Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft
File:                     Eo8JYL8vv3DExJrhAd_y7MOYde0.mft (raw, json)
Hash identifier:          eNpfNEo4k4WC3NNNHSyEdfowFh8wnu7l5127n1P/kwg=
Subject key identifier:   F6:C5:99:2B:C7:F9:0E:61:02:81:D0:D2:8C:23:E9:5A:06:9C:20:94
Authority key identifier: 12:8F:09:60:BF:2F:BF:70:C4:C4:9A:E1:01:DF:F2:EC:C3:98:75:ED
Certificate issuer:       /CN=128f0960bf2fbf70c4c49ae101dff2ecc39875ed
Certificate serial:       01940721DBED8BFB6F3C52B7E313D417B4A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo8JYL8vv3DExJrhAd_y7MOYde0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft
Manifest number:          13CC
Signing time:             Fri 27 Dec 2024 08:00:46 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:46 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:46 +0000
Files and hashes:         1: Eo8JYL8vv3DExJrhAd_y7MOYde0.crl (hash: 1hE9qvS+ZihSLohfZHiVQ0MAasM/lYShjbpuFcseNFM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo8JYL8vv3DExJrhAd_y7MOYde0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:db:ed:8b:fb:6f:3c:52:b7:e3:13:d4:17:b4:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128f0960bf2fbf70c4c49ae101dff2ecc39875ed
        Validity
            Not Before: Dec 27 08:00:46 2024 GMT
            Not After : Dec 28 08:00:46 2024 GMT
        Subject: CN=f6c5992bc7f90e610281d0d28c23e95a069c2094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c8:6b:dd:e5:9f:38:e0:4c:a2:a5:de:43:1b:
                    7b:de:73:d8:94:7b:7a:ef:f1:56:e4:b1:75:d6:e3:
                    cb:35:28:bb:f6:eb:e4:ad:60:be:cc:5d:fe:56:34:
                    93:17:3e:6f:d1:7b:37:eb:85:a2:8e:85:87:6e:95:
                    d0:b9:bc:58:70:02:19:05:fe:33:91:12:c9:77:f4:
                    d8:f7:e4:2d:58:09:a9:46:d2:d5:9e:58:2a:ba:e0:
                    85:0e:00:64:04:6e:b3:da:74:3d:a8:70:44:43:26:
                    10:cb:d9:3c:cf:77:3f:b9:32:7e:4b:a3:01:82:14:
                    9d:31:9d:4f:ca:6f:a6:b2:93:37:73:59:e0:8b:b1:
                    3b:fc:0b:38:32:31:40:b5:5f:5f:8d:17:5b:dd:73:
                    7b:16:8f:f2:09:26:b4:25:5d:03:9f:b2:22:ad:94:
                    25:23:0d:47:89:3e:5e:63:4b:d4:79:5a:ed:d8:fd:
                    9c:94:82:8f:d0:30:b9:fd:b4:f0:d2:11:5f:34:fa:
                    e1:11:0b:9f:16:a1:4d:fd:95:a0:2c:18:ed:ef:74:
                    aa:03:79:88:00:a0:92:93:30:fe:31:3a:e5:1c:5b:
                    64:4c:ab:50:05:88:bc:66:1b:50:27:b4:35:fb:a1:
                    8b:f2:ca:e9:eb:42:72:65:ef:7a:b9:e8:db:d7:b4:
                    5e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C5:99:2B:C7:F9:0E:61:02:81:D0:D2:8C:23:E9:5A:06:9C:20:94
            X509v3 Authority Key Identifier:
                keyid:12:8F:09:60:BF:2F:BF:70:C4:C4:9A:E1:01:DF:F2:EC:C3:98:75:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8JYL8vv3DExJrhAd_y7MOYde0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:50:d5:54:a9:d6:81:a0:f6:2a:6e:61:ef:e9:76:50:99:4b:
         b2:10:b7:5f:b1:b2:18:8c:61:ca:d5:a8:e8:cf:ef:2a:bd:84:
         da:89:4a:6a:42:6c:68:de:c9:4d:89:95:86:08:8f:d8:85:70:
         30:24:ac:53:6e:ea:45:f9:61:c0:e4:57:e0:fa:63:ae:a7:87:
         08:16:05:2c:c9:f7:02:56:4e:9b:1f:c8:a0:c8:74:fd:11:3e:
         c4:cb:27:9c:59:87:94:f8:de:30:dd:e4:77:8a:8e:48:97:64:
         3d:57:ce:f1:0e:37:ef:80:3c:28:a5:d0:61:0e:76:1b:97:43:
         a5:01:74:80:7a:99:2b:a7:c8:d3:76:fe:f3:ee:ac:5b:85:4a:
         07:dc:05:cc:ea:69:03:4f:73:28:9b:f4:a7:1c:13:e2:5d:c9:
         a6:c2:73:fa:4b:24:d1:1f:ec:c3:1a:85:bb:84:8b:de:34:28:
         0c:62:9d:76:2e:bf:6d:6c:b6:8a:3c:bc:04:5a:58:de:da:ba:
         4f:ca:b8:49:bf:fd:5e:66:b5:8b:49:3b:9d:cc:dc:6a:0f:b3:
         ec:c2:bf:de:5f:01:0b:1c:5a:55:38:c1:ed:60:22:7f:8c:54:
         83:4b:5f:6c:7b:3f:55:e2:5c:87:67:f6:75:42:b5:dc:9b:50:
         5e:8c:51:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----