Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
File:                     Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft (raw, json)
Hash identifier:          yB02tqHMIkOyfVy0zi/DRaQpyEcvpPtbW2vzNHUXa+o=
Subject key identifier:   DF:66:2A:4B:62:5C:E8:67:B5:38:6A:EE:A8:7E:E9:63:CC:4C:BD:C7
Authority key identifier: 1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
Certificate issuer:       /CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Certificate serial:       019369D8B0B18DE5C663925CEEFB9628A529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
Manifest number:          0980
Signing time:             Tue 26 Nov 2024 19:00:28 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:28 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:28 +0000
Files and hashes:         1: Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl (hash: YeuS5hBE/CgWB2dmZ9P9G2G82EPkqYtKIISqA8kT/b0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:b0:b1:8d:e5:c6:63:92:5c:ee:fb:96:28:a5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
        Validity
            Not Before: Nov 26 19:00:28 2024 GMT
            Not After : Nov 27 19:00:28 2024 GMT
        Subject: CN=df662a4b625ce867b5386aeea87ee963cc4cbdc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:d3:af:9f:d5:5a:63:b9:b6:8e:d3:29:09:
                    a2:0f:44:ef:b6:50:4d:bc:e8:d3:3f:db:b9:ba:de:
                    dc:3e:3a:de:ca:41:b2:12:20:1c:9c:89:f1:67:73:
                    a8:c8:62:a5:f5:62:12:c9:6b:14:04:ce:cf:60:f9:
                    51:11:af:bc:87:32:18:ba:01:1a:53:8f:2d:6d:29:
                    eb:5d:fd:93:8e:09:05:bb:cf:83:c2:59:cc:78:6c:
                    e2:f9:33:76:91:9b:de:68:e8:99:07:4a:c7:1b:b5:
                    97:31:03:5a:56:15:98:aa:3e:cf:1f:90:a7:1b:6b:
                    87:8e:a2:05:23:ab:39:1c:36:9b:09:a3:d0:29:e2:
                    75:98:ee:ee:3c:0a:19:1c:e0:73:31:ec:c7:55:1a:
                    ca:79:09:5b:06:82:a6:50:35:a8:9d:42:f5:0c:ef:
                    54:e8:b2:ec:66:65:75:77:34:76:48:6b:ce:44:54:
                    ee:de:5e:87:88:93:37:9f:1f:65:86:12:d1:d3:76:
                    c6:1f:cf:da:cb:38:11:bd:1f:7d:7a:4c:4b:89:8d:
                    31:fd:c6:a7:65:61:35:87:f3:fc:cf:b9:40:1c:f1:
                    ba:23:f7:54:c9:bd:68:6b:94:17:fc:46:25:db:78:
                    b5:3f:f5:a2:15:b9:ad:c1:32:d5:8b:ad:be:f7:84:
                    3d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:66:2A:4B:62:5C:E8:67:B5:38:6A:EE:A8:7E:E9:63:CC:4C:BD:C7
            X509v3 Authority Key Identifier:
                keyid:1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:5d:a0:68:ad:05:2b:3c:09:80:17:1a:4a:9b:83:3c:6e:8b:
         19:ae:4e:8a:a5:99:21:d4:00:10:b9:d8:2d:e5:0f:42:b8:91:
         99:39:1c:43:a1:e5:9a:b3:65:94:fd:38:e5:c2:2e:8e:b7:0b:
         ed:79:38:10:92:53:0a:4a:9c:21:61:b4:85:2e:f6:dd:67:52:
         63:91:bf:3e:0f:ae:39:75:2c:83:9a:0e:4a:eb:cd:dd:b9:cc:
         ab:13:17:f1:47:da:5a:e0:d4:ef:d5:2d:7d:22:28:e9:8e:8b:
         bc:69:ef:e1:4e:d7:01:21:97:f5:9e:67:d6:c5:25:5f:a2:bc:
         4a:e3:e6:0a:ac:05:20:d6:e9:96:3a:95:31:d6:b2:52:50:8f:
         9f:bb:24:63:36:b9:97:a6:86:c6:74:20:2e:70:54:14:fa:8d:
         4c:4b:36:a8:2a:24:7d:86:65:95:18:9b:3e:d4:f4:ff:83:0c:
         1b:79:cf:3e:fb:ab:44:98:7b:ec:99:57:b8:8f:0c:44:4b:7f:
         bd:54:4b:b8:2f:cf:ce:95:0f:0a:0e:7f:25:8b:ba:ff:4d:64:
         d4:77:e7:8d:ca:26:43:01:54:6e:d1:df:8c:af:b2:20:70:3a:
         5c:8a:50:d6:38:66:d9:ea:d2:3f:1c:ab:5f:7b:a9:0d:bf:39:
         c2:e4:b6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----