Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
File:                     EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft (raw, json)
Hash identifier:          r53l/1LGyNnRT+oXK/hTCYXl6yVHhuD/VOSiWT0tRVw=
Subject key identifier:   B7:38:68:20:45:A6:13:8C:E9:94:C3:00:66:32:08:29:AA:20:03:98
Authority key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
Certificate issuer:       /CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Certificate serial:       0193568A23158BE2B4E1F184CAC91A25883C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:53 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:53 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:53 +0000
Files and hashes:         1: EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl (hash: Smh7YycM1iTsWYUcwUg68rUunC+ZwpBMDqPpyWU6KMw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:23:15:8b:e2:b4:e1:f1:84:ca:c9:1a:25:88:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
        Validity
            Not Before: Nov 23 01:01:53 2024 GMT
            Not After : Nov 24 01:01:53 2024 GMT
        Subject: CN=b738682045a6138ce994c30066320829aa200398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:42:9e:ec:4b:fc:9d:13:53:29:08:f6:24:
                    1b:c4:05:c9:31:dc:63:61:66:54:05:9a:e9:a0:1c:
                    49:4b:9d:4b:a8:cc:75:7c:6e:92:c6:f8:52:b1:ef:
                    bb:71:df:63:4d:5f:c5:31:05:1e:3c:fa:c1:c6:3f:
                    c6:49:08:bc:c5:6f:a5:f9:cc:72:b5:89:73:92:e4:
                    ba:31:fa:18:e8:3a:d8:44:14:5c:45:75:ef:b8:08:
                    ea:e1:1b:0a:19:8a:7a:ff:29:34:fb:b4:08:e5:15:
                    b5:ab:b0:be:b6:b0:8c:b2:78:ca:d1:08:89:4b:7a:
                    f3:55:a3:e7:f1:ea:39:83:32:9a:fd:7d:72:ec:17:
                    9f:48:da:cb:a9:9a:3d:6e:59:d9:d4:2a:00:b4:5f:
                    c4:a4:49:bf:56:dd:17:ee:39:31:61:10:8a:b7:26:
                    6a:e7:30:3f:3e:7d:a9:1e:de:e9:4f:6f:a3:d9:79:
                    3f:30:70:5b:51:99:bf:1b:f3:de:6c:d8:1b:0f:df:
                    2c:72:48:97:41:8c:f9:fb:09:ae:7c:37:43:d6:b7:
                    b1:15:ee:7d:cf:9e:53:d4:26:7d:b9:1c:fe:da:d6:
                    05:bc:38:f8:3a:95:d8:0c:5c:23:f3:fb:c1:97:46:
                    45:81:ce:fd:cc:45:d8:13:83:f6:42:86:77:d7:ee:
                    61:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:38:68:20:45:A6:13:8C:E9:94:C3:00:66:32:08:29:AA:20:03:98
            X509v3 Authority Key Identifier:
                keyid:11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a6:6d:06:de:1f:8e:e5:af:03:36:a8:2e:e5:7b:9b:67:89:
         de:34:46:85:85:ab:b8:08:78:35:d9:61:c0:3f:d8:b9:7f:23:
         6a:48:36:fb:bd:a7:fb:50:55:e7:7f:82:26:9e:6f:ca:ba:f6:
         7a:49:af:78:be:09:93:80:d7:e4:4f:98:14:fd:02:94:fa:c6:
         2a:1e:5d:93:58:3f:6a:85:f0:12:17:ea:68:24:f9:88:1b:3e:
         9a:da:24:47:30:21:c1:5a:3d:12:f3:0d:5a:14:18:a6:f2:40:
         d6:c5:94:1f:83:08:79:69:65:4c:fe:b9:9b:fe:6c:d0:e0:8a:
         1c:c7:aa:2c:9c:be:a2:5e:d5:86:51:b3:98:cb:ea:4d:8c:5a:
         7c:0a:0e:07:ff:f7:d6:de:ed:fd:9d:06:28:1e:0b:6c:e6:a9:
         d1:c6:eb:c2:a6:a4:d3:84:dc:3b:33:72:00:6e:3b:1a:ec:e8:
         3d:37:45:f2:93:01:63:02:be:5b:08:23:0e:a8:ab:65:60:25:
         b3:8b:14:93:f7:04:b6:d8:40:66:1a:6f:3f:cd:e6:4e:01:1a:
         e3:21:39:1f:9a:31:e9:50:6e:d8:db:b8:84:5c:47:c6:21:96:
         3c:36:2c:30:d0:5e:d6:1e:d6:4e:a8:18:85:99:4c:96:bd:bb:
         05:b6:f0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----