Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
File:                     ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft (raw, json)
Hash identifier:          uKCLGHFNtQldAyS8GPUSUbm7/jPbVAGUZL8n6YuS0d8=
Subject key identifier:   9D:A4:E2:E6:EA:9A:77:22:3A:AA:37:34:CA:22:CF:15:51:F6:E7:BA
Authority key identifier: CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
Certificate issuer:       /CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Certificate serial:       019369D9A114B9291354AB1644199B48A175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
Manifest number:          0E3C
Signing time:             Tue 26 Nov 2024 19:01:30 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:30 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:30 +0000
Files and hashes:         1: ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl (hash: t79U8ipOWqpGBtavvvEirXJQrJTRTCPFqdd/7uRa8KE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:a1:14:b9:29:13:54:ab:16:44:19:9b:48:a1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
        Validity
            Not Before: Nov 26 19:01:30 2024 GMT
            Not After : Nov 27 19:01:30 2024 GMT
        Subject: CN=9da4e2e6ea9a77223aaa3734ca22cf1551f6e7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:6f:55:e2:0c:09:97:f9:5b:cd:88:bc:0f:
                    14:10:fa:a8:d7:76:0c:35:3c:3c:4e:22:dc:61:47:
                    41:d9:36:15:4d:1c:cd:77:ae:85:07:11:22:a7:fc:
                    5d:dc:53:51:2b:d9:e4:53:27:f7:24:ac:44:22:85:
                    0b:13:d1:cb:5d:67:05:f8:b8:55:1d:ec:1e:e4:2d:
                    ef:f3:1d:58:39:cf:eb:4d:de:3b:29:48:51:18:d4:
                    06:16:f2:81:f5:ab:11:83:7f:ff:2b:59:7b:e4:71:
                    75:08:72:26:08:af:f9:a1:4c:80:c9:bf:24:43:6f:
                    c0:df:bd:ab:8d:ca:3a:9f:78:9d:e4:f7:87:a7:b5:
                    2a:1b:7e:93:d4:d2:6c:94:86:92:0c:17:f2:33:a2:
                    98:ce:e3:29:e1:76:45:91:e1:85:bd:b5:a1:cd:54:
                    72:ae:63:7e:71:45:6f:be:c6:9e:a0:d5:03:ac:8a:
                    bc:d5:77:2f:e7:66:ab:d0:3e:09:6a:b3:8f:20:49:
                    cc:35:b9:2b:8d:38:cb:18:dd:3a:ca:ca:53:0f:0b:
                    04:a2:bd:b0:40:ff:86:17:f0:f8:3a:ee:81:68:d6:
                    e3:f3:b1:49:69:ea:93:ac:21:ce:00:a9:c4:ff:74:
                    cc:ff:e7:18:7a:90:39:91:0a:54:78:3a:96:fc:65:
                    53:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A4:E2:E6:EA:9A:77:22:3A:AA:37:34:CA:22:CF:15:51:F6:E7:BA
            X509v3 Authority Key Identifier:
                keyid:CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ba:1e:ae:4c:57:9d:8c:a2:65:07:72:d5:3a:e1:4c:6a:9f:
         f0:3c:d0:38:2a:d3:b8:e6:d4:fb:01:fb:ef:d8:46:cd:76:d8:
         94:89:41:1c:bb:1f:e6:87:ba:0b:96:a4:19:62:03:58:d1:ae:
         74:df:96:94:06:45:06:97:87:e3:c7:90:5e:12:17:2d:59:40:
         75:66:0b:50:2e:a1:38:e3:cc:27:be:32:7c:72:bc:09:cb:62:
         e2:94:f2:01:15:8b:c0:fa:9e:39:67:14:0c:d4:26:42:c9:49:
         65:d2:14:5b:ad:dd:5a:7b:ca:0b:3e:2a:f1:c5:e4:3a:5e:19:
         a4:d2:2b:25:a6:cd:8e:18:78:39:79:8a:2f:82:3f:eb:3c:32:
         e7:c8:7f:65:cf:c0:97:45:58:80:b7:e4:20:fa:4d:e3:5e:57:
         47:d6:43:1b:ba:26:f9:b9:bd:4f:9f:3c:f4:51:c2:3f:e8:81:
         32:47:78:6e:4c:5a:3f:9d:88:d3:94:7e:ca:d9:97:44:5a:ef:
         34:37:a1:15:c7:17:63:95:46:a7:4a:5e:b8:f9:ee:ef:51:73:
         ff:19:dc:c5:4f:17:3e:6a:21:9b:be:a1:a0:df:98:27:1d:5c:
         a8:94:dd:f4:5c:22:17:f2:3d:ba:2d:b6:e7:0d:e2:e9:4a:67:
         a7:e6:92:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----