Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft
File:                     HAaGYxPWaK_oeYb65f95QfkoBps.mft (raw, json)
Hash identifier:          qyQ5pKXyn9VcdcmvdFvT+okZrOzWoR6FQ4ebYKS+Oc8=
Subject key identifier:   C3:7C:95:25:DC:ED:C1:7C:22:5E:0B:4D:64:E3:D2:BE:A0:90:64:9F
Authority key identifier: 1C:06:86:63:13:D6:68:AF:E8:79:86:FA:E5:FF:79:41:F9:28:06:9B
Certificate issuer:       /CN=1c06866313d668afe87986fae5ff7941f928069b
Certificate serial:       019406B3AFE11E42E8B86A3399A84BFB8478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAaGYxPWaK_oeYb65f95QfkoBps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft
Manifest number:          0DC4
Signing time:             Fri 27 Dec 2024 06:00:26 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:26 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:26 +0000
Files and hashes:         1: HAaGYxPWaK_oeYb65f95QfkoBps.crl (hash: 12y/ZY8oKdOAJ+nKY2fnNBTvNzMj6Uo5jjLY1hx7JDk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAaGYxPWaK_oeYb65f95QfkoBps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b3:af:e1:1e:42:e8:b8:6a:33:99:a8:4b:fb:84:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c06866313d668afe87986fae5ff7941f928069b
        Validity
            Not Before: Dec 27 06:00:26 2024 GMT
            Not After : Dec 28 06:00:26 2024 GMT
        Subject: CN=c37c9525dcedc17c225e0b4d64e3d2bea090649f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:28:c0:fe:97:17:bc:8d:47:08:6b:24:ed:
                    19:23:ca:aa:4a:cd:7f:0f:40:ef:bd:66:55:a9:fd:
                    d3:60:16:83:b7:e9:9d:72:38:26:50:b8:33:5e:af:
                    58:7d:50:60:15:72:20:7d:59:0a:8f:51:77:63:de:
                    bb:04:a7:ea:8c:da:da:20:3c:c8:71:dd:bc:c3:d8:
                    3f:72:a1:14:98:19:5e:9f:d9:76:da:dc:96:16:3c:
                    19:cf:51:04:93:bf:01:13:48:80:ad:75:06:50:28:
                    5b:7c:7c:94:07:e8:1b:c4:b2:a4:41:bc:a7:cb:a6:
                    3f:c5:7c:a3:c9:1e:7b:e3:65:86:4b:ac:1e:35:b3:
                    6b:6c:d4:fe:1c:65:11:fd:d9:31:8e:6e:3e:70:a6:
                    7c:a0:fe:02:93:b4:48:48:6c:3a:e4:b0:99:ae:ef:
                    3a:62:df:c7:ea:40:21:0c:a3:a2:2e:c2:80:27:2d:
                    ac:0d:b8:0f:fc:cc:0c:a5:48:cf:f2:64:bf:d3:de:
                    08:a4:32:6d:e8:e8:a8:f8:47:23:64:15:e2:90:52:
                    44:8b:9e:0a:72:cc:e5:13:12:8c:23:58:79:9e:88:
                    73:42:ba:04:18:3e:37:42:8f:25:c6:fb:07:aa:12:
                    7c:f3:6a:72:82:8b:86:40:5c:a0:37:27:0c:ab:2f:
                    9f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7C:95:25:DC:ED:C1:7C:22:5E:0B:4D:64:E3:D2:BE:A0:90:64:9F
            X509v3 Authority Key Identifier:
                keyid:1C:06:86:63:13:D6:68:AF:E8:79:86:FA:E5:FF:79:41:F9:28:06:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaGYxPWaK_oeYb65f95QfkoBps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:b3:89:bb:73:c7:4c:3c:65:ca:47:84:82:08:bf:34:2b:5a:
         a7:52:4d:1b:19:70:53:9c:80:3c:3a:88:ec:80:1e:16:f8:c7:
         63:43:d9:dd:fb:9c:7e:d2:4d:a3:e3:90:00:ec:2e:94:90:11:
         c0:3e:50:78:17:77:02:7e:70:bb:60:54:24:77:0b:ce:37:fe:
         f7:5a:28:23:87:54:30:52:97:2a:5d:7a:98:6e:e5:2c:d9:31:
         84:a3:e9:b9:00:da:a7:77:6e:8b:43:62:81:1a:e8:33:42:de:
         33:4b:b0:11:d9:89:35:8f:1d:71:0e:51:60:8b:cf:49:6a:a1:
         0d:f0:3c:16:03:0f:60:67:a0:56:60:0e:63:2d:30:ee:66:68:
         15:b7:a5:44:0a:05:cd:81:37:ea:71:81:2a:ad:20:69:f5:a4:
         13:77:2f:82:23:bb:d4:84:66:24:cd:46:b3:8e:c9:a2:c3:ff:
         ca:3b:5d:5f:5e:ac:a1:14:4d:b1:25:4e:68:e1:29:04:87:08:
         44:ef:de:c3:7a:d1:7a:0e:ca:30:fb:77:ed:f3:0c:0a:06:7e:
         02:9a:fe:19:72:69:9a:e5:e4:fd:55:f5:3e:87:6a:69:e7:a0:
         d2:06:20:a0:25:6f:2f:0d:9b:9a:9b:95:8d:bf:82:d0:e0:66:
         1e:fe:1b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----