Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
File:                     ee-AdXX1WsX-nfSkqExMh2CPAoU.mft (raw, json)
Hash identifier:          +TdLbRnpv+vNh2PB2lNKJV+zacI0IH1mCvWen1RXbqM=
Subject key identifier:   A1:5F:0E:81:2C:8B:3B:69:C2:76:54:22:54:C6:4D:F3:B6:2D:29:91
Authority key identifier: 79:EF:80:75:75:F5:5A:C5:FE:9D:F4:A4:A8:4C:4C:87:60:8F:02:85
Certificate issuer:       /CN=79ef807575f55ac5fe9df4a4a84c4c87608f0285
Certificate serial:       01936A0F5C747B86D1116C3B725980DF694B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
Manifest number:          028C
Signing time:             Tue 26 Nov 2024 20:00:11 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:11 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:11 +0000
Files and hashes:         1: ee-AdXX1WsX-nfSkqExMh2CPAoU.crl (hash: wW6jgjv+B7JQ4+tdot15nF6nxjlH3l0+95bpyhYvqbE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:5c:74:7b:86:d1:11:6c:3b:72:59:80:df:69:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ef807575f55ac5fe9df4a4a84c4c87608f0285
        Validity
            Not Before: Nov 26 20:00:11 2024 GMT
            Not After : Nov 27 20:00:11 2024 GMT
        Subject: CN=a15f0e812c8b3b69c276542254c64df3b62d2991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:2f:ac:28:6f:2e:dc:0f:88:5a:b5:05:b7:
                    2f:8e:4e:f7:96:37:2b:b0:dc:0f:dd:16:94:b3:70:
                    17:e5:ab:15:a0:0d:f5:82:7b:2b:9a:60:e2:d5:5b:
                    c6:a9:17:c3:76:75:80:42:04:93:2d:84:53:e3:e2:
                    57:19:2f:6b:1a:83:47:6c:a0:d9:6d:38:36:39:d0:
                    c0:b1:0b:04:d9:8d:90:ff:0b:3b:59:ee:e2:43:fd:
                    2d:5d:bc:02:08:b7:f6:72:fc:db:af:b0:b0:7f:e4:
                    68:75:79:05:f1:e8:4a:77:e3:2c:85:4f:e7:3c:69:
                    9d:c2:35:a2:cd:2c:a3:56:33:a3:14:43:fe:bd:3c:
                    db:b4:d4:47:f0:8f:53:49:cd:f4:24:12:19:35:15:
                    49:b3:17:00:77:5b:7a:06:e6:c1:d4:bf:19:dd:d8:
                    74:f1:6a:1c:2f:1c:5d:73:5b:89:e8:f3:6f:57:47:
                    f6:29:82:16:f3:6b:d9:9d:e6:ef:f7:c2:a1:2b:ff:
                    ab:f4:dd:61:24:2a:97:23:ee:75:b1:93:87:ea:16:
                    cf:d8:68:d9:27:33:c0:67:e0:c2:32:bf:13:31:ae:
                    9b:f1:c5:92:4c:b1:fe:83:42:71:ee:dc:c7:ba:ae:
                    b4:26:30:b1:88:18:b9:d1:9e:31:2f:5b:2f:89:97:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5F:0E:81:2C:8B:3B:69:C2:76:54:22:54:C6:4D:F3:B6:2D:29:91
            X509v3 Authority Key Identifier:
                keyid:79:EF:80:75:75:F5:5A:C5:FE:9D:F4:A4:A8:4C:4C:87:60:8F:02:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:de:90:b4:d1:31:1f:05:11:15:3b:52:4c:70:42:a5:39:93:
         c4:68:2e:91:3c:fa:ed:37:fa:12:7d:cb:4e:b2:93:a3:53:25:
         b8:12:3f:98:ad:a1:b7:d6:f9:a3:9a:65:d1:bd:ec:04:b7:85:
         2b:0c:9b:5b:f5:6a:6b:72:a5:8b:8f:3a:b5:ae:c3:91:14:03:
         f2:0f:4c:7e:9b:55:25:44:88:62:83:78:d9:d0:45:7d:42:f0:
         8d:8b:58:7d:b2:78:ed:38:6c:75:a1:4b:3b:e5:b5:a2:45:a2:
         9e:ab:39:4d:4e:5a:99:a0:7c:c8:e4:8d:5a:d9:a2:80:51:21:
         5b:ac:f6:d0:bf:58:5d:00:8e:33:31:5e:43:29:51:08:28:b6:
         e9:97:b3:55:d9:40:de:15:1f:06:5a:0f:93:57:a1:2c:d0:80:
         b4:ce:42:7d:6e:4e:ef:a5:28:9c:ae:ad:09:d3:17:95:2e:07:
         e3:ba:7d:8b:4c:62:5e:d8:fc:cb:ec:fb:5f:5f:f4:29:87:25:
         74:47:cf:20:86:2a:24:05:7c:72:d6:d7:62:1f:35:f5:86:bd:
         bb:d0:02:89:b1:c0:db:f2:fe:c6:8a:57:ed:ed:f9:0b:1b:f4:
         01:5f:62:a7:47:41:1d:97:e7:24:03:05:7d:48:46:19:df:fc:
         2c:90:a9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----