Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File:                     KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier:          jeD1yXPsWl/r44sEeM4xN9W4gTuUbOAuCVwXsBGOvT4=
Subject key identifier:   F1:B5:0A:61:AA:EE:9F:49:0D:E8:9C:3C:09:0C:8C:50:55:F7:CE:56
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer:       /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial:       0193572DE6F8A9EF8DC8F1B50B18D736E729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number:          03C2
Signing time:             Sat 23 Nov 2024 04:00:46 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:46 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:46 +0000
Files and hashes:         1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: SKKmN/B0S34z+x802Mw9lXKtCNGy4xoP5feUsZyOku4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:e6:f8:a9:ef:8d:c8:f1:b5:0b:18:d7:36:e7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
        Validity
            Not Before: Nov 23 04:00:46 2024 GMT
            Not After : Nov 24 04:00:46 2024 GMT
        Subject: CN=f1b50a61aaee9f490de89c3c090c8c5055f7ce56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:aa:79:13:c3:c6:98:48:b4:81:df:b3:03:
                    83:ca:d1:24:4e:63:13:2c:be:fe:10:b6:09:99:32:
                    83:bc:10:8b:62:a4:1e:76:42:f0:d7:aa:b4:20:f7:
                    86:33:fd:6c:8f:ed:b6:ad:2b:c3:d1:ed:9b:c8:24:
                    64:65:50:f8:10:bc:55:76:19:d7:f7:91:1b:f1:f5:
                    1b:c5:2f:aa:d0:9f:e5:ee:44:c4:2e:cb:c2:f3:f1:
                    0c:4a:f7:60:05:84:43:9b:f6:70:d2:9d:54:4c:61:
                    85:6d:05:a5:2a:a1:ae:d6:50:fa:21:ed:e1:5d:c6:
                    f6:c7:56:1d:51:42:02:30:bd:5a:4c:1e:9e:0d:e9:
                    e0:be:35:bb:31:a8:c1:97:df:72:b4:a9:1d:b7:7d:
                    a9:51:be:23:b7:68:c7:b6:59:2a:9d:84:c8:45:af:
                    19:02:20:ce:ff:74:cd:12:6d:eb:4e:28:89:26:0c:
                    11:58:39:6c:16:6d:84:b0:62:af:3e:c5:6c:0b:71:
                    07:1c:f0:aa:32:62:ef:a6:77:24:ca:d3:1c:f4:c5:
                    cd:f2:1b:c6:3e:3e:50:c3:ac:b8:2a:bc:0a:ed:b0:
                    c2:65:45:58:72:a4:70:61:4c:26:0b:b0:1c:c6:bc:
                    49:ab:de:db:61:1b:7d:56:17:34:98:b7:3a:cf:f5:
                    ac:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B5:0A:61:AA:EE:9F:49:0D:E8:9C:3C:09:0C:8C:50:55:F7:CE:56
            X509v3 Authority Key Identifier:
                keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e4:b1:be:fe:62:7d:b2:2b:5b:25:7c:b3:4a:78:b3:b7:c4:
         ea:7c:5b:02:50:47:05:e7:43:e7:b2:72:ec:38:07:ec:e1:1e:
         33:29:d5:92:73:12:01:06:20:79:b6:2d:67:21:a8:e1:3a:14:
         ab:1e:12:6e:61:8e:23:01:88:02:3e:eb:ec:71:28:76:00:48:
         e5:be:c9:b6:dd:65:1d:dc:22:57:d3:1d:78:00:26:3c:18:19:
         37:d2:c2:50:85:29:ec:21:9f:31:81:0c:06:ba:70:26:46:e0:
         c6:73:14:15:e0:23:3d:32:76:e5:84:c9:b0:9a:23:8c:74:f1:
         94:f0:d0:bf:a9:e0:44:d4:7f:4a:12:05:b3:25:4d:31:bf:4f:
         e7:42:f3:71:8c:b3:62:1e:ae:30:07:d7:6a:1b:1d:3e:c9:ea:
         e7:77:63:87:a2:6c:d2:6f:16:35:f1:93:1b:c3:d6:14:f3:10:
         f3:a0:b8:cc:c2:d6:f9:a0:93:31:61:ed:b4:74:91:a9:32:92:
         f5:a7:68:ad:f3:09:e5:59:21:7c:d4:17:18:8e:96:2c:c9:e4:
         fb:f7:6e:f1:1d:00:af:1b:c8:33:e2:6a:f1:70:93:aa:3f:c7:
         86:ea:db:0e:c1:df:e8:c3:1f:93:73:d0:0c:a9:7e:e8:ea:e1:
         e8:81:4d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----