Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
File:                     1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft (raw, json)
Hash identifier:          lTQJrrnySEPnFK540JKj3LFmAXhgupQ1tLEAy50LCXM=
Subject key identifier:   61:71:AB:F8:F9:EB:3B:8F:A3:7D:AE:C7:D1:DF:8E:BF:F2:D6:0A:73
Authority key identifier: D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
Certificate issuer:       /CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Certificate serial:       01936B22765357A67FB0F299F220EC9D4811
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
Manifest number:          0DAC
Signing time:             Wed 27 Nov 2024 01:00:40 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:40 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:40 +0000
Files and hashes:         1: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl (hash: Ov7txvtQ6KPOvsTc9UhhMEfPc/RdvBayPA6e6aCo1gI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:76:53:57:a6:7f:b0:f2:99:f2:20:ec:9d:48:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
        Validity
            Not Before: Nov 27 01:00:40 2024 GMT
            Not After : Nov 28 01:00:40 2024 GMT
        Subject: CN=6171abf8f9eb3b8fa37daec7d1df8ebff2d60a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:99:47:55:cd:cb:69:77:64:01:a7:b8:e9:26:
                    9a:10:2c:92:51:8b:51:f2:13:3d:e5:02:4a:fa:2e:
                    fb:8c:ad:68:08:c6:e1:91:08:6f:3b:12:62:ae:53:
                    0c:17:b8:31:2c:cf:18:11:aa:4d:e2:1a:63:5c:07:
                    69:b9:d8:ed:16:61:7d:31:2d:f5:e7:4f:eb:77:13:
                    86:ed:9e:c1:cc:2e:fb:79:1e:d5:f0:af:15:f3:8a:
                    b3:5c:e2:96:88:b2:4f:af:16:43:07:14:dd:78:22:
                    82:b3:32:5a:db:6e:85:5c:f6:5d:92:d6:db:1d:f1:
                    b6:c6:2c:52:ff:64:8e:7a:ed:cc:4b:45:81:50:c3:
                    78:52:ec:9c:9f:4d:d5:8c:7e:d1:61:bf:bc:d9:bf:
                    fd:d2:8f:d1:90:2a:5d:89:8b:5d:71:44:42:9d:3b:
                    7d:fb:c7:84:d7:2b:b3:db:b1:73:6c:f5:5c:48:05:
                    d0:45:43:dd:61:c4:47:e6:ca:0d:92:6f:5b:57:f1:
                    a5:cb:2b:1b:6a:23:07:bf:70:d2:6d:ce:25:04:0d:
                    eb:88:9d:91:07:fa:1d:25:50:fe:4d:a9:8d:2a:ae:
                    be:db:9e:83:75:99:7b:d8:93:23:3c:41:8c:60:91:
                    aa:b7:c3:85:7c:48:6e:af:c7:95:6c:47:3f:50:49:
                    95:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:71:AB:F8:F9:EB:3B:8F:A3:7D:AE:C7:D1:DF:8E:BF:F2:D6:0A:73
            X509v3 Authority Key Identifier:
                keyid:D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d9:e1:c7:a9:f3:75:cc:a9:4f:b4:c3:c5:1f:d0:da:62:43:
         c8:72:5d:a2:85:26:5b:4c:d6:7b:fb:31:17:a8:4c:8e:71:d5:
         5c:a5:d4:34:f5:19:20:dc:46:d5:09:91:ab:b3:d1:88:7e:87:
         e6:42:b0:6e:4b:63:e0:ed:c1:45:0b:34:93:e3:13:43:2e:3b:
         78:9e:08:32:25:bf:9c:0c:f9:32:9b:b9:54:17:90:5c:c5:a1:
         04:c6:17:a3:19:61:c4:b1:5f:6d:6e:ba:96:95:ba:b2:d4:ec:
         9a:73:fe:9e:f8:7d:65:fb:71:fe:47:77:11:ff:9a:b7:bf:b8:
         bd:c5:bd:c8:6d:65:29:07:fc:14:ba:7c:63:71:88:12:c4:42:
         2e:77:ba:78:56:8c:4d:f7:07:15:ae:0b:4f:9d:31:0d:b6:f7:
         cf:fd:39:df:e4:32:b7:7a:59:06:e2:e8:74:39:d2:73:cb:24:
         a2:8a:55:c7:c3:de:31:d5:36:0a:2c:4f:25:a9:ff:12:cd:89:
         ef:9e:2f:3d:a9:29:87:d0:72:2e:8b:26:87:f6:a4:9e:79:74:
         6d:cc:7f:37:03:81:ba:cd:23:71:05:f5:cd:81:4a:3d:cf:5d:
         cf:72:2d:8e:16:5b:fe:b2:91:e5:73:c3:8b:7d:8c:75:2d:a0:
         58:ed:f9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----