Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
File:                     izHINiDus1ExJXtb-vqrOTRSyJE.mft (raw, json)
Hash identifier:          gY/Jl2kuI9Kp0gmYyjEc56XRM5/MPWqUEYO0Sg6UhUY=
Subject key identifier:   CB:B0:5E:6F:22:CD:78:43:B2:8D:38:B5:1A:48:A8:DD:2B:E5:A9:D9
Authority key identifier: 8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
Certificate issuer:       /CN=8b31c83620eeb35131257b5bfafaab393452c891
Certificate serial:       01936B2220E5334785D818926C1FA0372F9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
Manifest number:          1377
Signing time:             Wed 27 Nov 2024 01:00:18 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:18 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:18 +0000
Files and hashes:         1: izHINiDus1ExJXtb-vqrOTRSyJE.crl (hash: JEMWyhbsmoAeKXCn8A0pHsK94s7eFWQFG4ytwGOY7fk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:20:e5:33:47:85:d8:18:92:6c:1f:a0:37:2f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b31c83620eeb35131257b5bfafaab393452c891
        Validity
            Not Before: Nov 27 01:00:18 2024 GMT
            Not After : Nov 28 01:00:18 2024 GMT
        Subject: CN=cbb05e6f22cd7843b28d38b51a48a8dd2be5a9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:ab:0f:50:70:60:6d:f6:d9:4b:15:93:05:
                    76:2e:1b:5d:36:d4:d4:e0:aa:3b:94:7c:47:1b:3a:
                    53:e5:66:f1:34:14:c6:fd:05:f6:1f:74:2d:8a:20:
                    24:ce:83:b8:e9:1d:9c:b6:e0:2c:2a:a5:d8:ca:0a:
                    49:90:0c:28:31:f7:42:89:3f:2c:81:8a:5e:0a:03:
                    02:5c:52:94:4c:aa:3d:e7:b0:cb:de:3f:c0:a0:95:
                    5d:ba:90:a9:03:51:f7:17:df:71:da:3f:65:1f:88:
                    57:69:c7:3e:4d:d4:87:8e:e1:9e:0e:cc:d0:36:74:
                    28:31:d5:c5:7e:f5:2a:3b:a2:68:92:78:a9:9e:23:
                    78:8f:9b:65:fc:4b:6a:a0:b5:9d:29:a8:55:d4:93:
                    60:a8:d2:b2:0c:02:14:ed:3f:4c:ba:57:53:17:d2:
                    1f:a2:69:37:e1:c7:e6:e9:fd:e5:48:3e:ba:8e:0b:
                    44:21:fa:dd:2f:87:6e:79:5c:87:8a:00:12:20:19:
                    89:f3:bb:6c:b8:1b:c9:fe:c9:32:5c:22:67:b5:a1:
                    c4:2d:5d:b4:e9:e0:1b:f7:c7:61:c6:a5:34:80:3c:
                    59:d2:48:1c:34:07:9a:de:52:4c:9d:48:06:8e:9a:
                    64:50:4e:16:38:ca:74:4d:8f:21:d0:ad:36:3e:c6:
                    cc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B0:5E:6F:22:CD:78:43:B2:8D:38:B5:1A:48:A8:DD:2B:E5:A9:D9
            X509v3 Authority Key Identifier:
                keyid:8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ad:dc:76:6e:15:84:4a:36:a4:17:fe:1c:4a:63:a6:24:38:
         13:cd:11:88:1d:a5:08:f3:e2:dc:70:1a:a6:68:09:ba:62:f4:
         82:4a:8f:f0:17:7e:07:de:0b:ff:f4:0c:57:4b:a4:94:e1:69:
         64:0a:00:79:19:9d:95:f3:05:36:ae:94:4d:a1:5d:24:f3:ba:
         d4:b4:9e:70:b2:c8:85:a3:d3:dc:7a:cc:99:21:ad:be:46:ac:
         b5:b5:b6:a9:fd:05:0a:1b:6f:55:c2:1f:5c:6d:2b:d3:bc:39:
         9b:43:12:37:57:a2:19:8a:cd:3a:f4:27:af:9c:fb:40:9b:6a:
         fe:cc:73:49:1e:01:b0:09:86:15:e3:f7:47:ef:d1:f6:aa:f1:
         c0:90:39:59:5e:ac:f1:e3:5a:52:0b:44:54:3a:80:45:16:e8:
         9b:46:c0:bf:7a:f2:46:0e:bf:85:85:42:ba:f5:63:f1:49:2e:
         85:df:c0:87:b5:38:ce:a8:ec:ba:dc:9d:60:05:03:b7:92:6f:
         2b:67:e9:4e:88:fa:45:15:6a:a6:0f:08:60:92:f4:b5:fd:12:
         df:94:86:05:ad:d8:bc:21:f0:bb:78:39:3a:5a:2f:62:c5:4f:
         4c:e8:a4:8a:e8:99:79:92:36:32:06:7a:32:a2:7e:57:2b:97:
         09:30:10:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----