Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
File:                     NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft (raw, json)
Hash identifier:          5/TSJvqukE+pcGdzHsU1AG6psE/PKoU+f9XChsDPqHc=
Subject key identifier:   D4:9D:50:8F:23:34:8A:71:10:6C:2C:28:27:3D:C5:79:96:88:CD:9C
Authority key identifier: 37:25:8E:BE:E6:74:5F:06:D7:33:E4:B6:DD:0D:27:A7:3B:FD:FB:65
Certificate issuer:       /CN=37258ebee6745f06d733e4b6dd0d27a73bfdfb65
Certificate serial:       019369D9FA43112FAD206105CD900B3C204C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
Manifest number:          109B
Signing time:             Tue 26 Nov 2024 19:01:53 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:53 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:53 +0000
Files and hashes:         1: NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl (hash: gr205WwExBfucGYL5zGt/Qrp8OPfcTAIMXNMco8Ehb4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:fa:43:11:2f:ad:20:61:05:cd:90:0b:3c:20:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37258ebee6745f06d733e4b6dd0d27a73bfdfb65
        Validity
            Not Before: Nov 26 19:01:53 2024 GMT
            Not After : Nov 27 19:01:53 2024 GMT
        Subject: CN=d49d508f23348a71106c2c28273dc5799688cd9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:52:33:e1:0a:3f:d5:f7:cb:1d:51:57:06:
                    ad:44:3a:22:02:66:3d:33:55:36:3d:06:b5:11:e1:
                    c0:a4:b8:d6:83:b8:01:69:1b:45:56:8b:5f:a3:81:
                    7c:a1:1c:7c:bd:32:17:85:71:9b:09:92:1f:30:72:
                    d2:d6:b9:01:62:fe:44:10:a9:6c:b1:4c:5a:75:38:
                    1a:25:99:71:bd:11:05:42:4c:87:70:c1:a0:10:1a:
                    81:b1:13:5a:eb:fe:7a:86:7a:b3:b0:9e:b2:94:4a:
                    17:53:d0:ea:76:14:d3:85:16:26:93:63:a6:8e:1b:
                    f4:75:d8:5c:30:67:09:3e:cb:3f:f9:b7:49:2a:1c:
                    d0:9f:ab:ae:1b:9d:3e:c9:f8:bf:39:a6:e6:06:12:
                    18:6e:76:f8:0c:5d:6d:d7:c1:7e:58:5b:09:ed:ec:
                    18:9c:a2:02:ff:af:4b:da:35:8d:c5:da:49:dc:5d:
                    8a:aa:50:74:1f:f8:dd:d3:f0:ff:6d:18:10:ea:0a:
                    91:a4:90:9a:7c:50:63:43:29:1a:79:45:f7:f7:e7:
                    eb:27:e2:d7:4d:bc:18:a6:e6:6f:32:3b:4e:ee:25:
                    9b:ac:d8:78:1a:a0:40:0e:a8:b6:24:5f:f5:1e:6f:
                    24:2a:de:be:4b:bc:21:1d:18:18:5c:c4:8a:34:a2:
                    df:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9D:50:8F:23:34:8A:71:10:6C:2C:28:27:3D:C5:79:96:88:CD:9C
            X509v3 Authority Key Identifier:
                keyid:37:25:8E:BE:E6:74:5F:06:D7:33:E4:B6:DD:0D:27:A7:3B:FD:FB:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:18:f0:19:14:1b:d7:fa:f3:cc:09:74:fb:b3:9a:dc:51:25:
         39:05:fd:a2:1f:ec:db:1d:e0:28:e0:3c:97:10:dc:ce:3f:3a:
         d0:6f:c1:8d:6a:87:f6:03:88:a7:00:62:15:89:e2:38:1a:4d:
         af:c5:b1:d2:d0:54:59:80:e3:f8:01:1c:11:ee:71:dc:ef:8f:
         f6:54:a4:3c:92:71:91:fc:2c:28:11:5f:19:8f:ce:e4:39:63:
         3c:9b:da:c9:e8:6c:4d:08:f6:6b:3e:a4:ae:5d:ae:1e:07:04:
         bd:30:5f:26:75:e1:49:f7:48:98:86:18:3b:9d:b8:9c:7d:1d:
         d7:e9:ea:18:81:28:fe:91:0f:72:e1:fa:a7:9a:2d:7c:55:ca:
         30:b0:70:37:2e:97:ef:88:93:64:da:dc:ef:b9:9e:29:cf:11:
         28:bf:2c:6b:8b:73:00:67:70:f1:b2:c2:81:7c:6a:e8:dc:e0:
         b8:ec:91:99:09:6d:e8:ae:21:3d:f5:43:03:c4:4d:01:00:53:
         dd:b6:3b:88:5e:ec:f1:34:ac:98:ee:4b:4a:9a:fe:ec:49:58:
         a0:e0:bd:4d:f6:8c:a6:a3:ea:d2:87:08:fc:2b:80:ba:71:41:
         23:8e:e9:5c:6d:d4:a3:fc:4b:cf:20:60:a5:87:d4:bb:fa:36:
         90:62:5d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----