Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File:                     AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier:          exMBeiwvKggrQ9P9qCxjjSG1WxiG1hiUaB5CBjdBNLM=
Subject key identifier:   3B:06:4F:B7:D8:C3:74:07:FD:2C:3E:B0:B0:42:55:07:56:DF:81:4B
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer:       /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial:       019406EAC36E824555D5DFB4F511BCC7AE6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number:          13C9
Signing time:             Fri 27 Dec 2024 07:00:36 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:36 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:36 +0000
Files and hashes:         1: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: drC9Zu7SipYXVy1ZoraWru6/5m8lQi3OFTlQIcVbXWA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:ea:c3:6e:82:45:55:d5:df:b4:f5:11:bc:c7:ae:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
        Validity
            Not Before: Dec 27 07:00:36 2024 GMT
            Not After : Dec 28 07:00:36 2024 GMT
        Subject: CN=3b064fb7d8c37407fd2c3eb0b042550756df814b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:cd:db:a7:41:cf:b2:3d:07:35:28:59:f7:
                    b0:c4:9f:85:af:59:ea:27:b9:bf:34:28:a5:ca:9b:
                    8f:e4:a3:ba:c2:b5:1b:eb:e3:c1:b7:10:a3:d4:ba:
                    e5:12:26:32:a7:ee:64:9e:d9:02:96:8c:74:b9:17:
                    c0:28:6b:b0:39:1c:a7:dd:d3:7a:7b:76:61:dd:62:
                    48:27:dd:89:ad:dc:98:80:bd:dd:e4:62:aa:5f:1f:
                    d7:da:f4:5f:83:82:d7:7d:51:44:6c:04:cc:54:4f:
                    39:20:1a:f5:e6:fc:83:1f:ec:11:12:39:c7:bb:15:
                    49:cf:ff:d3:07:ed:0f:7b:b2:0a:1a:f1:35:7e:bf:
                    39:d1:61:99:0a:8a:7c:e9:f0:00:34:77:0c:29:96:
                    50:aa:ee:1c:77:16:5d:46:10:0e:df:20:14:e4:23:
                    ed:42:41:f8:96:93:7a:64:0c:5f:b1:5d:45:0f:a1:
                    a5:1e:3d:6d:e3:be:51:2c:b2:6c:2a:30:75:dc:f7:
                    23:31:ed:83:49:bb:e4:f2:2b:6a:48:2d:cc:1e:2a:
                    12:43:73:27:a2:31:21:fe:d4:81:56:87:78:22:68:
                    f1:47:80:7c:18:4c:22:fc:71:fd:16:7f:e5:c3:1a:
                    e9:58:91:0c:96:1d:9f:7c:a3:79:9a:e8:30:05:e1:
                    18:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:06:4F:B7:D8:C3:74:07:FD:2C:3E:B0:B0:42:55:07:56:DF:81:4B
            X509v3 Authority Key Identifier:
                keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cf:c1:eb:fd:0a:04:3f:69:6a:0a:31:79:7a:89:66:90:ad:
         4a:75:3e:22:38:3f:80:8b:15:8a:c5:e4:66:5b:80:ed:33:ba:
         33:3f:bc:46:d8:6a:e2:89:9c:c6:1c:84:65:fe:bc:82:9c:f9:
         a1:16:ae:f2:ad:37:84:99:39:07:1b:4e:91:c0:85:64:31:51:
         0e:de:ff:af:0d:14:cc:05:19:6d:c9:94:6c:83:cf:a1:28:5c:
         99:3f:02:ea:28:88:cd:95:59:7b:98:2d:39:1b:d5:13:91:22:
         61:e9:4b:19:24:98:04:5d:98:ee:8e:17:c1:1f:8a:27:fe:23:
         ec:56:c1:5d:1f:bb:d8:fe:1e:e3:84:c1:90:b2:f7:f2:e5:55:
         eb:38:34:cd:d2:2e:e3:f8:e2:f2:ee:63:1f:ec:83:18:d3:b7:
         82:ba:91:5c:3e:33:b0:e5:83:94:cd:c8:5e:ed:6a:bc:81:78:
         29:48:50:f1:46:78:1f:0e:e0:7f:fa:12:9b:21:65:75:27:32:
         ff:89:1a:a4:3f:f0:7b:df:e0:fe:72:0c:fa:2a:a3:91:cb:51:
         02:76:a5:0d:13:6c:04:8f:af:2c:53:e4:84:7a:31:d3:23:a4:
         2d:72:8c:f4:b8:a6:96:a2:c3:39:9b:b8:52:3e:6c:01:b1:12:
         06:b7:3d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----