Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
File:                     8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft (raw, json)
Hash identifier:          UUvBtw1VqIWfPaHH8C3JjpYZVma9s8YYFxJWE7YBggU=
Subject key identifier:   1D:CE:69:FD:BC:55:93:8D:6B:D8:7F:EF:10:80:F8:86:9B:BA:22:58
Authority key identifier: F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
Certificate issuer:       /CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Certificate serial:       0193688F8FC7A5C56D4583F4FDAF4BCECC54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
Manifest number:          085A
Signing time:             Tue 26 Nov 2024 13:00:59 +0000
Manifest this update:     Tue 26 Nov 2024 13:00:59 +0000
Manifest next update:     Wed 27 Nov 2024 13:00:59 +0000
Files and hashes:         1: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl (hash: FOPPOeVbKsi+y/6aVWXqU4uBwPPMV835OyF3GUOAGTs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:8f:8f:c7:a5:c5:6d:45:83:f4:fd:af:4b:ce:cc:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
        Validity
            Not Before: Nov 26 13:00:59 2024 GMT
            Not After : Nov 27 13:00:59 2024 GMT
        Subject: CN=1dce69fdbc55938d6bd87fef1080f8869bba2258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:15:39:a1:92:20:c7:15:b2:6d:81:51:e6:90:
                    f1:79:72:97:ad:a0:cd:c4:27:f3:99:bd:0f:ce:ff:
                    d6:84:44:c0:8c:58:35:d2:65:60:05:6e:15:e4:8e:
                    20:5f:0f:7f:a9:76:84:0b:46:57:a6:4e:74:16:07:
                    1d:ab:e6:53:a4:43:d8:a3:b5:b8:06:fb:6e:79:5a:
                    c0:e2:9c:89:b3:f6:99:76:19:c9:af:ef:a2:fd:79:
                    a7:bc:11:f8:51:1d:6f:b6:42:39:ed:00:3a:05:2f:
                    2a:35:81:90:36:97:cc:85:26:b9:ee:b9:0e:c8:65:
                    c3:64:50:af:b2:ef:d5:91:81:df:e4:77:ed:d9:21:
                    62:2d:3f:b1:b8:0e:63:18:8b:e6:e4:a3:ea:d0:43:
                    d6:47:21:8b:c9:d6:16:3a:ce:0e:4f:28:ab:bc:1c:
                    4e:60:94:58:d9:f5:aa:92:a9:e4:86:a0:81:a6:e9:
                    9b:e9:d9:ec:52:2a:94:99:0f:4e:5e:5b:17:99:48:
                    ea:24:f9:31:3c:2a:77:c3:01:84:27:57:91:9d:c2:
                    f3:b2:b2:51:b1:b1:e8:57:23:41:f0:9c:31:23:d5:
                    44:cf:19:59:5f:0f:9e:b7:03:fe:87:9d:93:8c:ff:
                    81:41:4c:18:20:66:cc:c8:a5:8b:aa:8b:94:ff:de:
                    d5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CE:69:FD:BC:55:93:8D:6B:D8:7F:EF:10:80:F8:86:9B:BA:22:58
            X509v3 Authority Key Identifier:
                keyid:F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:65:41:e5:b3:b1:60:97:a6:58:05:16:7c:2c:61:05:86:fb:
         e5:1f:b6:f5:07:e0:b8:b1:52:cc:a7:63:32:f1:0a:73:43:6c:
         92:8f:d1:9d:e8:80:78:56:0d:3f:44:bf:cc:86:8b:47:c9:7a:
         f6:51:46:bb:f2:04:c6:0b:09:46:e2:01:f7:5f:db:bc:d3:f4:
         44:90:33:89:80:dc:29:fe:1f:ee:cd:f2:40:99:90:6e:2a:a6:
         64:7b:d8:6e:13:81:32:87:56:e3:e5:0d:a7:94:da:59:51:09:
         a2:72:29:56:13:87:32:32:d0:a4:d3:aa:48:6f:e9:c8:bc:ba:
         10:17:39:01:93:91:e0:11:2e:49:e0:ad:c9:73:82:a9:05:f4:
         9d:07:4a:e6:27:35:88:60:80:ff:55:40:ac:0f:7a:28:de:a6:
         74:ca:f8:cd:9e:31:30:ee:6b:a1:26:90:12:6d:fe:0b:19:13:
         2d:bd:27:23:ca:58:a0:7b:96:6c:b9:0e:f5:21:82:b0:af:f4:
         ec:2e:d2:4a:19:01:80:ab:ad:c8:26:5b:de:a3:3d:90:5e:33:
         b5:d2:31:a0:d9:24:76:65:0e:69:c4:af:1a:9d:b0:42:88:57:
         2b:ed:78:6f:2e:bc:9f:d1:cb:62:d9:4c:ce:ac:8b:20:8b:e3:
         dc:5b:11:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----