Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File:                     z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier:          OvSsjjIte/88VIvXBITjcg7BHot0mBy+yQb/fTJ/Z78=
Subject key identifier:   B9:64:6B:BF:A9:0D:3C:06:45:BD:A4:76:8F:3A:C4:C1:DF:16:CC:D9
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer:       /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial:       0191FAED07FD2B7255962AF355EF2211035C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number:          0C4A
Signing time:             Mon 16 Sep 2024 13:02:03 +0000
Manifest this update:     Mon 16 Sep 2024 13:02:03 +0000
Manifest next update:     Tue 17 Sep 2024 13:02:03 +0000
Files and hashes:         1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: UR9pXSueouPE8xdLD5OLm+iMrz7/HUeBZskFhwBg2fE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ed:07:fd:2b:72:55:96:2a:f3:55:ef:22:11:03:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
        Validity
            Not Before: Sep 16 13:02:03 2024 GMT
            Not After : Sep 17 13:02:03 2024 GMT
        Subject: CN=b9646bbfa90d3c0645bda4768f3ac4c1df16ccd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f3:4a:08:a3:4c:e1:31:a5:d3:08:81:51:ca:
                    99:6f:15:39:2b:ea:d7:98:e5:cd:09:04:1f:28:4c:
                    77:48:6c:cf:39:28:5a:e0:bb:d1:ca:31:2b:f9:a7:
                    a0:49:2f:9d:69:7f:42:fa:80:2c:4c:1f:6a:de:b9:
                    5c:32:a2:46:64:03:b4:e6:31:7f:4b:56:99:61:3d:
                    5f:a4:29:1c:53:b3:8f:92:15:f1:1b:61:b2:2b:90:
                    ad:dd:d7:61:6a:65:59:7c:10:73:c2:2a:31:6e:fb:
                    b0:a8:64:7f:a3:e5:80:f4:c6:40:91:ef:5e:89:77:
                    48:be:e2:00:50:a6:a5:a0:c4:3f:10:7b:90:d8:68:
                    bb:c1:7f:2c:09:95:de:fb:87:1a:f8:a8:9c:f1:2a:
                    bf:cb:2f:85:d6:46:14:49:ca:87:28:6e:f7:b8:2d:
                    97:40:5c:ab:12:4e:67:9d:6e:61:f8:76:ff:15:c8:
                    4a:88:a4:47:4d:10:3e:29:bf:27:8b:f4:3f:28:a2:
                    87:51:fe:da:8f:d3:e9:d1:6b:03:16:34:a3:0f:69:
                    d2:cc:53:c0:33:c9:8d:41:f8:0e:0a:ee:34:15:0a:
                    4b:bb:dd:ba:8f:f0:81:a9:77:f2:66:78:ce:fc:40:
                    1f:87:76:a0:46:8d:10:f7:35:a5:e4:b2:8f:19:4f:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:64:6B:BF:A9:0D:3C:06:45:BD:A4:76:8F:3A:C4:C1:DF:16:CC:D9
            X509v3 Authority Key Identifier:
                keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9b:d6:dc:6a:41:ce:bc:1d:0e:a0:70:ad:46:50:59:20:8f:
         28:e2:24:42:2f:61:a2:e2:06:e2:32:47:a9:48:21:a2:18:08:
         8e:eb:b3:f6:58:df:6e:e7:9b:ad:b5:11:1c:3b:32:ca:27:90:
         e9:ee:01:0d:fd:c9:c4:1d:d4:a3:0e:cb:a1:b8:62:89:b8:94:
         55:91:71:45:87:bf:c8:f1:7c:70:38:34:fd:61:65:3d:6b:de:
         ed:aa:83:2c:0f:90:5a:b0:ac:32:3a:8e:e3:30:84:ea:7e:83:
         2f:0f:62:2e:e4:2c:db:e0:17:5b:b5:32:d4:d9:d9:d3:73:c7:
         8f:94:81:e4:b5:86:b6:61:a0:43:2c:5c:9f:11:6f:d8:22:cc:
         b0:4b:12:5f:50:5b:88:ac:06:31:5e:b1:16:68:ec:9f:08:ab:
         3f:19:2e:4a:aa:d7:3e:c2:d8:4a:d5:35:f4:90:24:7c:75:2d:
         b8:c4:de:31:66:4c:e9:4a:fc:fd:6b:0d:e9:4b:fc:fa:ab:0f:
         6b:2d:1e:36:b1:c3:64:b2:b4:3c:c8:39:41:95:83:27:fc:ff:
         14:ef:00:ed:3a:c5:08:2c:df:78:65:66:91:53:24:d4:8f:d0:
         80:fa:fe:97:a4:e4:77:b2:e9:25:1c:24:1f:1f:4f:69:d8:f3:
         66:48:c5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----