Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft
File:                     EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft (raw, json)
Hash identifier:          33hG/JShi4rqeTTfJGrV3PAt+7+E3tA7P367LxBWNnA=
Subject key identifier:   4E:F5:02:BD:0C:6D:DA:DD:C7:76:4D:16:2E:49:CB:15:4A:7F:B8:F7
Authority key identifier: 12:85:1D:15:A2:D1:85:FA:F3:68:CE:C5:E0:63:8B:01:1F:1D:A9:02
Certificate issuer:       /CN=12851d15a2d185faf368cec5e0638b011f1da902
Certificate serial:       01940647A32BC47991B4E630115868094F9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EoUdFaLRhfrzaM7F4GOLAR8dqQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft
Manifest number:          0AB1
Signing time:             Fri 27 Dec 2024 04:02:25 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:25 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:25 +0000
Files and hashes:         1: EoUdFaLRhfrzaM7F4GOLAR8dqQI.crl (hash: EZzQRCGiC8YPVytJVDh3DrIpGcGvutply+xdTlDUEBY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EoUdFaLRhfrzaM7F4GOLAR8dqQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:a3:2b:c4:79:91:b4:e6:30:11:58:68:09:4f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12851d15a2d185faf368cec5e0638b011f1da902
        Validity
            Not Before: Dec 27 04:02:25 2024 GMT
            Not After : Dec 28 04:02:25 2024 GMT
        Subject: CN=4ef502bd0c6ddaddc7764d162e49cb154a7fb8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:7d:5e:a8:dc:71:37:1e:5e:34:69:78:94:
                    20:ee:06:8f:fb:ef:8d:15:07:0d:f5:13:e8:36:42:
                    1f:5e:ba:c9:7e:09:41:35:8b:d3:44:fa:83:1e:8d:
                    52:a8:c6:a5:39:0b:2d:15:3e:b0:72:09:b9:04:5b:
                    a5:17:3a:bb:ba:ca:58:51:44:4c:79:4f:de:de:4f:
                    2d:6d:73:29:3f:1e:82:7c:a6:61:ae:62:ec:ab:e5:
                    f5:08:dc:93:e8:c9:a8:44:4b:91:db:b1:ff:ac:d5:
                    a1:70:62:61:dd:23:20:d7:7b:61:71:84:6e:2f:a3:
                    53:03:c2:ae:50:1b:b0:de:8e:4e:52:8b:a4:7b:ad:
                    7d:1e:70:7d:e7:c2:be:29:ce:38:53:18:9c:5c:9f:
                    9a:be:87:e4:69:c6:b3:d8:88:85:8a:b5:4a:9a:18:
                    c7:36:1d:bf:40:b8:3d:77:bb:90:df:c0:17:0b:8c:
                    6f:84:21:30:6c:db:85:c5:64:1c:d5:5d:31:e7:be:
                    06:a2:20:55:6d:e9:a5:c9:7b:55:cf:a2:a1:41:3f:
                    5d:f1:46:9a:52:a3:3c:0d:c7:51:34:b6:b8:c9:57:
                    fe:0e:03:d6:af:26:89:f7:fa:01:1c:bf:0d:ce:ec:
                    8a:50:f4:c6:b7:2e:fd:37:10:01:49:1b:09:35:8e:
                    3d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F5:02:BD:0C:6D:DA:DD:C7:76:4D:16:2E:49:CB:15:4A:7F:B8:F7
            X509v3 Authority Key Identifier:
                keyid:12:85:1D:15:A2:D1:85:FA:F3:68:CE:C5:E0:63:8B:01:1F:1D:A9:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoUdFaLRhfrzaM7F4GOLAR8dqQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:fa:b9:07:34:d8:57:8e:79:70:67:8f:9e:20:17:6e:c1:9a:
         c5:89:31:21:de:7d:4d:14:16:2b:96:a8:99:38:bb:2f:0c:16:
         0a:cb:94:52:7a:25:5d:97:0f:8f:d8:ca:a8:df:0e:7d:05:23:
         2b:98:41:ae:53:ab:44:e1:27:d7:cc:c5:99:73:d5:f9:85:c8:
         47:8f:08:6d:fe:42:55:3f:8f:4c:6a:ef:7d:9f:e0:69:6c:23:
         23:8d:06:03:05:06:de:51:e0:b4:7e:ea:0d:52:b9:0a:cf:bf:
         91:6c:cc:5c:59:86:bf:28:7f:b9:22:4c:46:b1:e1:cc:76:53:
         b6:76:f9:b8:cb:41:a1:aa:c4:37:c7:9f:53:ff:36:79:8d:5a:
         97:33:09:59:8a:95:ae:0b:38:08:bd:66:e5:8f:03:bf:6e:48:
         aa:60:47:06:3f:88:74:9d:81:04:f7:3e:45:cd:32:63:0f:61:
         44:7b:de:d5:90:06:49:65:f3:72:ae:6a:a2:16:ef:59:55:06:
         75:67:5f:ae:90:05:ac:99:58:d8:08:4e:75:1c:0f:73:10:b2:
         b3:73:b4:eb:ca:7f:47:be:29:39:2f:a7:6b:22:ce:0e:ea:6f:
         7f:13:58:ce:c7:b3:80:56:76:9d:2b:6d:c3:b9:c2:44:cc:ce:
         46:b2:8a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----