    0e:e1:49:fa:95:9d:8e:50:ce:3c:4c:3e:59:ba:ff:
                    18:85:2d:10:ec:0b:90:64:85:b5:34:f3:89:53:ad:
                    aa:0c:f3:eb:37:1d:5d:08:4b:ab:0a:ae:93:ec:4d:
                    4c:e0:46:f6:e2:5a:15:76:43:8b:61:30:2d:74:0f:
                    f7:76:7b:73:4e:19:56:34:db:d0:a9:a3:f3:61:ce:
                    91:57:b8:4e:00:2d:1f:ba:ea:6b:0a:66:da:6e:9b:
                    00:b0:6a:8f:b6:c7:70:8b:f5:0d:f7:a4:29:50:b0:
                    9a:88:8c:9f:b5:1b:dc:a0:62:6c:b0:25:7c:b9:d0:
                    33:46:fd:a8:01:34:de:ea:9f:8d:67:99:5b:6b:15:
                    2b:28:69:f2:f3:58:8a:d5:12:03:e5:6d:d9:81:f0:
                    41:5c:b2:3f:51:b4:67:d3:af:5b:80:5f:4a:77:0e:
                    53:15:e1:19:47:d4:2c:d4:ba:3c:07:40:74:da:2c:
                    33:5e:94:f8:66:65:a1:f3:73:fb:a7:06:c4:ec:a0:
                    2f:82:f0:aa:e5:fa:9a:8d:d0:81:4a:a2:d0:5a:4e:
                    21:05:8a:6f:1f:c9:24:77:4e:6e:ef:8e:bb:23:41:
                    38:b6:ac:4a:c2:b4:f3:a5:ad:2b:55:c8:3d:58:86:
                    16:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:10:4D:42:A2:05:68:DE:59:FE:5F:D7:8E:27:75:64:8C:CB:9E:71
            X509v3 Authority Key Identifier:
                keyid:36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a6:3d:6c:66:5a:0a:b7:bc:20:86:fc:04:f0:90:fc:c6:7f:
         70:38:9c:e8:b3:f6:85:f0:a4:bb:60:94:30:d6:61:8b:bf:b2:
         25:a7:83:48:38:7b:6c:99:8b:83:9a:25:34:72:04:ad:31:75:
         1b:ab:d5:1e:8e:48:ce:74:ca:8e:26:7b:26:1f:a4:ef:46:01:
         fb:06:da:39:d7:6d:55:dd:35:88:89:3e:25:41:30:73:60:90:
         a0:44:56:e3:ab:4f:56:16:21:0b:cc:17:c2:bb:02:88:96:79:
         d9:c4:d5:af:f5:7d:7d:f0:8d:e4:86:fc:57:1e:b9:b4:dd:ec:
         0c:fb:f3:14:59:b2:04:dc:ef:7d:27:77:57:61:5b:1c:ad:ac:
         52:65:1b:0c:3a:4e:ad:d6:05:89:62:5e:50:2d:57:bb:41:b4:
         85:24:59:21:22:d5:17:24:69:06:3f:84:a9:0f:9b:d1:65:46:
         03:98:dc:70:28:95:75:84:df:d3:bc:44:41:65:e0:25:e1:e3:
         3e:29:38:9a:aa:d1:b0:81:56:80:bd:28:cd:4f:1a:95:28:75:
         44:a8:84:6c:b8:68:5c:53:87:32:33:e4:fe:77:5a:87:cd:6f:
         b8:97:a8:67:86:68:3d:50:fb:80:21:87:b4:dd:70:94:9f:7a:
         45:ed:47:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----