Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/8e9316-b5b9-4ecb-bca2-b0c228ec6aa7/1/waCjz_MuENnPIeiqvD5LSnG_HdE.mft
File:                     waCjz_MuENnPIeiqvD5LSnG_HdE.mft (raw, json)
Hash identifier:          DDrmDDNHYPGb/GHpXstPS8VivQBRjDLo7bSd/YmILlE=
Subject key identifier:   84:18:6E:19:E8:96:DF:19:3C:A0:6C:7C:0B:B4:A5:18:E6:A6:61:69
Authority key identifier: C1:A0:A3:CF:F3:2E:10:D9:CF:21:E8:AA:BC:3E:4B:4A:71:BF:1D:D1
Certificate issuer:       /CN=c1a0a3cff32e10d9cf21e8aabc3e4b4a71bf1dd1
Certificate serial:       0193568AF3D393F87B597059EC80C9F2FC89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/waCjz_MuENnPIeiqvD5LSnG_HdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/8e9316-b5b9-4ecb-bca2-b0c228ec6aa7/1/waCjz_MuENnPIeiqvD5LSnG_HdE.mft
Manifest number:          1300
Signing time:             Sat 23 Nov 2024 01:02:47 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:47 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:47 +0000
Files and hashes:         1: waCjz_MuENnPIeiqvD5LSnG_HdE.crl (hash: ahRZoxGawhznUzPu3Z0DWwiHb8D3lMLcf84X+4XOUy0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/8e9316-b5b9-4ecb-bca2-b0c228ec6aa7/1/waCjz_MuENnPIeiqvD5LSnG_HdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/8e9316-b5b9-4ecb-bca2-b0c228ec6aa7/1/waCjz_MuENnPIeiqvD5LSnG_HdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/waCjz_MuENnPIeiqvD5LSnG_HdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:f3:d3:93:f8:7b:59:70:59:ec:80:c9:f2:fc:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1a0a3cff32e10d9cf21e8aabc3e4b4a71bf1dd1
        Validity
            Not Before: Nov 23 01:02:47 2024 GMT
            Not After : Nov 24 01:02:47 2024 GMT
        Subject: CN=84186e19e896df193ca06c7c0bb4a518e6a66169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:f4:67:db:e6:3b:f0:b1:77:12:f1:65:9a:
                    c7:22:68:a7:ce:81:87:03:4e:bc:62:bc:d0:71:a7:
                    62:49:0b:65:88:0e:f6:53:d9:5a:d8:a2:f5:9c:73:
                    16:cd:ab:dc:81:1d:23:85:18:ee:2e:6e:d9:d3:7b:
                    9c:76:a7:92:4b:b9:eb:1d:57:7e:e8:4e:f5:11:6a:
                    30:05:ae:48:a3:8c:42:70:63:23:e6:72:bc:c0:cd:
                    48:14:0f:ba:37:b2:1f:19:7b:62:59:9e:36:c3:a6:
                    98:ae:00:f0:b9:7e:60:93:0d:76:c6:99:0c:29:d4:
                    b2:1d:94:6c:09:7e:ed:65:e3:e2:b2:4e:27:8b:d7:
                    96:62:6f:75:6d:38:17:d9:9b:0b:6a:40:70:d8:e0:
                    4f:da:7b:9a:8e:35:27:9b:05:85:87:fb:bc:3b:3f:
                    9d:dc:a3:f8:71:ea:bf:d4:1c:ac:9e:a9:79:c8:af:
                    e7:73:dd:7f:ac:ff:6a:d6:b0:43:2e:d0:dc:e3:88:
                    77:02:cd:80:40:5a:95:9f:8d:31:2d:cb:06:fb:91:
                    05:0b:13:f7:3f:e5:6b:79:f0:a9:bd:b8:51:36:21:
                    d1:d9:a5:0b:be:b7:94:af:24:bc:d5:be:b5:8d:2f:
                    42:5d:1f:89:b7:1c:91:e0:21:1e:6e:4e:9f:64:e4:
                    f9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:18:6E:19:E8:96:DF:19:3C:A0:6C:7C:0B:B4:A5:18:E6:A6:61:69
            X509v3 Authority Key Identifier:
                keyid:C1:A0:A3:CF:F3:2E:10:D9:CF:21:E8:AA:BC:3E:4B:4A:71:BF:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waCjz_MuENnPIeiqvD5LSnG_HdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8e9316-b5b9-4ecb-bca2-b0c228ec6aa7/1/waCjz_MuENnPIeiqvD5LSnG_HdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8e9316-b5b9-4ecb-bca2-b0c228ec6aa7/1/waCjz_MuENnPIeiqvD5LSnG_HdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:81:0a:c4:9e:71:56:4c:69:f7:96:f3:14:da:8a:99:8c:c7:
         4b:2f:77:80:ec:58:7a:e0:97:6d:4e:bd:87:b9:d6:4a:8d:98:
         e4:f3:df:39:d9:49:28:be:e7:1c:13:c6:b3:6d:ac:cb:0e:97:
         81:64:73:4f:2f:7e:c8:2d:44:cc:70:6f:8e:72:91:32:a5:ae:
         29:25:53:68:c0:ef:72:94:5f:5e:8e:fe:69:11:a0:9b:48:d8:
         e5:50:1a:96:53:e9:85:e8:83:ec:a2:b8:2b:d7:5f:16:1b:2d:
         dc:2a:f0:00:70:be:00:d9:5a:87:1d:22:8d:c5:ad:76:28:e0:
         fa:1e:6c:49:ee:03:39:e8:e9:95:fc:b6:f9:01:db:93:31:80:
         a2:e3:f9:04:98:03:bb:5a:2c:7c:49:c2:f4:e9:9a:83:f9:2b:
         ca:4e:bd:42:88:a1:66:ed:99:2b:b6:55:33:80:4e:e2:a1:7d:
         5a:fc:fc:89:04:fb:7c:3c:8c:a3:28:b0:e9:e8:74:57:a2:de:
         d9:a4:66:c0:5c:2f:88:bd:48:c0:b4:fa:85:6f:d8:3d:bc:4f:
         2f:47:08:a6:84:23:60:a4:1c:40:03:4c:e6:cc:da:59:e3:b2:
         13:fe:85:6c:da:8e:7e:3a:85:c3:fa:57:34:23:9d:6c:1c:00:
         a2:44:bc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----