Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
File:                     _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json)
Hash identifier:          uUS0Ncf1VUlJXtgU+QpS/YUoldzxPTMfxHhyNxDYklM=
Subject key identifier:   C5:79:77:D0:A0:9B:A1:6F:7B:D9:D8:1F:4C:AD:BF:89:FE:35:3F:75
Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
Certificate issuer:       /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Certificate serial:       019356F705E9E324799DDC633535BEACC447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 03:00:49 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:49 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:49 +0000
Files and hashes:         1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: 3y1nqU3fj76aShm07KNTCfPt1Gd0jJfvHLfGsbXo90I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:05:e9:e3:24:79:9d:dc:63:35:35:be:ac:c4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
        Validity
            Not Before: Nov 23 03:00:49 2024 GMT
            Not After : Nov 24 03:00:49 2024 GMT
        Subject: CN=c57977d0a09ba16f7bd9d81f4cadbf89fe353f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:cd:f3:16:5e:7b:cc:a7:98:c5:00:54:54:
                    56:4e:f5:04:65:9f:86:73:fd:5f:ca:d2:f6:41:26:
                    f1:41:e5:f9:0b:1b:cb:e5:e9:7b:ed:6b:08:f9:ca:
                    65:37:ea:06:2f:0c:88:24:66:75:26:f4:dd:76:1a:
                    a5:8d:c1:35:8a:ff:34:98:d0:ff:36:fc:99:21:e5:
                    f6:c9:69:26:d7:bc:6d:b4:87:d4:46:92:08:d2:c4:
                    d7:23:3b:04:50:00:5b:d4:7a:f9:23:bf:2b:38:40:
                    ff:b7:b0:db:09:1c:f8:42:f1:cf:2f:88:cb:f6:a7:
                    72:11:b9:8e:f6:e3:a2:65:d0:65:d9:1a:2b:0e:a6:
                    85:7f:cf:aa:48:63:9d:10:5b:88:cc:ba:a6:78:74:
                    f8:ea:0f:f4:d8:07:00:ae:cb:7a:be:03:85:f1:6e:
                    1e:d8:58:3e:b0:91:63:40:71:33:0e:cd:1f:72:d1:
                    d9:3e:25:76:27:ee:71:a1:d5:be:ff:8f:5b:bd:f8:
                    24:c9:cc:0d:2b:58:f8:80:ef:1d:f2:d1:4f:61:71:
                    d4:cd:0e:70:64:22:d0:4f:79:57:a7:57:e4:c3:8c:
                    e3:8e:28:b6:e9:e8:af:96:e4:a4:1a:9c:ce:11:8a:
                    32:86:a5:e3:5e:7c:86:cd:6f:ea:64:b3:e5:e9:42:
                    74:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:79:77:D0:A0:9B:A1:6F:7B:D9:D8:1F:4C:AD:BF:89:FE:35:3F:75
            X509v3 Authority Key Identifier:
                keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ca:e6:31:a0:e3:96:d6:85:1c:ba:f0:b7:e8:b2:7f:e4:18:
         dd:4a:58:d2:30:11:d4:a2:7d:d7:fa:67:47:2f:0c:6a:09:5e:
         98:77:a0:3b:6d:eb:08:50:1b:e3:ae:0e:b4:77:48:24:37:2b:
         79:56:c5:b9:cb:d0:06:eb:a7:86:af:17:1b:2f:fc:eb:0f:ca:
         cc:04:c4:c7:9b:5e:e6:3e:7b:d4:08:ff:49:86:3c:37:00:8b:
         72:e1:75:be:2d:ed:31:fc:91:bd:99:8b:61:00:6e:53:b0:da:
         e9:33:38:7c:9f:b9:98:04:e2:bd:73:cb:92:40:61:19:e3:e8:
         f6:31:71:6d:82:38:f2:68:8b:bf:43:14:41:0d:45:08:cf:25:
         74:69:64:b0:0c:5c:04:64:fe:fd:54:69:f9:e6:a5:98:cc:ec:
         ea:39:01:20:d5:f9:f0:82:36:dc:b0:99:db:26:9a:01:75:31:
         2d:24:c8:eb:14:1a:dc:74:89:46:5f:d2:44:2b:31:10:6e:cc:
         ba:88:f1:17:c1:af:6c:88:7c:a7:93:31:12:1c:04:19:46:5e:
         18:1c:87:ce:51:7e:47:9d:7b:cc:f3:27:36:c1:f5:2f:6c:2b:
         4e:91:62:50:12:2a:9d:e6:08:81:9b:9c:ab:c1:b3:d8:00:d9:
         91:59:1a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----