Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft
File:                     eXqQW0595YVil_bgOmViXeIsQvM.mft (raw, json)
Hash identifier:          Udevxlnx6anxwGlEhG8QDjMT94LecFJGZhCxDeevr9U=
Subject key identifier:   9A:E1:CE:F3:F2:24:CC:76:DD:E3:3A:36:07:2E:92:BE:5E:47:79:75
Authority key identifier: 79:7A:90:5B:4E:7D:E5:85:62:97:F6:E0:3A:65:62:5D:E2:2C:42:F3
Certificate issuer:       /CN=797a905b4e7de5856297f6e03a65625de22c42f3
Certificate serial:       019369D8935365682542A17E9AF5395789BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft
Manifest number:          0B46
Signing time:             Tue 26 Nov 2024 19:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:21 +0000
Files and hashes:         1: eXqQW0595YVil_bgOmViXeIsQvM.crl (hash: EEGz92YVmzJpauPfypB3xO++hTOaUqVLEuFp5rVyHpE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:93:53:65:68:25:42:a1:7e:9a:f5:39:57:89:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797a905b4e7de5856297f6e03a65625de22c42f3
        Validity
            Not Before: Nov 26 19:00:21 2024 GMT
            Not After : Nov 27 19:00:21 2024 GMT
        Subject: CN=9ae1cef3f224cc76dde33a36072e92be5e477975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:83:25:e8:7f:bf:a8:ec:75:4d:26:b7:41:be:
                    d2:05:26:25:2b:7e:ca:4d:d9:1e:21:96:90:bb:f1:
                    b0:59:58:9c:1a:e5:56:71:a5:d4:b6:ef:0c:22:f7:
                    47:30:3a:d8:91:6e:c9:75:79:ef:9e:6f:67:6f:64:
                    80:4d:aa:3f:ed:d9:3f:5c:f1:6f:85:a9:70:22:a1:
                    98:74:17:3e:0d:45:fd:79:78:55:a4:1e:e5:88:db:
                    8b:28:5a:a0:d6:53:9d:48:ec:08:98:7a:2d:63:18:
                    64:c2:6f:e5:3a:78:20:5b:83:b7:d0:6d:12:13:e4:
                    e8:a6:dc:1b:f8:48:a9:37:cb:73:c1:6d:60:a8:14:
                    e3:58:c7:02:54:67:1f:37:a9:b5:32:13:cc:d6:19:
                    02:26:8d:66:dd:1f:aa:1f:aa:36:9f:4d:77:dc:c1:
                    74:12:7c:1d:be:2d:7c:10:20:ad:f5:a8:bc:41:10:
                    62:fd:de:b0:8d:f2:b9:21:b9:4a:d7:6a:bf:b3:36:
                    45:18:fc:c5:ed:dd:f9:20:40:01:d9:24:65:23:cd:
                    c5:74:a2:70:e6:6e:77:4a:82:95:f5:19:6d:23:aa:
                    ad:52:ec:83:fe:2b:e8:04:41:85:61:58:47:89:74:
                    bf:d0:55:6e:0c:dc:68:07:33:6b:c1:33:69:77:1e:
                    6b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E1:CE:F3:F2:24:CC:76:DD:E3:3A:36:07:2E:92:BE:5E:47:79:75
            X509v3 Authority Key Identifier:
                keyid:79:7A:90:5B:4E:7D:E5:85:62:97:F6:E0:3A:65:62:5D:E2:2C:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:5c:7c:3a:08:90:0a:04:49:43:7d:24:0a:e0:a7:4a:ce:72:
         b3:ab:cd:c2:4c:5e:bb:ff:bc:ee:29:d5:0a:8f:37:18:70:31:
         2c:2a:47:67:f0:39:41:ff:12:97:59:8f:5b:77:73:ff:48:45:
         89:3d:16:bb:e7:61:d2:92:99:f6:3b:76:60:37:eb:70:f7:22:
         bf:ee:33:15:a1:11:75:44:96:e6:bf:89:6c:aa:99:e1:30:0a:
         24:59:bf:42:04:b3:ed:d7:b2:41:4b:96:83:2f:02:6c:a1:22:
         ed:3a:19:10:d0:e1:84:9f:a8:72:83:a8:3b:61:8e:bf:1c:1c:
         df:5d:25:30:f7:ca:6c:20:39:e3:35:f2:4a:70:f5:cd:0e:32:
         d3:b1:ef:7e:a0:3f:23:5a:f4:5d:65:2e:61:dc:eb:8c:44:30:
         89:8d:1d:53:fd:3f:72:8a:a4:0c:93:57:50:dd:81:3b:2d:e1:
         40:4e:4b:f9:44:e7:fa:3c:8b:56:10:97:bb:87:ad:4d:d1:ce:
         6c:25:8a:df:e5:04:af:3f:64:49:de:24:d7:b2:eb:6d:4e:5f:
         55:47:f8:a7:e5:59:f0:f1:f7:fe:87:ec:10:67:a5:44:b2:9b:
         1c:f8:ea:40:22:62:dc:6e:d4:d5:45:ff:8d:c1:12:26:0a:c0:
         e5:14:fc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----