Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
File:                     kQFfA3NVWj9WUfaYypO_SS2LQ90.mft (raw, json)
Hash identifier:          YSsxT1hbjD66DU0ijRCh7UIeSuixLq0MnkFf9KdGuw4=
Subject key identifier:   14:E6:4F:8C:38:13:C7:8E:A9:95:2D:41:08:52:D9:85:B8:6A:13:72
Authority key identifier: 91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
Certificate issuer:       /CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Certificate serial:       01936A46C7FDABE0B9220AC44ECCF74740B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
Manifest number:          130C
Signing time:             Tue 26 Nov 2024 21:00:43 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:43 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:43 +0000
Files and hashes:         1: kQFfA3NVWj9WUfaYypO_SS2LQ90.crl (hash: EI1S4fXKSM5vDbiRZ7usjRUGc4Eset2VPZpwnzwl1F8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:c7:fd:ab:e0:b9:22:0a:c4:4e:cc:f7:47:40:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91015f0373555a3f5651f698ca93bf492d8b43dd
        Validity
            Not Before: Nov 26 21:00:43 2024 GMT
            Not After : Nov 27 21:00:43 2024 GMT
        Subject: CN=14e64f8c3813c78ea9952d410852d985b86a1372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c0:69:cb:d8:f1:9d:38:77:fd:3a:bf:55:90:
                    57:9c:24:ac:78:96:b7:63:ef:06:7a:3d:1b:3e:2e:
                    aa:91:7f:5d:94:24:b8:fc:f5:ab:29:11:4b:8b:db:
                    d0:bd:26:29:d7:9b:96:ab:1c:41:e4:ef:f0:74:81:
                    16:33:cf:35:2c:dc:f1:2f:3f:96:6a:cd:1d:30:69:
                    6a:19:27:9a:ab:f0:dc:e0:13:a0:f5:69:68:86:a0:
                    3b:21:6e:07:4d:0d:fc:e5:3a:d5:46:90:e2:4d:bb:
                    fc:bf:5d:28:b9:a9:e0:f3:5c:e9:9b:ed:c8:15:91:
                    44:9a:1c:9f:f3:68:42:e5:a6:06:db:e2:6a:da:93:
                    12:22:cd:11:f0:7a:d3:f8:5a:f2:5f:7a:26:f2:33:
                    e2:e5:0c:71:e3:ce:d5:0c:0e:00:3b:d2:d9:82:54:
                    f5:41:51:b9:8d:92:4c:32:80:d9:6f:30:9d:f9:09:
                    9f:bc:27:1d:21:b7:c5:b2:fa:02:64:bb:cf:9d:52:
                    3b:be:aa:f4:ea:69:cd:10:91:8b:89:d0:a6:3f:dd:
                    d2:1c:80:15:34:cc:d6:5e:ff:c7:9a:00:cf:f6:3f:
                    1b:3b:32:41:f0:b1:ce:31:e4:43:bb:e4:8b:10:38:
                    f3:db:1e:5b:92:9f:8c:63:68:b9:75:66:ca:12:52:
                    73:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E6:4F:8C:38:13:C7:8E:A9:95:2D:41:08:52:D9:85:B8:6A:13:72
            X509v3 Authority Key Identifier:
                keyid:91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:bc:1d:ec:67:a1:bb:75:5e:9b:ce:e6:b5:1a:d3:1c:62:a1:
         b6:11:fc:a3:42:fb:87:18:f8:1a:59:d2:01:24:31:92:a8:86:
         71:47:fa:9f:6a:62:c3:26:d2:85:f2:d5:bb:bc:6e:9a:19:27:
         ce:26:f1:bc:8b:00:e0:85:3d:a0:b0:3a:0c:d9:3f:fc:01:66:
         3f:f7:9b:6c:40:2d:30:27:e6:09:a8:fb:73:95:9f:0c:b6:71:
         10:c9:a6:89:c3:d1:2f:cc:6f:45:fa:60:75:54:ba:d5:8e:00:
         64:84:45:36:f2:97:19:b2:94:82:58:b7:ee:df:8a:27:e4:80:
         b0:9c:37:77:3c:36:f9:19:79:63:73:76:10:b4:8c:3f:87:27:
         6a:1f:c2:6e:40:bd:6c:5d:da:21:98:a9:61:9d:53:75:31:b1:
         d4:70:cc:64:2d:c6:39:e6:72:a5:a2:84:a9:38:ce:06:13:c9:
         11:e5:af:2c:a2:bf:dc:ed:e7:31:f3:93:4d:91:cb:6e:10:a6:
         87:8c:86:e5:78:12:0c:6b:be:f2:cb:f3:bb:4e:f4:b3:ea:32:
         00:56:f0:0d:d9:04:ed:1f:73:42:4f:e2:50:f6:1b:60:83:e9:
         05:35:cc:56:24:9d:4d:12:ca:d9:64:09:89:34:86:0c:f6:e1:
         74:aa:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----