Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
File:                     Km9uXKXbQ3eec6znzhbs4O55R5k.mft (raw, json)
Hash identifier:          WrDgxptyrGMzvmL9XmMAqoL2Tu5+ldJcB//tAR49H/0=
Subject key identifier:   18:0C:70:CC:9F:24:8E:11:09:37:1D:8E:A5:AD:03:65:FE:94:74:75
Authority key identifier: 2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
Certificate issuer:       /CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Certificate serial:       01936632BF285A2CB9E135D50FB539F81EFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
Manifest number:          01FB
Signing time:             Tue 26 Nov 2024 02:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 02:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 02:00:21 +0000
Files and hashes:         1: Km9uXKXbQ3eec6znzhbs4O55R5k.crl (hash: iOnHDePiOZzlcfCSgFFvXRg/jMhJb/ZiSK6B/fgd2uo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:32:bf:28:5a:2c:b9:e1:35:d5:0f:b5:39:f8:1e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
        Validity
            Not Before: Nov 26 02:00:21 2024 GMT
            Not After : Nov 27 02:00:21 2024 GMT
        Subject: CN=180c70cc9f248e1109371d8ea5ad0365fe947475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8f:40:11:e6:7c:c7:9e:3a:1a:06:18:10:11:
                    3a:72:70:ab:ab:4b:99:ee:bc:6a:52:b7:7f:11:5a:
                    3c:2c:c6:ac:bb:30:92:78:48:44:92:c8:c3:4c:2e:
                    86:4a:32:79:00:62:66:9b:1d:ec:96:68:5a:4b:57:
                    16:e8:a8:83:ef:72:74:a1:cb:1f:73:ec:1f:bb:4e:
                    dd:d6:ca:fd:25:c6:ca:cb:5e:fd:65:c4:52:21:1b:
                    be:ab:9c:f1:61:07:23:15:35:3f:65:21:58:7e:88:
                    f7:5d:65:2a:49:07:2e:0e:d2:77:3e:ec:cd:b7:7d:
                    50:6f:a2:61:25:07:c7:60:6a:9a:f2:db:f2:89:c6:
                    a4:a4:3e:91:12:04:d3:ae:01:97:4a:59:3c:da:5d:
                    64:92:96:76:ec:9d:e8:d7:ad:ac:8c:7f:22:8b:d1:
                    81:9d:c7:67:f7:68:a8:3d:06:c9:5c:1d:48:e0:b6:
                    56:92:e5:5b:18:19:67:52:21:5e:94:ec:13:0d:ee:
                    8a:55:ae:81:e9:c8:eb:5b:4a:9a:1a:74:8b:d4:bd:
                    e8:ac:17:29:23:d7:79:65:be:cc:ce:f7:de:a0:78:
                    31:26:da:58:2a:31:12:74:3b:9e:cc:56:85:0b:b8:
                    dd:a7:9c:a4:02:d3:d4:da:7b:f5:87:a0:b3:82:42:
                    65:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0C:70:CC:9F:24:8E:11:09:37:1D:8E:A5:AD:03:65:FE:94:74:75
            X509v3 Authority Key Identifier:
                keyid:2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1c:e9:d0:37:d1:a5:cc:d0:fc:f7:f9:d8:d9:51:47:83:50:
         81:d0:3b:5f:ad:f2:f3:3d:91:9a:30:fc:6a:f5:5a:05:a7:e6:
         6a:96:b7:43:25:74:cb:41:4b:32:3a:76:3e:85:50:7e:45:c5:
         a4:39:40:74:31:9a:ea:51:90:c3:94:01:fc:7e:f9:9b:64:86:
         66:6a:6b:29:72:eb:de:9e:e5:3d:93:aa:45:40:8f:b0:18:d2:
         fd:c1:15:27:e2:d3:4c:d2:d6:fc:93:30:5b:af:5f:c4:74:52:
         54:2e:da:9e:8d:f9:50:c7:d2:a6:46:2a:fa:36:55:73:41:a0:
         a3:83:e5:14:9a:79:1a:1b:fb:f6:91:d5:e7:fe:e7:3e:48:6c:
         9b:7b:a0:57:f2:e1:3b:fd:ad:2f:d8:c1:fd:81:d2:86:99:8f:
         b9:48:33:f9:6d:21:c0:eb:2d:25:d8:f1:e2:68:cf:9e:f9:2d:
         6f:6e:10:95:f9:c6:df:4a:73:6d:80:eb:bf:20:6c:4a:ba:c0:
         12:6d:86:5f:ac:a3:e9:22:33:0d:2f:40:41:7f:6f:74:4d:36:
         55:8e:06:2b:6d:e0:8f:5c:89:f5:65:b9:cf:67:25:c8:9b:26:
         a8:e9:02:34:63:1c:8f:5b:d1:6a:dc:cb:fa:f2:62:69:ab:8e:
         22:8f:8d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----