Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
File:                     vMdRnWKILvRnL6ISdmJXJ6L74GE.mft (raw, json)
Hash identifier:          n9h+D2Za2Vj5tGx2u+1V61C7BrTpZDlabohFHRTfOwo=
Subject key identifier:   99:6F:1C:5E:A9:07:AF:95:A0:9F:10:36:A3:B2:C3:78:84:EF:B7:94
Authority key identifier: BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61
Certificate issuer:       /CN=bcc7519d62882ef4672fa21276625727a2fbe061
Certificate serial:       019356891F3C88EC68EBCFBD555D8C9842D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
Manifest number:          0BD6
Signing time:             Sat 23 Nov 2024 01:00:47 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:47 +0000
Files and hashes:         1: vMdRnWKILvRnL6ISdmJXJ6L74GE.crl (hash: W8C5IK3V/YkL7IBJSXdYJFEWYtrHqalfvwEp9aJrhbs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:1f:3c:88:ec:68:eb:cf:bd:55:5d:8c:98:42:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc7519d62882ef4672fa21276625727a2fbe061
        Validity
            Not Before: Nov 23 01:00:47 2024 GMT
            Not After : Nov 24 01:00:47 2024 GMT
        Subject: CN=996f1c5ea907af95a09f1036a3b2c37884efb794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:50:35:a0:b6:bd:71:0c:2d:c9:2d:25:d1:60:
                    04:5e:87:83:36:9c:ed:38:cb:28:63:fd:49:02:3d:
                    79:f1:04:78:05:ef:c8:06:e5:d5:a5:f7:a8:1e:54:
                    7d:26:b8:be:91:c3:a4:c9:63:09:f6:95:e6:76:1e:
                    2b:da:42:74:22:61:af:ec:4e:09:17:b4:97:ce:e0:
                    8d:2d:33:38:47:3c:a3:ea:9f:95:ee:e0:b0:3a:2b:
                    87:ce:a7:5e:9a:47:62:dc:4b:dc:0b:7a:a9:c1:19:
                    9c:4c:ad:b2:6d:c3:f8:6c:08:36:46:be:eb:4a:47:
                    17:89:c6:54:e0:bd:f0:30:ed:3a:d8:39:33:5f:e5:
                    43:dd:9e:4e:6e:5f:ce:a8:c5:03:6a:d6:e9:ea:6d:
                    dd:a0:9c:70:44:05:06:25:d6:ea:fa:c8:96:f6:62:
                    6a:54:e7:78:21:5f:75:62:6b:fe:be:a5:e2:0a:4e:
                    65:b2:58:4c:2b:5f:21:3f:26:e2:3f:a2:d9:4f:a5:
                    e2:33:b8:e4:2b:d2:ac:3c:00:a7:63:79:ac:db:91:
                    72:f4:93:a2:e4:34:6c:27:74:a6:c2:88:e1:c5:30:
                    37:30:ad:6e:e3:3c:18:89:bb:9f:70:60:7f:e2:65:
                    21:4e:f9:76:9f:83:d3:58:a6:fb:9c:65:56:a9:47:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6F:1C:5E:A9:07:AF:95:A0:9F:10:36:A3:B2:C3:78:84:EF:B7:94
            X509v3 Authority Key Identifier:
                keyid:BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fa:2b:28:ff:67:c6:e8:4b:23:af:44:77:7d:92:d9:30:62:
         a0:f9:38:4c:8a:bb:fe:fb:79:c3:99:93:f5:90:10:5a:ef:14:
         da:1b:46:f1:23:9a:26:ff:06:81:f9:11:33:0f:3b:19:64:8c:
         6e:d8:13:19:be:4c:f7:54:b0:cc:e4:eb:c1:a7:94:e1:48:fa:
         d2:30:4a:e8:53:e9:cb:50:be:67:73:a4:54:84:9b:c9:4e:2d:
         77:92:65:ed:bd:51:78:e2:45:ef:c3:5a:5c:3a:64:b5:83:e6:
         67:57:4c:05:20:c0:66:76:8d:7e:62:7a:9e:f0:6c:cd:cc:cd:
         04:75:6a:8f:b8:9a:9d:ca:b3:5f:18:df:2e:06:a4:91:33:20:
         32:ff:2d:05:80:dd:04:2c:9e:a6:80:cd:b9:e1:93:c8:ef:3d:
         de:e4:29:97:f5:bd:f9:90:1f:73:b9:21:58:89:d2:97:5f:5c:
         4b:80:31:74:cf:62:55:1a:1f:9d:ed:e1:d3:05:d4:af:78:55:
         3a:c4:11:dc:93:5c:1a:8e:45:66:39:20:cd:6e:dc:e0:95:1b:
         5e:a1:95:68:0d:75:19:69:d1:a0:22:37:2f:64:a9:fb:3e:9a:
         28:53:42:4b:5c:bd:3e:7d:0c:cd:d7:38:4a:b7:f5:ad:44:2e:
         04:3e:21:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----