Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
File:                     lGEMh1DDN98EecWg61t4tJoX_z4.mft (raw, json)
Hash identifier:          ePommVnLg2UXeYJcvODH9p1cNrrSI8QBEisiKe4t/L8=
Subject key identifier:   95:C6:0D:E6:2B:29:C7:05:75:39:14:83:85:CB:52:74:D0:9A:29:56
Authority key identifier: 94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
Certificate issuer:       /CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Certificate serial:       0191F9D9760A3256C5DC579056B2C63F72D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
Manifest number:          013E
Signing time:             Mon 16 Sep 2024 08:01:03 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:03 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:03 +0000
Files and hashes:         1: lGEMh1DDN98EecWg61t4tJoX_z4.crl (hash: OBzzXOheGyGJ+Yd+tnmIIZUleB7LIe2p6A/cVjBnkUE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:76:0a:32:56:c5:dc:57:90:56:b2:c6:3f:72:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
        Validity
            Not Before: Sep 16 08:01:03 2024 GMT
            Not After : Sep 17 08:01:03 2024 GMT
        Subject: CN=95c60de62b29c7057539148385cb5274d09a2956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5f:d0:e6:a5:07:be:dd:a3:ea:93:2a:23:4a:
                    e2:ba:47:dd:2e:8a:49:51:09:b6:1f:bd:a2:b9:66:
                    df:b1:89:55:7c:f6:f1:1b:6d:66:be:e3:5b:f8:36:
                    e1:29:e5:95:70:a6:01:2d:17:f0:a0:5a:08:6d:97:
                    4b:bd:da:6e:fb:1a:6a:b2:ac:8f:c1:34:0a:d9:d3:
                    2a:a0:88:b9:e3:c6:4f:bf:74:24:e2:be:e6:1a:15:
                    5b:8f:e6:a3:99:0b:4c:06:9c:23:df:dd:83:54:ad:
                    70:d7:94:9c:47:5a:5a:47:4b:15:e5:a7:80:cd:04:
                    18:ef:8f:1a:b0:17:ce:a3:5b:0e:59:7f:ac:86:23:
                    c8:61:12:db:7f:26:14:30:67:29:f3:9f:94:cc:10:
                    e3:c6:4a:ff:43:7e:18:98:b9:59:37:77:c3:86:cf:
                    36:8e:dd:38:cb:38:e6:fd:94:18:8b:fc:df:ff:53:
                    3a:8b:f9:9e:46:83:25:d2:c8:46:25:29:a4:b0:2c:
                    aa:02:c3:ea:8b:e5:31:82:b5:ef:ca:f8:da:3e:83:
                    aa:03:a4:13:cb:24:c8:2e:71:13:c1:68:37:9e:97:
                    32:b5:98:96:6f:64:2d:3d:b3:30:ca:56:db:3e:16:
                    e1:c3:77:8b:65:21:a6:63:2b:d3:91:d4:f6:88:af:
                    c9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C6:0D:E6:2B:29:C7:05:75:39:14:83:85:CB:52:74:D0:9A:29:56
            X509v3 Authority Key Identifier:
                keyid:94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:6b:b8:cb:ec:e5:4e:b0:ce:c5:5f:e2:0b:6b:96:99:28:6f:
         f6:9a:27:8c:98:58:0b:15:89:92:b3:13:ac:a9:1f:fc:dc:c9:
         4d:eb:a3:f1:21:58:79:b5:54:4e:c9:b6:80:33:b8:ef:b0:14:
         6b:d5:07:b9:a4:ae:15:6b:92:a7:af:06:b7:df:4d:95:c2:75:
         f0:c9:8c:d6:d6:92:ff:7e:ba:9d:78:b9:00:6b:f6:39:5d:8c:
         fa:fd:c6:78:51:07:2a:08:bd:5b:f2:f5:d9:6c:81:f4:ff:3c:
         be:6c:59:08:e1:3a:88:d1:6f:ba:98:b8:38:eb:e9:f7:4a:8e:
         0c:ca:5e:1a:cc:9f:9e:ee:0e:1c:fd:9e:50:db:52:f0:8b:7d:
         e5:3e:55:22:10:28:31:34:6b:9b:0d:52:44:f7:bb:69:99:6c:
         81:05:d5:1a:ec:aa:04:06:b9:34:66:60:6a:40:31:c7:da:6c:
         4f:e9:0d:6b:24:db:d5:81:12:c0:c9:71:b9:b1:b8:0a:08:f1:
         a7:c5:b4:0f:7c:03:71:d1:ad:69:d8:11:bc:79:06:eb:59:04:
         97:63:d8:6c:73:fe:a5:63:78:30:fc:67:dd:fa:36:e8:e4:86:
         a6:ae:f0:d8:60:31:d6:46:04:50:39:5e:61:4f:86:fc:4e:9a:
         44:e9:54:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----