Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File:                     cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier:          p+23p8c9sYcoooKBh3mvrU3TKMwr8evN90VCTndiaDg=
Subject key identifier:   D2:A1:BF:FF:A5:70:53:CD:F5:F3:DF:38:E0:00:CD:13:45:51:31:CB
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer:       /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial:       0191FAB5207A6B1034DF3152482D59503E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number:          0119
Signing time:             Mon 16 Sep 2024 12:00:59 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:59 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:59 +0000
Files and hashes:         1: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: 5N8rLBoFvKUuuAWggxGtSTlgjtT3OWmjmB7ogDPWyYI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b5:20:7a:6b:10:34:df:31:52:48:2d:59:50:3e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
        Validity
            Not Before: Sep 16 12:00:59 2024 GMT
            Not After : Sep 17 12:00:59 2024 GMT
        Subject: CN=d2a1bfffa57053cdf5f3df38e000cd13455131cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:af:69:ee:54:92:b2:a0:7d:9b:f1:72:54:
                    fb:18:1d:ce:f1:21:ab:4b:21:4a:a4:00:8e:d6:a0:
                    b8:e3:6a:aa:16:b4:45:5a:15:bc:f6:6d:60:3d:eb:
                    49:a0:7c:8f:bd:cb:49:07:0e:ca:db:52:fe:05:33:
                    8f:b7:1f:26:8e:95:f6:dc:ce:a0:19:e0:a5:e6:1a:
                    dd:32:e3:06:1a:ea:c0:29:c4:0c:d5:62:a2:4b:18:
                    71:17:b1:32:ee:9c:ff:eb:04:e5:ec:83:78:75:f1:
                    3f:de:80:0a:d9:1f:a0:1d:97:de:1e:fe:b8:0f:9e:
                    be:2d:31:d1:07:c8:a6:84:3c:c7:ff:d5:44:9e:ad:
                    73:18:21:4c:1b:3a:1b:7f:95:cb:10:32:18:40:24:
                    78:e4:42:91:46:a2:97:19:64:7a:a8:5e:2c:82:44:
                    68:d8:e2:fb:32:a7:f6:cc:88:7b:0e:e7:f6:ac:63:
                    ca:1d:d6:0b:89:1e:5d:7a:bf:07:49:96:35:df:5f:
                    0e:2a:dd:a0:cd:02:6d:d7:3c:94:46:38:5c:5b:64:
                    d9:fd:57:39:49:4c:da:44:0a:0f:ca:d2:7c:38:44:
                    35:0c:fb:6e:54:b0:d8:6b:80:d8:bd:09:b6:6f:98:
                    59:6e:23:53:8a:13:cf:10:3b:f7:5a:9b:dc:02:93:
                    17:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A1:BF:FF:A5:70:53:CD:F5:F3:DF:38:E0:00:CD:13:45:51:31:CB
            X509v3 Authority Key Identifier:
                keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:59:6b:1b:af:79:17:77:c2:12:35:b8:0c:51:62:d2:21:97:
         4c:f7:e1:51:dc:b8:3a:ee:fa:3e:c8:32:e3:4a:67:29:30:f5:
         9b:80:c5:65:fc:6d:d2:cb:e5:2d:bf:08:a8:dc:cb:00:63:86:
         0f:67:87:07:2e:0d:e8:1c:f8:20:27:8c:ff:44:11:5c:d8:70:
         5e:04:a5:71:45:ae:ca:42:87:f8:05:86:09:4b:cb:1d:37:9b:
         3d:19:39:38:af:7c:f3:be:d0:70:b4:f7:e7:f4:3a:87:ff:6b:
         79:12:be:e5:c8:25:2d:46:b2:11:f4:52:cb:7c:29:d2:87:54:
         08:2a:3e:6f:59:dc:12:b6:cb:97:19:76:32:61:aa:e6:b3:11:
         c7:52:91:a7:9d:66:72:36:25:1f:8a:52:1e:ac:d7:8c:e6:2a:
         5f:89:85:96:d2:23:80:73:01:19:d0:76:b3:b7:dc:b5:dd:d5:
         f1:7d:c6:27:13:0d:f1:26:80:b9:1a:c7:61:70:36:9a:bd:cc:
         f6:c9:01:cd:92:57:b2:41:c8:c6:3b:8b:cc:47:15:67:7f:25:
         56:5d:61:7d:44:63:af:21:f2:00:bc:a9:b7:4a:d6:b5:37:67:
         82:0d:3f:d1:21:c8:2d:b0:c1:c2:63:60:8f:27:0d:44:49:b0:
         d3:a4:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----