Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
File:                     1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft (raw, json)
Hash identifier:          JV2DcrEzUsrz+Qqnq0vRZ8GEKn8Ntkvj32Lw3r3tHHM=
Subject key identifier:   4A:A9:A6:B4:FF:26:A0:64:B9:A0:3C:BF:88:30:30:A4:F4:80:F1:09
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Certificate issuer:       /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial:       019369D97DF5B09886C49FC51FFA9E90029F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
Manifest number:          03D3
Signing time:             Tue 26 Nov 2024 19:01:21 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:21 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:21 +0000
Files and hashes:         1: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl (hash: W5JDz6edw+2xosBcrl6oiEWwciVfmC52iVpZj47P06I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:7d:f5:b0:98:86:c4:9f:c5:1f:fa:9e:90:02:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
        Validity
            Not Before: Nov 26 19:01:21 2024 GMT
            Not After : Nov 27 19:01:21 2024 GMT
        Subject: CN=4aa9a6b4ff26a064b9a03cbf883030a4f480f109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:22:cd:99:25:c7:9c:bd:e4:2b:7d:a9:c5:
                    fd:0c:0e:ff:60:25:e9:b6:c2:2e:86:71:0a:ad:05:
                    eb:20:5c:76:72:0d:dd:3a:8d:9f:7d:64:b4:6d:9c:
                    40:8c:e1:49:87:ad:45:89:b6:ab:91:8c:53:51:64:
                    70:b8:62:70:27:e7:18:e8:43:c7:7f:63:74:88:b2:
                    e7:a0:0e:5c:62:cc:fe:e8:df:90:9a:10:fe:3b:af:
                    86:ef:4f:4d:c7:dd:f0:a6:9a:09:dc:c2:01:5a:77:
                    05:2b:02:7b:5c:67:91:d6:ca:fb:e9:70:32:35:71:
                    cd:30:d8:eb:38:50:2f:29:3a:25:2d:81:8f:d0:54:
                    7c:9f:31:27:4d:e5:8f:04:70:9a:d3:3f:23:0b:b5:
                    ff:5c:82:3a:0b:6e:a7:03:c8:04:aa:89:6d:ee:1d:
                    63:d4:d0:4e:73:75:53:56:0d:8a:58:66:cf:dc:f5:
                    ce:e7:3a:01:a0:22:e6:de:9f:8e:ba:c3:b2:1f:29:
                    22:c7:ea:fd:e5:d3:af:24:4e:b5:b6:aa:db:12:1c:
                    a3:8c:dc:ff:9d:f1:43:84:52:42:f0:cd:64:69:b1:
                    0e:c5:e3:7d:0d:05:e6:92:d6:0b:2f:9f:28:50:6b:
                    ff:51:49:94:9f:49:c2:b5:1d:c3:08:4d:6b:1e:2c:
                    29:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A9:A6:B4:FF:26:A0:64:B9:A0:3C:BF:88:30:30:A4:F4:80:F1:09
            X509v3 Authority Key Identifier:
                keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8b:9c:92:6f:e1:a3:38:e2:eb:1d:ca:0f:ed:f7:60:ab:6f:
         04:b6:73:72:af:7a:11:69:72:ee:15:08:17:c5:3d:ab:63:f0:
         96:e4:72:db:5f:44:ea:22:e1:1f:81:26:10:8a:1a:5d:c1:31:
         57:ed:66:9f:a1:0e:59:f7:a1:2f:5c:88:ae:3b:14:80:7c:4b:
         c7:18:4e:85:13:67:d9:4e:0e:78:ed:dc:7b:88:11:51:a8:be:
         ed:e4:21:ac:7b:38:2a:90:7d:20:e4:4e:d1:50:38:c8:74:04:
         b8:6e:3d:92:5e:24:ce:67:ff:d6:71:5a:64:98:dd:ad:01:63:
         31:51:00:69:ad:b3:17:e3:5b:34:f3:c0:6c:76:08:38:e6:14:
         ad:18:d8:61:7f:5c:57:47:10:f8:47:9d:4e:70:65:a8:22:e7:
         d6:59:ac:1d:e1:55:38:3f:10:a7:48:cf:bb:8d:0d:5e:ba:3b:
         26:cd:bb:65:62:ee:19:23:6f:20:0b:e3:c8:80:61:01:d7:aa:
         04:3c:a8:9a:27:1b:8b:d6:22:09:96:e2:de:00:67:db:fd:0b:
         67:24:4f:69:57:3e:63:83:b6:1e:86:2e:14:27:fc:85:38:a1:
         d6:63:b4:2e:86:5f:ad:8e:26:df:17:07:5c:24:3a:70:6c:2a:
         9f:7f:b3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----