Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
File:                     uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft (raw, json)
Hash identifier:          7IVmK8jqaG2CpNQXZCsykG4qn8KbfU30qOalkQBveuc=
Subject key identifier:   65:53:99:8B:C0:0D:73:BE:A2:30:F5:8B:16:BE:1E:F1:E4:AF:3B:17
Authority key identifier: B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92
Certificate issuer:       /CN=b91f8db02e2e971d54f90eef107090398fcc3d92
Certificate serial:       01935689F8217C481D11DB1EF04186F15BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
Manifest number:          05B3
Signing time:             Sat 23 Nov 2024 01:01:42 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:42 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:42 +0000
Files and hashes:         1: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl (hash: lQvhh7ytOvUMK7SR8FfC4fzapzCeRAqIk0/D9aMkhNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:f8:21:7c:48:1d:11:db:1e:f0:41:86:f1:5b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91f8db02e2e971d54f90eef107090398fcc3d92
        Validity
            Not Before: Nov 23 01:01:42 2024 GMT
            Not After : Nov 24 01:01:42 2024 GMT
        Subject: CN=6553998bc00d73bea230f58b16be1ef1e4af3b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cc:70:26:5c:60:d8:34:81:94:52:ae:50:c1:
                    8d:4d:1b:b7:a1:b7:75:0a:17:d6:06:c2:73:5e:73:
                    04:e1:bd:4a:20:43:2e:46:55:43:8d:8e:2e:21:63:
                    8b:df:fa:62:70:2f:a9:77:21:90:6b:49:97:d2:d5:
                    9b:4f:e3:45:e2:48:00:e8:cd:41:1f:e6:63:fd:44:
                    63:41:6c:32:e0:78:34:90:02:0c:73:2f:38:06:36:
                    38:f2:43:1b:29:e3:1e:84:ff:c6:e8:3e:5a:80:81:
                    cf:69:4b:9e:9e:ca:3e:00:f7:21:1c:b1:93:be:ed:
                    4b:40:c9:8d:f1:9a:36:b8:a5:c0:e8:3c:c8:0a:25:
                    42:2a:28:96:90:d3:d2:6d:12:66:d8:d5:40:f9:e3:
                    00:b8:d5:9b:bd:94:70:63:23:ed:23:b1:02:6b:3b:
                    e6:9a:99:fc:d4:13:1a:97:d5:1f:89:70:b4:54:55:
                    e7:d7:e2:16:a6:cb:04:d3:40:1f:32:3d:5c:46:c2:
                    64:2e:dd:67:08:fe:07:b2:ec:6f:89:90:ea:59:ff:
                    fe:da:a8:ae:aa:a0:4f:9d:64:a9:e0:d0:04:df:49:
                    83:ed:3f:65:f8:dc:e5:d9:fc:e2:62:9c:d1:dd:01:
                    b5:20:ef:6e:51:1c:c6:9d:02:ad:bf:92:cb:e7:b6:
                    87:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:53:99:8B:C0:0D:73:BE:A2:30:F5:8B:16:BE:1E:F1:E4:AF:3B:17
            X509v3 Authority Key Identifier:
                keyid:B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a6:68:dd:47:e0:20:16:f0:1e:2b:36:0b:e0:65:79:ff:f8:
         a8:dd:b4:5e:eb:0a:ef:7d:22:9d:b3:c6:64:68:c3:d0:e3:50:
         67:25:71:e5:a9:8a:a5:13:7c:1b:dd:7a:a7:c0:e5:5b:63:b5:
         a7:f8:c8:4b:ff:96:e8:30:68:35:81:9c:b8:41:7b:de:58:e6:
         3a:b3:80:7f:c7:7e:f8:5f:40:2b:84:73:17:82:d1:df:fc:e0:
         75:c5:c8:9d:46:0f:20:97:12:24:8f:95:64:7d:1a:09:94:dd:
         c8:11:72:9e:f1:23:e6:6a:38:b0:29:b4:5b:3d:f3:d3:42:a4:
         ec:fc:b6:aa:db:2d:b3:05:d8:a2:cd:43:fe:78:f4:2c:bd:1d:
         5c:b5:db:84:49:e1:84:a1:09:87:1a:5b:69:05:04:2d:29:32:
         28:80:10:53:ab:72:40:13:39:13:d7:a1:51:9c:9e:4f:4f:f3:
         0f:cb:19:d7:ea:1d:ac:63:3c:66:d3:d3:90:e6:26:2a:bf:fd:
         e7:b2:fa:0e:b0:c1:5f:78:14:9b:8e:92:32:54:f2:d2:bf:be:
         da:eb:a6:a8:7c:75:8c:33:be:41:70:8d:17:5f:60:d7:b8:8c:
         b3:f2:1e:05:df:f1:43:a5:d0:f5:d9:dc:16:15:b4:60:92:a8:
         1a:10:3b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----