Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
File:                     HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft (raw, json)
Hash identifier:          bY9bLIWi7IquDUMyxz9wBnboVm6JKynABuxLqqJ9GUo=
Subject key identifier:   06:4D:B0:28:96:54:73:EC:E3:98:08:77:DD:B2:4C:4A:70:D2:47:F5
Authority key identifier: 1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
Certificate issuer:       /CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Certificate serial:       0191FAEC108194548BE2025F32E81A641350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
Manifest number:          B9
Signing time:             Mon 16 Sep 2024 13:01:00 +0000
Manifest this update:     Mon 16 Sep 2024 13:01:00 +0000
Manifest next update:     Tue 17 Sep 2024 13:01:00 +0000
Files and hashes:         1: HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl (hash: fk23Hb0VB5ZaNv25Jex+bZsgqkS/DHtsNrgzofThshY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ec:10:81:94:54:8b:e2:02:5f:32:e8:1a:64:13:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
        Validity
            Not Before: Sep 16 13:01:00 2024 GMT
            Not After : Sep 17 13:01:00 2024 GMT
        Subject: CN=064db028965473ece3980877ddb24c4a70d247f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:7d:2d:36:88:fd:f3:4a:7d:b4:1f:c7:e5:
                    1f:2e:37:2e:87:12:34:54:d4:22:23:c0:60:d7:25:
                    b8:5f:f9:ef:bd:8e:a4:b4:5c:20:21:45:0d:c0:c2:
                    4d:fb:f2:32:ad:4e:bd:b0:93:d9:fd:54:96:0e:43:
                    31:14:d2:2a:0f:57:ca:6b:cd:c0:1e:26:03:eb:14:
                    fa:17:43:e7:76:1a:58:3a:7f:6d:0b:b2:36:38:e6:
                    f6:ac:97:fc:92:a8:c1:90:41:6e:a9:f6:eb:75:96:
                    b5:1a:12:c9:b2:fc:e0:4e:1a:0d:9e:98:a6:d3:27:
                    b5:cd:20:88:d9:41:93:af:3c:cb:ae:71:3c:a5:1c:
                    82:6e:ce:3f:55:39:65:b5:12:2c:06:10:3b:de:6f:
                    3b:40:97:f5:0b:cf:09:e5:af:e6:a7:db:6b:1b:73:
                    7d:62:a1:4a:33:e2:9e:6f:ce:30:25:8a:eb:0c:37:
                    72:35:38:62:ff:10:9e:c8:4f:c8:12:ab:9e:ec:42:
                    52:ff:82:e1:52:7e:80:83:63:11:92:54:e4:8c:99:
                    3b:f7:30:04:bf:70:c4:25:90:5f:27:97:e2:15:d5:
                    a6:93:73:b9:c9:b3:53:dc:e5:5c:a4:02:e9:92:45:
                    5c:29:75:49:cd:65:c7:54:e5:2b:93:ee:0c:2b:38:
                    43:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4D:B0:28:96:54:73:EC:E3:98:08:77:DD:B2:4C:4A:70:D2:47:F5
            X509v3 Authority Key Identifier:
                keyid:1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:92:bd:9e:9a:69:8a:fe:ef:e7:4f:56:bc:75:4c:47:4e:b6:
         56:cd:4e:d7:6e:8f:f5:77:be:0d:60:54:80:41:5b:a2:fc:26:
         f7:e6:f1:10:36:c6:54:60:de:5c:f3:d0:20:c8:41:b4:8e:64:
         c6:bf:0f:75:b1:23:f9:5f:b5:e8:71:02:62:b6:86:55:02:2d:
         94:ef:e6:ca:54:a8:6f:ec:89:49:0f:50:d2:d9:94:95:b1:1b:
         ca:30:4b:7f:50:ef:af:ad:f7:2a:ee:18:33:1e:87:ee:8d:56:
         4a:cf:fa:1e:1e:95:87:a1:10:f4:30:a7:a1:00:bc:7f:01:08:
         dc:b0:7a:5a:1b:98:6a:fc:60:a4:5a:14:f4:90:7a:5a:e2:25:
         a0:ce:94:ec:f7:64:93:7b:38:6b:f6:ce:f1:5c:ba:bf:6e:40:
         e1:dc:bc:8c:08:00:be:2a:5f:bc:86:14:1d:30:0a:78:e3:6f:
         fa:33:89:2c:23:ff:5e:98:97:a6:b9:44:1b:b9:80:c4:f1:0f:
         b1:0b:59:e2:f4:16:90:3d:67:02:0c:da:cb:49:97:e6:c1:22:
         25:ab:7e:13:34:93:ae:ae:86:67:21:71:64:3e:3a:73:51:14:
         0d:5f:f6:72:e6:bf:e9:c1:75:68:45:d9:e7:05:3e:04:96:6d:
         3f:d8:e2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----