Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
File:                     KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft (raw, json)
Hash identifier:          KsuIRGq+3mN69VIBNL7I40D8eMayqk2a/ri0QVHjEHw=
Subject key identifier:   A2:4C:8F:6C:6D:23:4A:7A:4A:FE:0C:8D:93:90:15:4B:96:4F:E9:2E
Authority key identifier: 2A:14:91:5E:27:F8:BF:40:5C:CF:CA:94:B6:C5:30:BD:4D:3E:54:C0
Certificate issuer:       /CN=2a14915e27f8bf405ccfca94b6c530bd4d3e54c0
Certificate serial:       01935877A19A12D9EAEDFF3E66967A7902AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
Manifest number:          05A7
Signing time:             Sat 23 Nov 2024 10:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:55 +0000
Files and hashes:         1: KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl (hash: 5g0e7jJdHZd2N+PO5rJdc+Wazjs4g3WeKkDewxuRYuE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:a1:9a:12:d9:ea:ed:ff:3e:66:96:7a:79:02:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a14915e27f8bf405ccfca94b6c530bd4d3e54c0
        Validity
            Not Before: Nov 23 10:00:55 2024 GMT
            Not After : Nov 24 10:00:55 2024 GMT
        Subject: CN=a24c8f6c6d234a7a4afe0c8d9390154b964fe92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e2:01:51:67:04:4a:c0:19:c8:0e:a6:77:2d:
                    1f:87:68:ed:ff:21:ac:e6:a4:16:03:8d:07:62:89:
                    86:57:c5:78:b3:40:3d:6f:c0:a6:c9:29:df:7a:f9:
                    42:59:21:a1:2f:71:0e:c3:2a:8d:2a:84:d5:32:c8:
                    0a:99:7c:82:9f:6f:c3:07:78:4f:c6:f9:4c:13:87:
                    d8:66:f6:18:99:38:71:2f:4b:1c:49:00:e1:fb:ae:
                    5e:29:c4:88:13:3d:43:b2:fe:75:72:81:02:c2:9b:
                    df:4c:ca:91:bf:a3:42:fd:10:be:51:72:ae:30:b2:
                    45:63:81:1d:6b:7d:bf:14:d9:12:a3:01:aa:a4:77:
                    a5:69:6a:55:90:ef:c3:d3:85:49:6b:42:42:4a:4a:
                    6b:78:7b:af:85:de:04:bf:69:70:3a:24:13:58:5a:
                    ab:4b:91:21:42:d8:55:c6:f3:28:b7:d7:33:b3:09:
                    73:92:a1:e6:7d:94:18:ad:9b:8e:c6:14:dd:c4:39:
                    43:b0:11:7b:0b:84:df:b0:28:29:ff:2d:8e:d8:2f:
                    6b:67:f5:08:10:c9:3d:69:f0:9b:9b:c3:05:3c:89:
                    93:65:01:26:27:ce:1f:0e:12:a8:9f:54:6d:ed:6f:
                    24:6b:21:23:cd:c9:77:90:08:0b:a9:9a:33:37:1f:
                    81:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4C:8F:6C:6D:23:4A:7A:4A:FE:0C:8D:93:90:15:4B:96:4F:E9:2E
            X509v3 Authority Key Identifier:
                keyid:2A:14:91:5E:27:F8:BF:40:5C:CF:CA:94:B6:C5:30:BD:4D:3E:54:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:4c:28:17:b0:06:68:d7:25:79:eb:1f:27:03:36:76:07:eb:
         c2:ad:ad:4a:a8:cc:15:30:9d:bb:82:83:35:36:68:49:8e:66:
         70:4c:03:a1:6c:f9:9b:ca:5b:f1:ec:dd:eb:0b:f4:40:a8:69:
         0b:9b:11:e9:bd:59:37:13:4d:a4:96:52:42:7b:23:98:df:80:
         93:ec:17:4e:b2:74:6d:7a:03:b2:ae:74:95:2f:82:27:cf:e3:
         89:96:cd:23:b2:af:cf:3c:e3:49:dd:9c:24:9f:4f:19:f4:94:
         80:47:ce:9f:15:7a:cd:f6:fd:97:25:eb:47:f3:6b:f9:82:ec:
         ef:39:48:a9:43:67:27:02:28:99:dd:6b:fe:db:2f:11:f7:70:
         9d:ee:b9:09:c6:2f:ad:fc:4f:40:b7:fa:c5:c8:e6:03:6c:e0:
         91:3b:e6:56:c0:38:1f:62:77:80:4e:d6:ee:7c:c6:a1:fe:8f:
         ad:ec:6c:fa:43:b0:dc:3d:78:d3:61:a5:10:1f:a3:00:18:bc:
         b6:73:b1:be:0a:a6:d5:59:3e:7f:36:fc:56:6c:0b:72:01:42:
         e7:3c:a4:69:c4:ea:54:69:50:d1:e0:04:67:b5:a4:d0:6d:c7:
         2d:aa:5d:c8:24:24:d4:a7:ca:83:88:fa:9b:0b:83:5b:f1:2b:
         07:f5:fe:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----