Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
File:                     qfCQLHsw_sPg3PXyO_7fUBgjQps.mft (raw, json)
Hash identifier:          hmH6t1vZmYJonHyzxRWF2rEkXeN91kdaJaKEGFDp5t0=
Subject key identifier:   5A:A5:59:2D:9E:A3:22:64:6F:3F:8D:B5:42:B0:65:3A:38:94:BD:B1
Authority key identifier: A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B
Certificate issuer:       /CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
Certificate serial:       0191F9A2650CE02997D9252209D401137AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
Manifest number:          014B
Signing time:             Mon 16 Sep 2024 07:00:54 +0000
Manifest this update:     Mon 16 Sep 2024 07:00:54 +0000
Manifest next update:     Tue 17 Sep 2024 07:00:54 +0000
Files and hashes:         1: qfCQLHsw_sPg3PXyO_7fUBgjQps.crl (hash: fQylRdOebh6A+JjGvw/wEJ95PmJEMlgqTy/I8dZn7C0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:65:0c:e0:29:97:d9:25:22:09:d4:01:13:7a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
        Validity
            Not Before: Sep 16 07:00:54 2024 GMT
            Not After : Sep 17 07:00:54 2024 GMT
        Subject: CN=5aa5592d9ea322646f3f8db542b0653a3894bdb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cd:25:58:6b:7c:3d:5a:0c:f9:d8:70:5f:1c:
                    82:60:f5:cf:84:56:46:98:fd:c2:2d:98:fb:a8:9c:
                    3a:ac:e0:9a:bd:21:6b:05:78:39:e8:9a:0e:5e:a2:
                    81:7c:34:1d:2a:40:a1:4b:a9:2c:75:f9:f4:fc:fe:
                    e5:b3:5d:cf:e3:ff:bb:be:49:f9:7f:4f:4c:51:2e:
                    f1:98:ac:3d:29:fa:78:c4:4c:5f:83:66:59:0f:2b:
                    e5:2b:42:19:6c:23:2d:9f:87:61:6e:d7:8d:4a:ca:
                    d3:2d:5a:e4:0d:3c:92:4f:1f:78:ec:fc:2b:d1:71:
                    0e:4f:f4:50:cc:9f:dc:c8:81:1f:d6:1b:e8:6b:b0:
                    da:b8:c7:f3:30:41:9b:63:6b:1b:cf:8b:6d:9d:c6:
                    89:34:4a:a2:fe:bc:7f:0b:c8:b7:36:07:31:f1:82:
                    1e:98:02:be:2f:ee:3f:33:00:02:ae:41:c6:cb:f8:
                    9c:c3:22:bc:73:8b:3d:8e:36:29:5d:22:9f:7a:95:
                    d1:93:2e:10:45:d4:25:94:b2:2a:a8:42:a1:cb:db:
                    92:cc:68:fa:a7:64:cf:56:9e:a3:ac:2a:37:ef:27:
                    c8:b7:be:ea:f4:c1:6a:ad:24:b3:3d:64:4c:da:a1:
                    ae:3c:dc:a5:e4:ab:76:82:76:f3:5c:09:34:6d:6f:
                    10:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A5:59:2D:9E:A3:22:64:6F:3F:8D:B5:42:B0:65:3A:38:94:BD:B1
            X509v3 Authority Key Identifier:
                keyid:A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:01:eb:d3:cf:e7:8a:e0:8d:74:40:b9:fc:61:98:39:dc:24:
         d2:f1:74:18:ac:2b:d4:25:34:b6:a1:4a:39:28:ac:ec:02:9e:
         3c:e4:c1:8d:84:ed:1b:a0:4b:10:22:a3:ae:82:13:d0:12:b4:
         8d:41:83:56:83:39:48:09:7e:a7:43:69:11:34:cd:12:9f:6a:
         29:41:17:3d:41:10:e7:bf:be:36:2d:95:19:72:64:f1:88:8e:
         5a:1f:79:1c:e8:38:0c:ae:e9:11:fb:c5:15:a2:2b:d6:d7:9d:
         e3:c4:ca:b4:ac:3c:61:c1:08:e2:e6:13:35:50:5e:37:ef:42:
         5c:4a:02:c1:12:8c:6b:d6:e5:be:c1:0b:55:1f:42:3d:31:f8:
         7f:f5:d0:6f:8b:7a:3e:83:77:8b:a7:21:80:68:7d:2a:18:16:
         74:28:78:e3:08:52:48:11:5a:08:ed:03:a2:3b:86:c7:14:df:
         0d:17:39:e2:0e:b3:64:64:98:cc:bc:04:63:64:b0:4c:39:be:
         b1:6d:69:e6:fb:4a:d4:6f:d8:73:9c:3e:04:5c:56:d4:b3:10:
         6a:5b:55:05:f1:99:fb:bf:0b:e6:0a:41:bb:5c:8e:14:be:50:
         18:9a:72:dc:26:de:8e:30:73:af:15:b0:de:ae:3f:c4:56:e1:
         7c:7b:c2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----