Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
File:                     0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json)
Hash identifier:          x4g2+KXRolumFnSli3y9JrCVXJ/Xxq2SEELt8Xlw3ZU=
Subject key identifier:   65:F1:6D:5D:7C:9E:ED:C2:D4:73:BB:7A:FF:E9:55:D5:10:6B:18:DC
Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
Certificate issuer:       /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Certificate serial:       01923580B93A7B73CFA46E894009B08C18FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
Manifest number:          1012
Signing time:             Fri 27 Sep 2024 22:01:21 +0000
Manifest this update:     Fri 27 Sep 2024 22:01:21 +0000
Manifest next update:     Sat 28 Sep 2024 22:01:21 +0000
Files and hashes:         1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: f2GN8TpntRCCL2dd6l4xKfPjDfdwTOH6YiwVFxI4HQE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:80:b9:3a:7b:73:cf:a4:6e:89:40:09:b0:8c:18:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
        Validity
            Not Before: Sep 27 22:01:21 2024 GMT
            Not After : Sep 28 22:01:21 2024 GMT
        Subject: CN=65f16d5d7c9eedc2d473bb7affe955d5106b18dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:41:0a:6e:9e:19:93:00:33:ce:b5:a0:dd:7f:
                    bf:a6:5e:83:a8:06:a4:8a:30:f0:37:1a:3b:41:aa:
                    e2:f1:d1:17:83:c7:fc:10:a8:71:fe:45:a3:d6:f9:
                    4b:6d:49:02:c8:3e:24:14:0b:65:56:fb:12:4e:89:
                    6b:c7:d2:cb:6d:a6:87:4f:dd:bc:99:ed:ff:10:bd:
                    70:dd:cc:7e:7f:25:5f:8b:2e:93:68:bc:4d:1a:0a:
                    c6:91:08:0a:51:26:c5:fa:f2:df:aa:1a:d1:88:af:
                    7f:40:54:24:cb:57:29:90:c7:25:2e:c3:cc:4b:d1:
                    c6:92:de:e7:af:07:bd:b3:96:ac:b7:3a:f8:2c:35:
                    d0:9e:cd:7e:d0:de:9f:c1:e7:fa:83:ae:67:4f:24:
                    f6:ed:a0:f6:c2:18:21:77:71:94:a8:2a:f5:91:ca:
                    06:7c:ec:9d:df:9c:cf:9b:d7:0f:5e:22:cf:68:37:
                    db:cb:eb:ac:1f:2a:72:8e:4c:5d:54:04:e5:23:ad:
                    64:c5:23:06:d0:40:91:ed:6c:60:53:b0:c0:43:90:
                    e5:21:00:28:f9:2a:35:b3:e7:9f:6d:c1:e2:80:07:
                    b7:27:2a:e6:5e:ff:65:00:8c:83:0b:84:05:66:c6:
                    86:50:6a:08:2b:a2:22:83:a7:43:2c:4c:f8:83:00:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F1:6D:5D:7C:9E:ED:C2:D4:73:BB:7A:FF:E9:55:D5:10:6B:18:DC
            X509v3 Authority Key Identifier:
                keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a1:da:c7:29:4c:3a:54:14:cb:21:73:63:51:0e:b8:66:13:
         0e:da:1a:c9:6a:07:fe:78:6e:c6:d1:c7:27:49:04:6a:cd:af:
         4b:18:5f:42:04:a7:ff:32:3f:b1:35:c6:0c:23:e2:a3:fd:92:
         68:12:b7:75:9f:fe:4a:eb:90:b5:6c:1f:bf:2f:fb:8b:7d:91:
         5a:c6:e9:15:f3:cf:0c:d0:5d:e6:66:1a:23:e9:7d:10:3d:5b:
         5a:fc:ff:91:eb:ac:b5:e8:45:d5:5c:8c:ea:3d:b8:8e:3f:f7:
         d1:84:dd:ab:0d:1d:d1:10:61:b3:35:c8:84:fc:ce:93:99:30:
         96:2a:07:4f:d5:91:14:07:b0:0e:e9:3c:55:a8:63:f8:dc:48:
         37:ae:7f:c2:34:f8:f2:e5:30:ac:3d:f3:9a:74:ea:da:51:5c:
         51:8c:78:d2:30:ca:14:37:e0:b4:ee:42:fe:31:77:07:68:26:
         11:c4:eb:43:62:75:ac:03:93:fc:36:b4:22:1e:46:46:d5:d3:
         19:2b:03:bf:59:c2:f5:81:f1:09:a4:6a:93:0b:93:6f:d6:e7:
         e7:a3:b7:ed:aa:04:68:64:09:1a:44:76:92:05:9b:76:10:18:
         05:2e:79:0f:fd:d2:af:a4:97:37:11:ef:ab:9e:c5:9f:f6:f6:
         25:ba:00:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----