Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
File:                     fuKac7j6u65GDnkk_nZoR13LmmM.mft (raw, json)
Hash identifier:          7laiq/Rip6x6P8NbBe/6l3ndTk/pyzsuNsK+aQD2ijQ=
Subject key identifier:   0C:B1:1C:45:87:9A:51:F3:01:A8:CD:FA:9F:01:B2:5B:11:6E:08:D2
Authority key identifier: 7E:E2:9A:73:B8:FA:BB:AE:46:0E:79:24:FE:76:68:47:5D:CB:9A:63
Certificate issuer:       /CN=7ee29a73b8fabbae460e7924fe7668475dcb9a63
Certificate serial:       0193568ADB964A868BF5D870DE6A8AA89D9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
Manifest number:          02EB
Signing time:             Sat 23 Nov 2024 01:02:40 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:40 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:40 +0000
Files and hashes:         1: fuKac7j6u65GDnkk_nZoR13LmmM.crl (hash: 997ujMgeiDQnq3JTY/mD137L/1vqy7LwBXBivfs7h+4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:db:96:4a:86:8b:f5:d8:70:de:6a:8a:a8:9d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee29a73b8fabbae460e7924fe7668475dcb9a63
        Validity
            Not Before: Nov 23 01:02:40 2024 GMT
            Not After : Nov 24 01:02:40 2024 GMT
        Subject: CN=0cb11c45879a51f301a8cdfa9f01b25b116e08d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fa:33:de:fb:5a:33:27:ca:ca:5d:b3:32:53:
                    26:68:83:16:b6:5d:ba:74:52:df:50:60:f3:27:64:
                    7a:ba:8d:c7:42:95:ab:3e:4e:80:d0:0e:d2:70:b0:
                    3c:27:91:ed:3b:cf:cb:a3:a4:28:c4:56:0b:f7:91:
                    64:63:03:55:c5:9c:1a:09:1d:3b:9b:43:e3:d5:7e:
                    51:a5:48:87:08:9c:79:5e:91:ef:e2:53:c1:a4:7c:
                    ab:db:09:02:0d:76:b8:b1:64:18:94:3f:6d:2a:99:
                    ff:91:4e:10:0a:cd:e7:92:b0:d3:48:4e:aa:88:67:
                    27:37:8d:75:fd:e8:05:58:79:9c:1e:a5:fb:c0:ef:
                    68:be:8b:08:d0:cd:5e:61:7f:c7:65:d4:3f:81:cb:
                    0c:3d:55:1d:72:97:ce:8b:80:92:37:c3:66:79:7c:
                    37:9f:16:9f:91:e6:28:ce:ea:04:6e:d7:3e:df:37:
                    a1:9a:6a:e8:bc:2a:13:da:4e:7c:2a:3f:aa:37:6a:
                    db:04:c8:b1:f8:c9:2e:bb:c2:52:2e:24:d2:bd:94:
                    bb:76:83:83:e5:0c:58:c1:0f:54:3d:01:22:5a:fc:
                    b0:5d:5d:bc:fa:45:4f:c0:c4:d8:ea:3a:22:76:a0:
                    8b:c3:4c:10:a2:c2:0e:3e:ab:49:c0:09:7f:3b:a6:
                    97:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B1:1C:45:87:9A:51:F3:01:A8:CD:FA:9F:01:B2:5B:11:6E:08:D2
            X509v3 Authority Key Identifier:
                keyid:7E:E2:9A:73:B8:FA:BB:AE:46:0E:79:24:FE:76:68:47:5D:CB:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:70:c0:45:82:99:0c:c6:56:0a:b1:c0:82:ea:f0:f3:22:a1:
         e0:09:f6:cc:68:a5:3d:2a:fe:cf:af:1f:87:8a:65:ab:ac:4b:
         35:f1:91:98:8c:42:da:78:00:fd:3f:75:77:0d:73:ab:45:44:
         b5:e3:02:5d:9d:91:8b:d0:60:a0:0c:9e:5e:0f:ae:96:35:db:
         cc:25:46:a2:8a:65:74:ee:70:35:8c:cd:d9:95:a2:ac:9f:58:
         56:30:ef:2e:12:8f:b2:7a:10:58:e0:67:e7:bf:94:31:a9:b7:
         70:08:59:9f:5a:13:cd:e1:a3:da:e8:1b:06:a7:98:99:2d:53:
         8a:a7:23:44:fd:88:3b:c8:9c:41:20:71:15:58:13:13:18:f3:
         55:17:96:0c:a2:71:68:cc:4e:e6:ba:14:ee:3a:8f:40:48:b5:
         75:4f:8d:2b:1c:b2:cc:93:c4:8c:cf:fb:74:e2:26:0f:dd:aa:
         8f:ba:aa:e3:a3:23:93:2e:9f:c7:a3:67:1d:76:1b:2b:44:50:
         64:10:d3:64:55:b8:52:dd:42:98:54:d5:c6:26:14:85:af:62:
         2a:46:ee:8a:a2:48:a9:b1:a0:4b:16:23:1b:63:94:93:b6:56:
         41:2e:89:20:8d:5d:18:96:59:71:f6:d9:36:20:30:d4:fd:13:
         52:00:dc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----