Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.mft
File:                     4SGVC1Am_t2W9uUCmPkLrC28T-I.mft (raw, json)
Hash identifier:          LPp2jKAIfjP9mez39KQ6k9TxBZC/g+UTQTvCNfPSxCE=
Subject key identifier:   31:CA:72:96:B5:43:B5:0C:8C:A5:08:40:60:01:26:4A:7B:DE:14:E3
Authority key identifier: E1:21:95:0B:50:26:FE:DD:96:F6:E5:02:98:F9:0B:AC:2D:BC:4F:E2
Certificate issuer:       /CN=e121950b5026fedd96f6e50298f90bac2dbc4fe2
Certificate serial:       01936AB487FD2B0737DAC23A06F2035B6441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SGVC1Am_t2W9uUCmPkLrC28T-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.mft
Manifest number:          03A4
Signing time:             Tue 26 Nov 2024 23:00:36 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:36 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:36 +0000
Files and hashes:         1: 4SGVC1Am_t2W9uUCmPkLrC28T-I.crl (hash: K8YzAyHd4XQ8ghgflmVWjdvhSapvHmjCBlV6BeKjMII=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4SGVC1Am_t2W9uUCmPkLrC28T-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:87:fd:2b:07:37:da:c2:3a:06:f2:03:5b:64:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e121950b5026fedd96f6e50298f90bac2dbc4fe2
        Validity
            Not Before: Nov 26 23:00:36 2024 GMT
            Not After : Nov 27 23:00:36 2024 GMT
        Subject: CN=31ca7296b543b50c8ca508406001264a7bde14e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:34:ec:3b:9b:5c:e9:67:e4:2b:7b:4a:49:15:
                    52:9e:84:7f:06:04:a8:d7:bd:e2:51:e7:a4:b5:d3:
                    0e:54:f6:cd:9f:83:bb:d6:67:a0:1d:7b:6e:4b:ab:
                    95:3b:29:48:fd:b7:54:10:52:df:70:4a:f3:d7:b0:
                    46:a8:93:29:56:b6:48:8e:fc:43:b2:04:19:3f:0a:
                    50:7a:31:71:fe:53:c9:23:63:19:87:b9:67:df:4e:
                    f9:e2:ed:bd:c8:76:32:7f:43:b3:2d:55:de:13:46:
                    aa:b5:8b:f4:df:f6:76:5d:68:20:28:ef:1a:43:4a:
                    42:51:1f:02:7c:26:55:63:2c:94:0c:31:c0:04:69:
                    92:51:5e:c6:0a:b3:b6:c6:08:e6:66:cf:da:c3:d7:
                    28:22:1b:d4:b0:77:74:b5:27:73:64:49:da:30:f1:
                    f1:95:46:22:59:86:bb:de:e2:46:ea:28:bc:be:08:
                    4e:90:dc:39:10:26:93:d3:74:ec:97:67:a6:61:68:
                    3c:37:3a:b6:bb:b6:90:51:ab:ba:3c:bf:e5:77:8e:
                    ba:38:ef:e3:e6:9c:a6:69:ae:8c:7e:ca:36:ef:77:
                    ae:35:27:26:a2:62:2a:31:75:13:80:5d:56:c0:06:
                    54:ff:e0:bb:63:83:2c:a9:4a:18:f2:3a:cf:f3:8a:
                    e8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CA:72:96:B5:43:B5:0C:8C:A5:08:40:60:01:26:4A:7B:DE:14:E3
            X509v3 Authority Key Identifier:
                keyid:E1:21:95:0B:50:26:FE:DD:96:F6:E5:02:98:F9:0B:AC:2D:BC:4F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SGVC1Am_t2W9uUCmPkLrC28T-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:1a:56:ef:cd:04:c0:e4:18:1d:5d:02:fd:b1:42:8d:14:e0:
         b1:cb:ba:33:04:55:14:81:34:48:a2:aa:73:36:00:ed:95:7a:
         db:44:a7:8c:93:f4:6e:9b:fc:12:35:89:a0:55:38:6f:67:92:
         25:6b:a7:7b:78:9e:ce:ed:ba:0f:bc:42:ca:0c:c6:35:37:98:
         a7:df:7b:19:42:20:d4:c9:00:76:a7:8a:ae:f5:25:2a:74:66:
         ba:c0:c2:ac:bb:b7:fb:bb:fe:53:af:dc:5c:5f:e0:e4:b1:de:
         aa:bc:3d:39:2e:cf:b6:a9:51:6a:0c:aa:ee:d8:c4:7a:88:ce:
         e8:16:3e:0b:1d:37:6a:f4:be:58:e0:e8:1c:41:e7:53:96:d5:
         10:55:aa:70:10:2b:d9:49:aa:ce:8a:24:26:26:08:cc:fd:0c:
         0b:1f:33:4a:e5:be:13:35:9f:2e:ca:ed:96:86:78:a9:93:c8:
         95:67:03:90:e2:c5:73:f9:1d:d4:bc:bd:5a:44:70:7f:20:65:
         c2:f9:6d:79:77:8a:25:d1:0c:4b:14:03:a9:e3:2d:5c:cf:7a:
         41:42:ba:a9:b5:6d:ec:16:d5:53:0d:e4:33:d6:a1:67:b9:b0:
         6b:60:75:88:6d:14:3f:d9:f7:0d:14:9d:80:1f:f2:68:0c:85:
         45:03:50:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----