Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File:                     9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier:          1p0IiRdHItmjRXRvLjdosl0xrdymilAHdYZFicLGe7Q=
Subject key identifier:   71:23:10:2A:3E:C4:F1:66:FC:D7:4A:DB:DB:79:4F:91:97:28:03:70
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer:       /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial:       019369D88A5B9E24E60E5BCEEEC144DCDF1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number:          1375
Signing time:             Tue 26 Nov 2024 19:00:19 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:19 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:19 +0000
Files and hashes:         1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: V9K3cwt/E9NEXUHyLBRfsJDz6cwdPUohdzfbuZrYV74=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:8a:5b:9e:24:e6:0e:5b:ce:ee:c1:44:dc:df:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
        Validity
            Not Before: Nov 26 19:00:19 2024 GMT
            Not After : Nov 27 19:00:19 2024 GMT
        Subject: CN=7123102a3ec4f166fcd74adbdb794f9197280370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:69:87:11:f3:6f:81:b0:2d:08:ca:22:aa:
                    67:7e:27:5e:10:7d:7d:c1:44:f3:cf:76:66:a5:8d:
                    e8:77:e8:64:ef:28:c9:cb:18:33:bb:b8:57:55:d8:
                    d0:37:e3:41:05:35:14:8c:d7:97:67:ce:dc:44:58:
                    94:d0:78:d6:f0:03:4b:9a:38:fb:a3:df:9f:3b:3a:
                    6e:a8:89:9b:ce:c4:80:5b:43:54:fb:57:f0:8a:f9:
                    b8:71:89:a1:a7:3e:01:13:04:1a:5c:32:53:5f:e7:
                    6c:f8:49:88:33:62:24:5b:01:44:49:7b:47:23:7f:
                    b3:71:a4:12:e2:46:d7:f7:82:73:41:32:93:fd:31:
                    8d:37:12:61:af:59:54:0b:52:0f:e2:e2:3e:59:df:
                    fc:60:a3:c4:ee:e5:29:a4:a0:15:64:5c:0f:9b:ae:
                    70:a4:74:2e:0a:ea:6b:72:c5:33:e0:2c:37:e2:c8:
                    a1:fb:be:61:8c:2f:0c:88:31:ab:26:76:6a:f5:dc:
                    f1:a8:71:4b:4d:62:e0:95:df:59:ce:d0:50:18:56:
                    49:83:5a:94:5c:17:05:30:b1:13:f7:e4:f3:e2:a4:
                    1d:d7:6d:98:86:5e:b1:85:dd:59:13:35:26:c6:ed:
                    ac:95:87:38:30:3e:d9:aa:a3:a5:bb:5f:e9:9e:9e:
                    4a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:23:10:2A:3E:C4:F1:66:FC:D7:4A:DB:DB:79:4F:91:97:28:03:70
            X509v3 Authority Key Identifier:
                keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:00:ff:81:84:cc:d5:89:d6:73:09:63:b5:11:5b:da:0c:70:
         3a:04:29:85:2d:a1:89:d1:83:27:21:d7:31:44:78:0c:c2:f5:
         5a:24:54:f6:3f:62:bf:5d:d7:fb:97:b8:3b:b0:d9:4e:28:79:
         6d:6f:7a:70:cb:5e:d5:f5:bf:82:9e:87:aa:6f:8f:b4:0a:8a:
         bb:81:7b:7b:41:bf:ea:14:6f:31:69:eb:ba:a3:c4:3a:36:e1:
         36:d8:d1:06:7a:a4:7c:b5:28:0d:f4:a5:ca:2c:66:6a:aa:57:
         c1:82:08:99:c1:53:39:f9:51:92:75:0d:8d:6b:ca:7e:0a:c2:
         39:e5:63:bf:d2:af:f0:34:e7:6b:f7:1f:e6:b5:fb:f9:f5:65:
         f7:c9:0b:73:1b:af:b9:e5:f0:eb:f8:73:57:5e:5a:f1:61:2f:
         e1:d7:7f:86:7a:18:16:97:3b:42:2a:45:0f:0d:57:62:ff:4b:
         e0:4a:61:fa:85:a3:d5:4c:45:d2:5d:1a:00:d6:89:23:0e:2b:
         3e:09:82:2e:f8:41:fb:07:42:e0:4d:9a:1e:29:d9:9d:2c:b8:
         89:67:e4:25:d3:e7:f2:93:ef:c4:20:26:77:3a:b8:9b:67:be:
         04:ab:b3:28:97:08:d4:52:f0:74:41:39:7c:7d:f5:8c:06:a9:
         ff:6c:b8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----