Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
File:                     ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json)
Hash identifier:          pi/v1tH/RPoZeuS68GNGrN7j0zu0wu6SzOaEOtZ5TN8=
Subject key identifier:   92:21:2A:FF:CC:8C:E6:2F:CA:17:FE:4A:F3:96:20:CF:94:79:6E:1A
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Certificate issuer:       /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial:       019356F6C286362CE12378A95638328B9BD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 03:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:32 +0000
Files and hashes:         1: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: ReKcucXB5qieokC/F+thKK/aLWGdXG0AU//VkiCWHeg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:c2:86:36:2c:e1:23:78:a9:56:38:32:8b:9b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
        Validity
            Not Before: Nov 23 03:00:32 2024 GMT
            Not After : Nov 24 03:00:32 2024 GMT
        Subject: CN=92212affcc8ce62fca17fe4af39620cf94796e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:90:fa:af:0d:ef:9a:6c:e2:a3:7c:83:6d:b7:
                    b2:28:55:81:17:c7:a2:21:a8:ab:e0:e3:0a:ab:0c:
                    b8:83:72:4e:1b:1f:f1:30:f0:0d:59:c5:81:75:08:
                    db:73:42:04:0f:aa:d2:d0:8b:52:29:be:49:9f:27:
                    07:c8:8d:b7:9a:08:30:7e:18:a1:c7:1f:b2:57:a2:
                    40:b4:9c:b2:be:25:00:14:8d:82:88:38:3f:ec:3c:
                    67:3f:46:b0:af:d4:f1:30:20:46:97:b6:1b:91:e4:
                    5d:1f:76:7f:fa:32:e2:cb:97:b8:b9:5d:ad:17:a0:
                    c9:68:c8:18:46:14:c8:aa:92:7f:a6:59:6c:2c:b9:
                    2f:19:c1:44:3e:65:c6:14:4d:64:04:a8:f9:55:3f:
                    6d:1b:08:70:71:ad:88:af:8e:14:20:a7:2d:3b:f4:
                    fa:0e:8f:cd:4a:e4:1d:b1:d0:63:05:7e:4e:b3:6e:
                    db:c0:6d:49:07:44:cb:76:4e:b9:b3:a7:e5:d6:f1:
                    38:99:fd:34:90:bd:ac:6a:82:f3:ff:8f:0e:14:4d:
                    f2:47:ce:2d:e6:4b:b5:36:95:72:3e:f0:87:e3:bc:
                    76:d5:be:c8:a4:84:67:3a:81:73:80:50:94:cb:5a:
                    91:03:24:ef:c7:c8:c1:0b:49:ca:7c:d3:8d:0c:64:
                    9b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:21:2A:FF:CC:8C:E6:2F:CA:17:FE:4A:F3:96:20:CF:94:79:6E:1A
            X509v3 Authority Key Identifier:
                keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ac:e2:1e:69:af:15:7b:94:37:b5:3b:18:8c:ef:59:7a:80:
         be:5c:7b:53:dd:c1:4e:21:22:e7:af:c8:94:7c:e9:a3:2a:8e:
         ac:3e:9e:64:1e:d8:5e:4c:a7:08:fd:82:78:ae:ff:e7:a7:ec:
         af:d2:dc:ff:b3:ec:f7:3c:73:af:12:77:d4:6e:83:0d:b0:35:
         0f:c2:db:2d:50:c6:f1:80:23:ff:bc:75:ec:09:f6:51:0d:46:
         e6:8b:73:c9:53:e0:a0:f9:cc:7b:b7:28:d6:e1:9b:12:d6:09:
         d1:48:04:a0:45:17:17:a0:69:c7:61:4f:7e:c0:cc:63:1a:b6:
         e9:da:f7:58:4a:d5:12:50:cb:57:6a:eb:2d:eb:ae:8d:51:b8:
         f4:68:0d:28:65:78:72:74:78:7c:09:6f:e4:ab:ac:01:3d:4e:
         56:68:b9:30:5d:a8:6c:c4:eb:40:93:9c:10:1e:ea:c4:c6:6d:
         23:dc:4a:cc:d1:72:bb:f8:a6:05:ec:8c:26:21:bb:22:29:99:
         5c:c5:4b:02:ae:d4:f6:a5:13:a6:bd:74:93:42:60:8e:94:51:
         ca:9d:1b:5a:34:a4:1a:85:a5:76:25:eb:39:e7:a7:4b:c1:74:
         9c:5a:4c:2f:5b:fb:7e:cd:24:98:5e:00:98:f7:85:93:ea:1d:
         bc:d5:ef:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----