Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
File:                     7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft (raw, json)
Hash identifier:          TJMcr5ysASGPAOJ12hn6jQOUd8YUrUxsWXK/GIrk4rw=
Subject key identifier:   3F:CC:62:DA:F8:04:F2:5B:67:FB:5B:2F:E4:EA:F7:B4:C9:DD:57:7C
Authority key identifier: EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC
Certificate issuer:       /CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
Certificate serial:       019357D2472F184D06713E81811E7AAAA411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 07:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:18 +0000
Files and hashes:         1: 7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl (hash: Bc3bJ2/gRiNs+2IyjjVWGmHI2e8eMjctsKEogOP/q/k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:47:2f:18:4d:06:71:3e:81:81:1e:7a:aa:a4:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
        Validity
            Not Before: Nov 23 07:00:18 2024 GMT
            Not After : Nov 24 07:00:18 2024 GMT
        Subject: CN=3fcc62daf804f25b67fb5b2fe4eaf7b4c9dd577c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:82:b7:95:58:7c:dd:70:50:62:06:4b:5e:
                    d1:14:13:6e:79:bf:c4:f5:42:b4:b2:c1:30:c8:38:
                    97:00:50:7b:c3:43:7a:bc:c1:41:f2:00:38:c0:27:
                    44:6b:5c:4f:b8:d4:7c:72:a3:80:91:89:ac:c6:20:
                    f2:37:25:67:fb:75:97:55:01:50:13:92:81:9f:b2:
                    dc:b7:3e:9b:05:a0:60:73:a7:c6:71:2a:07:32:9b:
                    b9:52:ea:3f:ae:e9:ff:95:ff:d8:ee:70:b1:da:7c:
                    d9:43:2c:d7:7d:77:85:9d:9c:c9:38:1f:59:31:a5:
                    85:8b:c8:8a:e3:a6:59:ac:4b:7f:0f:65:c5:df:7d:
                    6a:23:77:d1:60:ad:a6:47:07:cf:72:5d:a0:9d:c4:
                    fe:d8:e0:45:ec:05:7f:43:22:e1:c9:db:93:de:1f:
                    19:77:fb:ec:59:8a:59:d4:f0:d8:eb:b9:34:7b:b4:
                    f3:29:ab:b6:4a:1b:e4:89:de:81:74:8f:fd:43:56:
                    0e:5d:87:9e:18:a2:76:ab:f4:6a:5d:7d:19:c0:81:
                    db:b3:42:94:a7:64:1b:8b:7c:29:df:78:90:3d:3b:
                    a1:d0:71:fc:34:80:54:b8:8f:96:c2:e8:9c:24:81:
                    f0:1d:22:56:80:54:9f:17:e3:a3:76:95:d5:8d:dd:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CC:62:DA:F8:04:F2:5B:67:FB:5B:2F:E4:EA:F7:B4:C9:DD:57:7C
            X509v3 Authority Key Identifier:
                keyid:EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e4:d9:ce:42:b0:f0:71:84:4d:b1:bf:dc:5f:fd:aa:3e:9d:
         0e:33:59:69:ad:0c:02:98:d4:a4:0c:1e:76:2f:2a:f9:1a:0d:
         aa:d8:0b:35:78:f7:0f:52:ad:1b:db:5c:90:e0:89:88:4b:ef:
         26:85:f0:66:56:bb:66:ed:cf:f3:3e:ff:7e:b2:d3:da:06:9e:
         81:60:1f:53:99:eb:3a:08:59:99:2d:61:05:a7:d8:a8:ad:2a:
         94:b3:5a:5f:f1:5a:92:1f:83:66:8b:2f:f2:83:20:f4:2f:08:
         bb:b9:81:47:97:48:55:90:55:7a:86:67:9f:44:db:b3:81:ed:
         93:79:36:af:7e:fd:1f:9e:b2:d7:0a:74:fd:0d:af:b1:68:89:
         92:3a:b3:ae:b8:fc:32:2f:52:9b:fa:70:c5:dd:cd:3b:d2:ae:
         eb:d9:a6:a7:4e:1d:70:52:f6:e6:da:ee:90:f6:2a:cd:c3:3f:
         da:06:4d:bd:d7:60:28:8d:2e:12:40:4c:95:24:e0:d2:84:1d:
         d4:ae:fa:36:f8:b0:9b:7c:31:9c:23:c1:7d:ee:5f:ff:58:9b:
         53:d3:aa:1c:99:f7:ad:10:43:a7:f3:8d:e6:d9:24:8c:dd:69:
         25:21:9c:40:84:58:d9:47:34:62:43:28:8a:bb:32:a3:da:76:
         64:55:ae:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----