Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
File:                     cD94XhQ0CsaoQEhj1796-U5aubU.mft (raw, json)
Hash identifier:          d89hMFzR0Y5XLloQMfnssS+d9VbRFYz/S++BwXcKUps=
Subject key identifier:   35:53:08:23:E0:31:EB:D2:CA:A2:17:70:6A:70:57:8E:5F:3D:82:91
Authority key identifier: 70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
Certificate issuer:       /CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Certificate serial:       01935688DF889499ED85F29DF76CE6301353
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
Manifest number:          0CEC
Signing time:             Sat 23 Nov 2024 01:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:30 +0000
Files and hashes:         1: cD94XhQ0CsaoQEhj1796-U5aubU.crl (hash: rVj7UVwjXorHML+7hF8bsJZ5D5vei66k2dpr4PUEQ/0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:df:88:94:99:ed:85:f2:9d:f7:6c:e6:30:13:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
        Validity
            Not Before: Nov 23 01:00:30 2024 GMT
            Not After : Nov 24 01:00:30 2024 GMT
        Subject: CN=35530823e031ebd2caa217706a70578e5f3d8291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7a:a7:6a:27:18:d2:9c:27:be:87:52:13:2c:
                    f3:3e:a2:00:b5:84:b0:18:42:08:0d:93:e2:db:be:
                    4a:5e:3f:06:e5:f5:a0:fd:b6:91:1d:63:69:a2:b1:
                    97:90:1b:08:3c:9d:57:4a:1c:2e:81:0f:e0:0b:12:
                    02:8d:4a:ee:04:8c:7f:63:e8:73:83:81:80:9f:e0:
                    65:ba:cf:ea:ad:fb:9b:4b:97:6e:20:18:7c:fd:09:
                    3a:ba:a4:63:63:74:a2:d2:fd:4f:b5:11:72:56:0d:
                    ab:cd:92:8d:e3:9b:0f:7e:f4:ea:32:49:7c:2e:72:
                    b7:0e:92:7b:c2:b9:8d:21:f5:69:7f:87:0d:7e:48:
                    7d:26:5a:d1:ca:8c:a9:cf:2c:3d:80:d9:3b:fb:23:
                    bf:4b:42:c8:d1:02:9a:fe:41:ca:be:78:06:8d:99:
                    80:29:fc:fb:6b:fd:4e:0b:bb:17:f2:4f:16:6d:82:
                    f3:7a:75:7c:ba:b8:e6:5c:34:2d:54:32:f8:53:20:
                    13:f5:ce:d1:14:5e:de:5a:7c:b3:89:62:e6:6a:6c:
                    e3:b9:1f:64:ce:4f:b2:1d:c9:af:de:8c:39:ba:32:
                    f8:78:91:92:33:43:33:9f:f0:60:f5:2d:29:a8:7e:
                    03:bb:69:90:b0:1e:b5:27:d2:04:4e:77:d8:43:db:
                    fc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:53:08:23:E0:31:EB:D2:CA:A2:17:70:6A:70:57:8E:5F:3D:82:91
            X509v3 Authority Key Identifier:
                keyid:70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:7a:09:0c:35:20:1a:fe:1c:3e:b5:74:d1:22:86:41:b4:b2:
         56:40:36:e9:38:81:cb:1b:52:54:0e:1a:77:2a:36:d6:b9:36:
         dd:07:6e:12:ff:b9:6b:73:c2:4a:d2:43:a3:89:4a:7d:1c:16:
         26:3b:a8:00:cc:9a:cb:b2:eb:c3:33:65:d6:93:8e:d1:1e:22:
         0f:75:93:53:47:41:b3:3b:d2:3b:30:94:d8:c4:9c:68:b8:39:
         8a:fa:cb:c0:d2:8d:d2:5a:cd:9f:bb:3f:9d:10:14:2a:4f:2c:
         b7:5f:35:b0:dc:77:0c:3e:5d:ab:fb:64:3e:a2:d5:9a:13:b2:
         f2:04:3e:11:dd:0c:ea:18:f4:24:e5:56:06:7c:af:74:35:e7:
         a2:8b:22:27:f4:cf:90:c7:1d:49:4c:ec:0f:cc:7e:68:84:df:
         eb:0e:3e:3f:98:dc:45:f3:1d:8e:40:ff:0f:63:ba:10:96:73:
         31:32:1a:c7:93:4f:37:c2:79:49:72:32:e0:7c:44:61:02:d9:
         80:eb:97:ff:a3:42:98:a7:98:6d:dc:95:c9:99:76:17:19:05:
         74:d5:b2:e6:8e:f2:03:db:cd:5e:1a:ff:1d:63:23:ea:2e:02:
         88:f6:38:d0:4c:05:ac:b2:fa:a8:d3:2e:06:30:1d:e9:ae:dc:
         27:81:ba:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----