Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c1f0a2-bea0-4d79-b614-373ff1f59eb2/1/8kzCl2pp7R3X0Q89bSWcfJAkTFY.mft
File:                     8kzCl2pp7R3X0Q89bSWcfJAkTFY.mft (raw, json)
Hash identifier:          arEG80kJNammxl4di4j1yl+Z2+vODmryGE5r9Sw2nK0=
Subject key identifier:   A7:5D:07:99:D7:2E:60:FA:FF:58:04:A4:A1:41:D5:A3:34:E8:5F:42
Authority key identifier: F2:4C:C2:97:6A:69:ED:1D:D7:D1:0F:3D:6D:25:9C:7C:90:24:4C:56
Certificate issuer:       /CN=f24cc2976a69ed1dd7d10f3d6d259c7c90244c56
Certificate serial:       0191FA7E17C733D07BDBF9D309BF6CA5917C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8kzCl2pp7R3X0Q89bSWcfJAkTFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/c1f0a2-bea0-4d79-b614-373ff1f59eb2/1/8kzCl2pp7R3X0Q89bSWcfJAkTFY.mft
Manifest number:          0149
Signing time:             Mon 16 Sep 2024 11:00:53 +0000
Manifest this update:     Mon 16 Sep 2024 11:00:53 +0000
Manifest next update:     Tue 17 Sep 2024 11:00:53 +0000
Files and hashes:         1: 8kzCl2pp7R3X0Q89bSWcfJAkTFY.crl (hash: ZhWUbt7fpYCQQExFNTUPo2MPRW5r7bAohDhy918TrOM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/c1f0a2-bea0-4d79-b614-373ff1f59eb2/1/8kzCl2pp7R3X0Q89bSWcfJAkTFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/c1f0a2-bea0-4d79-b614-373ff1f59eb2/1/8kzCl2pp7R3X0Q89bSWcfJAkTFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8kzCl2pp7R3X0Q89bSWcfJAkTFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:7e:17:c7:33:d0:7b:db:f9:d3:09:bf:6c:a5:91:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f24cc2976a69ed1dd7d10f3d6d259c7c90244c56
        Validity
            Not Before: Sep 16 11:00:53 2024 GMT
            Not After : Sep 17 11:00:53 2024 GMT
        Subject: CN=a75d0799d72e60faff5804a4a141d5a334e85f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:46:08:c2:2b:bb:cb:b1:d0:f1:68:63:53:31:
                    1f:41:8f:a8:38:a2:8c:c5:5b:b4:0e:66:32:2c:d3:
                    27:7d:e9:b6:2f:3f:f9:a1:30:53:a1:8f:2e:cf:9c:
                    ab:16:13:54:d2:24:f9:b7:74:6e:47:96:cd:d0:8b:
                    97:ca:54:0f:f6:f8:4e:20:ab:ff:b8:f6:8e:72:eb:
                    25:9b:c6:69:f9:17:fe:e1:23:84:83:fb:32:26:bf:
                    31:b0:96:c1:0e:5b:84:23:bd:96:18:c0:44:53:7a:
                    bf:9e:b3:2f:84:14:f1:2c:3c:bf:0f:70:89:e7:2f:
                    19:5a:13:a6:a6:c9:b1:52:c1:e2:9d:a2:c7:dd:93:
                    34:4b:90:64:25:b1:55:4d:51:20:60:95:96:ba:ab:
                    29:73:fd:f8:68:f8:ef:a4:ea:2c:10:24:36:6e:6f:
                    5a:38:23:ea:9c:8d:64:a2:4b:cf:a9:35:4c:e4:fc:
                    2d:54:3c:05:71:47:db:6c:66:22:37:df:88:9d:e5:
                    28:b3:8e:96:65:9c:ac:b9:5e:4f:49:76:ce:c9:3a:
                    cb:2a:dc:d9:77:e8:6a:fc:a6:39:c0:13:88:8b:7c:
                    1c:82:5a:e7:ae:ff:0a:99:3e:57:1c:94:3f:7d:aa:
                    6f:6a:93:de:3c:f8:8d:48:46:a2:af:c1:3a:98:05:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5D:07:99:D7:2E:60:FA:FF:58:04:A4:A1:41:D5:A3:34:E8:5F:42
            X509v3 Authority Key Identifier:
                keyid:F2:4C:C2:97:6A:69:ED:1D:D7:D1:0F:3D:6D:25:9C:7C:90:24:4C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kzCl2pp7R3X0Q89bSWcfJAkTFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c1f0a2-bea0-4d79-b614-373ff1f59eb2/1/8kzCl2pp7R3X0Q89bSWcfJAkTFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c1f0a2-bea0-4d79-b614-373ff1f59eb2/1/8kzCl2pp7R3X0Q89bSWcfJAkTFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c9:64:78:7e:12:98:d9:4a:11:5c:63:0a:7c:50:f3:81:a4:
         2c:54:b9:39:ab:7e:76:b1:6e:3b:4b:f1:5c:48:c8:e2:5e:c9:
         27:82:24:b8:c1:25:5c:40:b8:c9:78:a6:69:16:dd:2e:a0:93:
         84:01:3d:2a:3f:68:82:05:2f:bd:3c:6b:53:d6:94:d7:a4:5e:
         ad:b9:7a:28:dd:93:6b:47:a4:f1:65:6e:13:eb:65:51:a3:6d:
         50:6d:95:47:8e:0f:f4:ba:7e:37:3e:ce:d6:d3:47:b5:cb:50:
         57:be:58:08:ba:c8:e3:11:e7:94:1c:d5:4d:02:65:b6:72:d7:
         f0:12:08:49:ab:50:e7:12:80:2c:4b:09:df:37:07:d4:7c:7f:
         46:f6:c3:4c:b7:32:f0:44:4a:66:84:ec:6c:ec:76:44:79:c1:
         88:31:83:cc:8d:80:b9:75:b3:80:d5:d1:52:4f:24:77:9e:51:
         e9:08:78:3f:ad:30:57:af:02:b8:52:aa:c4:7b:de:b8:67:e8:
         32:60:aa:73:87:63:0e:b7:12:2d:b6:d7:10:9d:51:43:84:33:
         09:8a:0d:0a:4c:16:5a:e7:f6:12:78:cd:28:4e:10:e7:c2:d0:
         2d:50:6d:01:98:3c:a4:9a:c5:04:87:ec:e4:42:46:07:37:2a:
         72:4e:7a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----