Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
File:                     XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json)
Hash identifier:          jYp+wajwZ9GcOg7AqkZUeZSbENEsiieXsM1CxoIxb4I=
Subject key identifier:   2B:9F:61:8B:75:0C:1D:40:A9:91:37:0F:10:60:E6:26:CC:53:29:70
Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
Certificate issuer:       /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Certificate serial:       0191F9D9D574E00D3EE76DB65211D7A76698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
Manifest number:          EB
Signing time:             Mon 16 Sep 2024 08:01:28 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:28 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:28 +0000
Files and hashes:         1: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: uRX2krI2z5hvxMH1FA7Q708RSy2Ugsaz7vaGl9xFPnc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:d5:74:e0:0d:3e:e7:6d:b6:52:11:d7:a7:66:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
        Validity
            Not Before: Sep 16 08:01:28 2024 GMT
            Not After : Sep 17 08:01:28 2024 GMT
        Subject: CN=2b9f618b750c1d40a991370f1060e626cc532970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:31:11:2d:77:d5:5b:79:82:c5:a5:b9:77:
                    cc:e4:2e:ce:5d:10:9e:f6:2c:4e:11:cf:be:eb:b9:
                    65:3a:66:3e:e5:a9:3c:2d:59:82:21:a3:35:15:1e:
                    2d:c6:0c:99:7d:3f:3c:0d:12:d6:17:29:fa:de:2d:
                    b6:9c:c2:26:5e:db:ef:63:46:2e:4a:db:00:6d:04:
                    50:62:3c:7d:58:b6:3f:24:a6:16:da:77:c2:c9:be:
                    1f:c6:06:36:71:7e:55:27:a8:3a:b6:46:4a:df:c1:
                    c8:3b:91:26:bc:3d:73:13:e6:2a:b2:bc:18:9b:47:
                    30:13:aa:af:75:0f:7e:65:6a:39:e5:ef:b5:24:04:
                    ee:10:e4:c3:c8:8a:bc:cd:ce:65:f2:84:80:cb:19:
                    a9:d8:a0:da:2a:6e:ea:97:a6:82:69:b8:b4:1b:18:
                    85:15:12:d0:c3:23:e7:53:30:31:e9:4f:21:4c:c3:
                    ea:79:b9:fc:7c:2e:9e:08:85:b3:b5:12:2c:6a:19:
                    da:c4:3e:04:d5:e7:f1:7b:15:ed:e2:66:c8:e0:9e:
                    3b:2e:ad:66:de:c5:d5:72:c8:ab:c0:82:07:6c:3f:
                    6d:be:e3:52:be:c0:6d:ef:05:fd:e2:9b:1a:3c:7f:
                    28:fc:d4:01:90:40:1c:87:d6:88:b5:93:a8:ff:85:
                    5c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9F:61:8B:75:0C:1D:40:A9:91:37:0F:10:60:E6:26:CC:53:29:70
            X509v3 Authority Key Identifier:
                keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:56:46:c9:5c:49:85:ed:1a:9e:61:28:19:00:1b:f8:d0:a1:
         3c:e2:46:a3:b0:e9:a5:2a:60:2f:77:cb:99:da:f6:11:56:bc:
         27:1f:09:c7:09:7e:93:05:9d:ae:7f:41:10:fb:e2:d6:70:42:
         8e:61:6c:79:c2:a9:51:6c:fa:35:cb:3e:5d:49:fe:89:6e:a6:
         9a:4f:12:51:98:dc:29:ce:01:46:5e:b0:2b:d0:d3:9d:6f:c8:
         82:f1:c3:d4:30:96:18:87:d1:6d:7a:e7:14:ea:cd:55:ec:83:
         d9:9e:72:eb:3f:1f:48:93:ae:25:5b:7a:60:46:57:8a:c1:98:
         e4:7e:3a:88:fb:34:7e:cb:3e:af:56:5c:8f:ea:d4:d6:61:c8:
         dc:e1:05:f2:d5:c6:e1:8e:f6:9a:b0:db:4b:b5:80:a6:af:a7:
         15:80:f1:c6:dd:11:5b:5b:7b:b7:1d:78:df:d4:d9:dd:dd:72:
         6a:58:f1:91:5e:c2:69:43:86:7b:eb:00:ae:8a:b7:5a:b1:1f:
         a0:c4:c2:62:0f:9f:42:04:91:8d:c6:27:70:dc:d9:01:60:43:
         c1:b3:8e:0c:ad:ec:cc:60:c3:ed:59:a4:27:2e:32:fe:f2:0d:
         05:e6:89:3d:04:06:eb:30:81:e3:32:3f:08:0a:e2:1e:e2:33:
         58:10:9a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----