Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
File:                     bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft (raw, json)
Hash identifier:          AlZXZye4Ir8Fs9cDQ1suR4zayYDws9q8swq/pUj4hL8=
Subject key identifier:   F8:5E:9F:1C:99:E3:DF:A2:FC:FD:FC:54:87:3F:CC:B1:B4:53:09:6F
Authority key identifier: 6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
Certificate issuer:       /CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Certificate serial:       019356F6980FCCE48CB52A1CF27E93EFC3B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 03:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:21 +0000
Files and hashes:         1: bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl (hash: jzDHIIVz/FKWu26jeRGLK1HH3XA07eBQKdI6hFWUKmY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:98:0f:cc:e4:8c:b5:2a:1c:f2:7e:93:ef:c3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
        Validity
            Not Before: Nov 23 03:00:21 2024 GMT
            Not After : Nov 24 03:00:21 2024 GMT
        Subject: CN=f85e9f1c99e3dfa2fcfdfc54873fccb1b453096f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:98:1d:02:1d:30:b7:e8:e1:07:b6:69:5d:
                    34:ec:89:d8:2f:06:d4:ee:04:45:83:19:31:b0:5c:
                    92:c5:a0:95:3e:6a:65:fc:76:ec:71:36:4b:97:72:
                    c5:6b:7d:9e:d7:bc:6b:29:3c:ce:d8:b7:5b:07:5d:
                    dd:80:ea:06:2e:f0:ec:a6:04:44:6e:fc:45:bb:d5:
                    54:c2:3c:4d:0b:fa:89:03:0c:12:bd:a8:db:95:7b:
                    f2:4a:f4:51:e7:29:2d:17:57:a6:1d:eb:d7:60:f1:
                    02:0a:48:67:36:f7:4c:6b:98:3b:72:28:93:d7:d0:
                    ef:71:0b:c6:7a:a8:d7:15:35:5d:b0:01:24:84:7b:
                    0c:0d:64:d2:af:0a:b9:f5:d5:95:01:93:a8:2a:0a:
                    aa:bf:5d:06:7f:51:7f:80:f7:07:5e:c8:ac:72:1a:
                    3d:42:f4:90:27:cd:5e:06:ff:14:b5:86:22:bf:d6:
                    6a:e4:90:ec:a0:87:f2:12:95:a2:88:b0:09:31:6b:
                    c9:5a:56:64:d9:4c:10:ca:7a:2c:c6:48:b8:66:0d:
                    2c:3e:dd:c4:f2:e6:9a:b9:b1:7b:f9:f9:35:91:c9:
                    15:d4:c0:ce:7b:df:32:ec:ca:a6:d0:15:e2:81:0d:
                    15:af:40:30:53:75:e8:bd:17:26:7b:af:28:2d:f1:
                    ae:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5E:9F:1C:99:E3:DF:A2:FC:FD:FC:54:87:3F:CC:B1:B4:53:09:6F
            X509v3 Authority Key Identifier:
                keyid:6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0d:86:fc:14:38:6b:f6:34:a5:13:84:4c:e2:2d:b1:d8:28:
         4a:c2:9d:65:74:60:cc:94:91:47:24:61:d5:59:7f:28:72:9f:
         74:0c:63:5c:eb:2b:53:4f:0a:1d:3d:23:65:dd:23:c5:62:fb:
         20:1b:4f:80:58:35:55:d7:7a:17:9c:2b:c4:d2:b1:b7:53:be:
         8c:64:f2:de:3b:d8:ca:bf:f2:21:37:f7:c6:94:48:70:ec:9d:
         1c:bf:09:5d:35:2a:f7:93:b2:a1:7a:09:4e:1d:e3:19:1a:a2:
         8f:aa:95:dc:79:ae:f0:8a:df:cf:c7:6f:38:74:97:1f:02:72:
         c9:fa:e9:52:6d:03:9d:a2:d7:f7:1c:36:1f:35:97:f0:a5:ba:
         f3:55:a8:d7:29:5f:17:3d:74:5a:33:55:88:22:62:56:1a:6c:
         1b:f2:89:02:76:d0:80:18:44:66:40:d0:0c:20:35:e5:f9:40:
         d9:ec:ce:4a:b2:03:fb:51:7d:70:b5:0a:07:8c:22:b9:23:90:
         eb:a1:c9:be:e6:c8:8b:a9:62:9b:89:d4:e4:0d:9c:60:ce:2b:
         fd:4c:d4:bd:89:c4:6c:38:be:73:3b:13:ae:33:f6:0a:9a:e4:
         41:2b:43:0b:9c:a9:1b:47:b9:45:04:46:96:61:ec:41:13:55:
         f5:9e:57:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----