Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
File:                     t6K9aUc7So6Fp2r72OW77ptLs0s.mft (raw, json)
Hash identifier:          Yziql0ipci11nMt4BHaHZzVZRbs//a1aAdyOFgfNfBo=
Subject key identifier:   A0:58:51:4E:63:8F:7E:FE:89:E8:7E:1B:5E:CF:6B:52:CE:E4:95:F2
Authority key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
Certificate issuer:       /CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Certificate serial:       019369D9C92AE58FFE68DCC61989FB99B904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
Manifest number:          0CDF
Signing time:             Tue 26 Nov 2024 19:01:40 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:40 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:40 +0000
Files and hashes:         1: t6K9aUc7So6Fp2r72OW77ptLs0s.crl (hash: Z8wrwi92jOYxOawVtVXzDK0YIND3+U+N4oPIzqindYU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:c9:2a:e5:8f:fe:68:dc:c6:19:89:fb:99:b9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
        Validity
            Not Before: Nov 26 19:01:40 2024 GMT
            Not After : Nov 27 19:01:40 2024 GMT
        Subject: CN=a058514e638f7efe89e87e1b5ecf6b52cee495f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c5:fe:bd:27:7b:3d:87:eb:2a:4e:42:65:63:
                    bf:90:2d:65:33:26:ce:b6:9b:97:5a:1c:53:f0:48:
                    c8:3e:f3:36:4c:07:4f:2b:50:49:bc:3f:5c:9c:be:
                    3b:87:30:c4:df:d8:74:54:f1:f1:24:b3:03:cb:b4:
                    da:a8:c5:4a:95:55:1f:39:ad:19:12:4c:74:43:29:
                    40:89:c4:96:b1:f1:16:80:39:56:87:d2:db:66:30:
                    19:fc:ef:1a:ee:6e:af:88:c0:e9:77:5c:88:0f:4d:
                    6a:0d:de:8a:e6:6f:90:7d:42:1d:03:4c:94:b6:84:
                    91:1a:06:f4:d8:4a:e8:1e:14:fa:23:7c:e3:6a:11:
                    d9:aa:e9:75:82:45:f3:29:5e:fe:a1:83:df:ba:4a:
                    5e:e3:da:0b:ea:9b:e6:0a:1e:f6:49:6f:1a:af:0f:
                    f3:5f:d0:74:65:06:b7:73:26:3f:99:c4:b1:0e:16:
                    8f:cc:08:cb:cf:8c:f8:e2:a0:28:f0:96:3a:07:0e:
                    d2:7d:ed:ae:ba:78:78:a1:70:a7:a6:c2:7b:14:35:
                    1d:78:96:76:24:28:4d:b9:37:7d:4a:2f:e1:b1:fe:
                    69:f5:f8:ba:c5:d5:03:c0:01:75:db:28:c6:dc:c7:
                    a9:1a:8c:42:88:1f:87:40:33:0e:12:8b:d1:b9:40:
                    27:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:58:51:4E:63:8F:7E:FE:89:E8:7E:1B:5E:CF:6B:52:CE:E4:95:F2
            X509v3 Authority Key Identifier:
                keyid:B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:de:e8:f3:f2:25:1c:2b:e2:2f:eb:bf:70:03:d3:2d:86:74:
         ae:e9:94:bc:c7:f4:e5:c0:0c:0e:40:23:ea:1d:6f:da:23:62:
         9e:74:00:c5:7b:23:f2:d3:9a:83:2f:34:95:51:6c:19:a5:f5:
         da:ca:35:42:6c:3b:5f:9b:20:6c:f3:e6:e1:03:06:2f:be:8e:
         fb:f0:a7:f8:8f:be:4a:6a:a0:b0:20:be:01:dc:aa:b7:87:c0:
         a2:34:3f:37:42:96:fd:fe:e9:7b:86:f3:b1:6a:f1:8d:cd:c9:
         b5:c2:fc:89:56:33:1e:d2:1c:fa:06:3c:83:75:98:7d:64:ac:
         68:41:22:0d:38:24:3b:e9:5c:f5:fc:0f:5a:83:d5:d4:25:87:
         14:c1:8c:47:56:83:ff:50:04:05:fe:0b:67:e3:59:04:45:5b:
         d4:d9:09:54:6d:43:10:ab:5b:2f:d2:6b:c5:39:99:97:19:51:
         f0:4c:ee:a4:fa:71:0d:b4:68:45:d1:b3:39:bc:fd:0a:99:e8:
         79:d4:d1:99:6f:e7:5f:fb:24:4c:20:a9:35:46:03:1c:03:a1:
         15:69:a0:c2:21:73:eb:75:15:09:d5:7b:20:26:53:58:10:4d:
         29:e5:7b:43:64:d5:a2:3d:1b:77:9a:b9:96:0e:84:e4:8b:ab:
         f1:e6:8a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----