Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File:                     Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier:          3u8fL9RRCD6cydNiRUzcXytD0KUGMLeh7wNhbr9Vz9Y=
Subject key identifier:   89:DF:96:ED:65:B6:E6:00:0C:3B:08:60:2C:ED:07:35:55:BE:6B:D7
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer:       /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial:       019369D8F1AE35BB9C32DBB06F3C5117CA3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number:          0FA8
Signing time:             Tue 26 Nov 2024 19:00:45 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:45 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:45 +0000
Files and hashes:         1: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: FsF5kRHwqrXmkNypOjrvtGNsX/ZP/KuvnKTlExm/l08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:f1:ae:35:bb:9c:32:db:b0:6f:3c:51:17:ca:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
        Validity
            Not Before: Nov 26 19:00:45 2024 GMT
            Not After : Nov 27 19:00:45 2024 GMT
        Subject: CN=89df96ed65b6e6000c3b08602ced073555be6bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:d3:26:6f:67:0d:1a:f4:36:a1:05:8e:07:
                    83:59:1c:a2:64:c7:b7:0e:a4:6d:bf:2b:5b:b8:13:
                    29:67:04:d0:e9:e8:79:76:15:cc:3a:76:e5:9e:ce:
                    45:f1:f0:d2:14:cd:b6:e2:df:3c:93:d1:5c:89:4f:
                    fe:5d:33:43:52:98:67:97:ee:47:3c:47:8c:19:87:
                    6b:1b:47:7f:52:5d:61:d0:ce:72:3e:79:65:1a:08:
                    4d:9e:0d:89:5b:31:81:79:4d:b0:7a:16:9b:d8:51:
                    fe:7f:a7:68:d2:66:4d:df:e0:96:1b:a7:10:8e:57:
                    8e:3c:07:f2:f0:72:4c:d0:ae:1b:be:a3:b3:75:5c:
                    ec:04:50:24:bf:d4:5d:c2:63:f0:80:07:21:66:89:
                    14:12:9c:38:74:68:6f:ff:5e:89:47:13:b5:2d:62:
                    e7:ce:8a:9a:91:78:a1:b0:9e:f0:6b:41:7b:20:0c:
                    eb:84:c7:c6:c4:e8:ae:a6:ce:0e:da:f0:ff:29:50:
                    b8:e1:d1:87:e7:1b:5a:12:5a:82:ef:f8:99:79:71:
                    4d:3a:58:25:5d:1a:37:53:aa:b6:7e:42:b9:3b:ab:
                    3a:c5:9e:0b:00:65:9c:2b:ec:50:ac:f0:ea:20:e8:
                    e8:9b:e0:7b:b6:3d:22:b2:8d:92:0e:8b:fc:5d:76:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DF:96:ED:65:B6:E6:00:0C:3B:08:60:2C:ED:07:35:55:BE:6B:D7
            X509v3 Authority Key Identifier:
                keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1d:6b:a5:a6:ea:7b:2a:ca:d5:df:72:31:91:0b:d9:f2:02:
         9f:53:c9:b0:4c:f1:e3:35:53:04:4e:5b:1e:5f:17:55:24:f6:
         9d:ee:90:72:d4:c6:ab:d9:cc:ba:88:a6:de:c2:a5:8f:4e:91:
         5c:d4:f5:eb:93:42:84:e2:ae:be:88:cd:71:83:09:22:ad:6b:
         00:f2:45:60:e0:ab:62:74:f0:c8:90:64:57:d4:69:ed:2e:b3:
         1c:f3:f0:c9:c2:00:bb:93:af:93:80:9d:ae:04:50:49:2d:9e:
         b0:da:aa:a9:4a:76:fe:f6:83:53:c8:71:49:d7:c9:11:ef:b1:
         76:84:3f:58:8a:84:7e:03:ec:6f:f1:78:72:80:10:2d:1c:b1:
         b6:cb:93:2f:4e:30:6a:b6:6d:9f:ca:dc:5a:82:86:55:63:df:
         00:7c:ca:40:50:48:c5:e1:e8:69:9a:e9:ba:6d:09:f8:14:ea:
         b8:62:1d:06:37:3b:b6:9d:48:4a:b1:ac:d3:f8:f4:35:bc:cc:
         e9:05:df:eb:0c:94:6a:97:84:17:da:6c:ba:11:d8:ea:49:f4:
         2f:22:4b:24:e7:65:d8:68:c7:1b:10:6e:02:14:9b:ea:62:0e:
         de:0b:b2:b8:74:df:21:ec:7c:e6:98:74:48:2d:8d:50:00:fb:
         2f:bc:15:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----