Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
File:                     GjrGrWXloJkgm4i4ec9KCK8IaN4.mft (raw, json)
Hash identifier:          mtInndCKuV5rb83ruX/fWhIK2Jv9byhTBahUiAUavec=
Subject key identifier:   71:98:A4:E9:B8:47:E9:04:AE:15:38:F7:4B:88:56:86:55:7A:0C:0B
Authority key identifier: 1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
Certificate issuer:       /CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Certificate serial:       019356F683150D4AE2ABC50F51342D770578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
Manifest number:          1260
Signing time:             Sat 23 Nov 2024 03:00:16 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:16 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:16 +0000
Files and hashes:         1: GjrGrWXloJkgm4i4ec9KCK8IaN4.crl (hash: OtvcfD2vsbys4aabbALYuNZBkBOei5KCVfbMtAUGW1U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:83:15:0d:4a:e2:ab:c5:0f:51:34:2d:77:05:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
        Validity
            Not Before: Nov 23 03:00:16 2024 GMT
            Not After : Nov 24 03:00:16 2024 GMT
        Subject: CN=7198a4e9b847e904ae1538f74b885686557a0c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:e8:a9:dc:74:b7:e2:e9:3e:74:a9:75:80:
                    7b:68:27:3d:4d:87:c5:90:e4:bb:9d:c5:26:e1:0a:
                    2b:f7:c7:e8:c1:47:ff:e8:78:94:b4:ee:5d:ad:02:
                    61:21:4e:f6:66:38:4a:a7:83:40:67:2f:f8:0f:ae:
                    b9:be:0f:22:48:84:0f:28:f1:db:48:0d:5c:4b:2e:
                    11:26:97:e5:f0:f6:e0:fe:44:66:8a:d3:f4:cc:7f:
                    0c:b8:9b:dd:8f:a3:f4:e7:a0:53:08:c7:dc:ff:7b:
                    af:a8:8f:d7:73:8f:a5:34:ac:de:a9:4d:4e:31:23:
                    c1:36:c0:1b:08:47:72:24:05:7f:93:dc:cd:40:07:
                    37:45:14:46:4a:fb:3a:27:2d:a8:c7:13:e4:4e:bd:
                    0e:dd:1b:e9:16:90:1e:83:e2:6c:7f:21:6c:8a:67:
                    35:a1:06:a9:5c:29:f0:80:94:a2:fa:8c:d7:fa:9f:
                    33:8e:cf:5b:06:a7:b6:75:b0:d7:f2:1e:05:45:e6:
                    0a:cf:bb:e6:0f:e1:f1:02:a8:3c:64:87:62:f4:76:
                    cd:73:cd:d8:75:d4:44:b5:11:a6:1b:54:9c:d5:d8:
                    70:26:81:01:65:97:e1:83:49:39:2c:93:e5:e3:2f:
                    a6:cc:b2:4e:72:04:42:3e:22:fc:89:3c:fb:4f:a5:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:98:A4:E9:B8:47:E9:04:AE:15:38:F7:4B:88:56:86:55:7A:0C:0B
            X509v3 Authority Key Identifier:
                keyid:1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:0c:8d:ff:2d:04:8e:2a:2c:2a:a7:c7:bb:75:40:fd:b5:0c:
         07:23:45:38:a3:d5:84:93:8d:bc:2a:11:f6:90:f5:f6:b7:73:
         e4:9f:8d:38:dd:b8:88:55:71:3c:d3:90:2b:02:49:85:2c:33:
         4f:73:ee:b9:c9:1b:23:82:18:1d:47:1b:b7:de:22:aa:52:66:
         df:a4:47:e1:56:8b:51:a1:eb:46:17:12:97:f5:fd:8b:6e:12:
         c2:5b:31:07:90:04:4f:34:9d:9e:f3:07:1b:06:56:c6:87:46:
         cf:6b:66:1b:a2:31:db:b3:62:5c:ed:d1:9d:78:b1:13:03:1c:
         2a:5f:3b:45:d7:4c:e0:dd:6f:fd:d5:79:7c:5e:f9:35:9e:44:
         b5:c4:56:27:04:d4:0b:0d:5c:26:a5:4e:9c:d0:b9:06:15:73:
         47:2e:57:e5:ba:d7:b2:53:ee:e6:7f:54:46:f5:d8:63:95:51:
         41:f4:b1:d0:90:a8:3e:75:ef:08:6a:37:06:5d:84:54:9f:07:
         5b:d8:89:6d:47:f1:89:d8:d4:e2:e0:7f:4e:8c:ad:32:5d:8f:
         9c:2c:d9:aa:b3:c6:c7:12:ae:15:74:27:a5:c1:1c:c7:0a:a1:
         36:9b:37:7e:69:54:e0:97:fd:3c:58:39:2b:bf:4c:93:46:b6:
         8c:96:1d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----