Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
File:                     Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft (raw, json)
Hash identifier:          M10lNEJuohUrxlpjIxAWrft7KqzH7iE1bqWxSIL8Wo8=
Subject key identifier:   AC:73:1D:E7:CD:77:EA:48:3C:AD:B6:C6:0C:4E:2B:9A:D7:47:BD:64
Authority key identifier: 63:6B:02:7B:FA:B9:1A:A4:71:9A:80:EF:E0:21:24:61:37:42:8B:DA
Certificate issuer:       /CN=636b027bfab91aa4719a80efe021246137428bda
Certificate serial:       019357D2F333E4B69544A6518035384E6B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
Manifest number:          1111
Signing time:             Sat 23 Nov 2024 07:01:02 +0000
Manifest this update:     Sat 23 Nov 2024 07:01:02 +0000
Manifest next update:     Sun 24 Nov 2024 07:01:02 +0000
Files and hashes:         1: Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl (hash: aHjAumKKpwy/EcqFN+R9u/I45oXe/WBVO04ZfFKBwoQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:f3:33:e4:b6:95:44:a6:51:80:35:38:4e:6b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=636b027bfab91aa4719a80efe021246137428bda
        Validity
            Not Before: Nov 23 07:01:02 2024 GMT
            Not After : Nov 24 07:01:02 2024 GMT
        Subject: CN=ac731de7cd77ea483cadb6c60c4e2b9ad747bd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:67:13:07:e5:0f:5c:3d:06:78:e7:b9:24:
                    b3:48:7a:59:4b:4b:93:2d:95:35:cf:0e:21:8d:94:
                    3b:7e:67:11:79:b7:9b:51:66:b4:eb:29:b7:df:27:
                    be:f8:3d:aa:6c:64:ab:ac:63:42:2a:b6:a2:a9:fa:
                    18:86:fb:60:88:94:5a:9d:01:87:78:ea:89:6f:83:
                    bf:bf:ea:8e:f5:26:10:93:e6:99:f0:25:84:86:22:
                    5e:8d:97:a6:da:16:97:bb:89:aa:f5:5c:08:3b:79:
                    96:4e:27:6b:8b:ec:4c:dc:04:8e:c9:0a:79:5f:29:
                    f5:b4:50:cd:9f:ee:14:2b:e5:cf:38:f7:54:c7:ec:
                    64:d2:62:b9:86:3e:14:9c:0d:21:3f:15:0b:58:f0:
                    c0:c7:f9:58:9b:67:0b:ba:83:e2:60:3b:e3:6f:8e:
                    46:d7:cc:8e:72:8f:a4:2b:7f:bc:35:54:81:7d:15:
                    6a:28:94:05:d2:29:40:78:fa:1c:43:12:2a:b5:83:
                    13:26:3c:06:03:4c:c4:aa:1a:78:17:ea:af:c7:8f:
                    fb:f7:af:3b:10:09:f7:73:61:92:b1:35:1d:63:32:
                    3b:63:99:c4:cf:86:74:e1:20:55:e7:7f:5d:6b:5b:
                    51:52:89:f9:bc:7f:18:2b:bc:06:f1:90:dd:ad:98:
                    0b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:73:1D:E7:CD:77:EA:48:3C:AD:B6:C6:0C:4E:2B:9A:D7:47:BD:64
            X509v3 Authority Key Identifier:
                keyid:63:6B:02:7B:FA:B9:1A:A4:71:9A:80:EF:E0:21:24:61:37:42:8B:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d4:77:e2:e4:b3:a3:bb:95:04:7b:b1:1f:69:25:14:7e:f1:
         05:05:a9:64:46:94:25:8a:14:2e:ed:9c:31:fa:5f:95:a4:de:
         c0:63:fc:8e:0c:e1:8e:e3:09:b1:3a:35:5e:07:b0:0a:81:3c:
         59:5b:c0:a8:3a:9b:36:df:df:48:84:1b:d3:18:bc:01:bb:6a:
         db:c8:6c:00:29:a5:a7:82:fe:9d:c3:31:69:71:80:eb:8c:cc:
         29:44:de:6a:4a:d4:2c:90:3f:79:49:72:2a:14:ee:83:c8:23:
         c5:53:27:38:7a:98:d3:7b:b2:7d:96:31:a7:87:5d:04:55:2b:
         77:da:d7:7a:27:08:fb:e0:24:7c:f8:1f:c9:1e:8e:aa:6c:e7:
         86:4b:94:bb:ee:e1:6c:66:8f:e6:e9:b6:d5:fe:b0:67:fe:b1:
         25:60:cf:2f:dd:ed:27:67:a0:ee:2d:fa:4f:5e:07:db:c2:e7:
         d3:7a:38:ce:4b:05:17:a5:78:0f:90:5f:5d:0a:9f:3a:46:47:
         da:9c:a0:fa:4e:ad:c5:38:68:f1:97:23:57:6f:ad:e8:86:7a:
         22:3a:29:44:31:30:42:8d:63:da:a9:56:fa:5b:4f:39:9c:66:
         8c:c9:d4:bc:0c:d8:1a:fb:10:93:09:b4:ee:ad:f6:ea:f9:56:
         46:96:01:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----