Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
File:                     k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json)
Hash identifier:          KoU72B7AlpTpKwRE89hhjJUqA2vgs9/Ps7Gu2NFiZew=
Subject key identifier:   8B:60:79:B9:FE:C3:58:67:49:F8:2B:8F:2F:DD:1F:9A:E4:BC:E5:B8
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Certificate issuer:       /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial:       01936A468F40A1F60048223B261B17DBA6B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 21:00:29 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:29 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:29 +0000
Files and hashes:         1: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: 2EhEw3YPZ0cBC5X0K5IwvL/X2IYq7XUNjcYp+sBexts=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:8f:40:a1:f6:00:48:22:3b:26:1b:17:db:a6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
        Validity
            Not Before: Nov 26 21:00:29 2024 GMT
            Not After : Nov 27 21:00:29 2024 GMT
        Subject: CN=8b6079b9fec3586749f82b8f2fdd1f9ae4bce5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:bb:49:43:75:bc:73:44:72:e1:57:5a:ae:
                    5d:51:88:3d:b7:14:7d:b8:b6:fd:5b:37:6b:68:c5:
                    53:e5:fe:b3:27:05:78:29:42:fc:7f:14:fb:65:10:
                    e6:48:a4:f7:f8:25:ad:64:a0:2b:54:cd:bf:d5:ae:
                    39:7c:dd:1f:b3:2c:f4:51:d4:0b:fd:ef:7c:1c:fc:
                    2d:30:93:c9:1d:6f:60:a0:55:76:f8:6d:59:45:1a:
                    5c:bb:aa:ee:c0:fb:8f:34:d5:36:66:8d:78:51:42:
                    9d:d4:1a:35:3d:b0:a2:35:f2:01:9b:40:b6:b2:15:
                    b9:f2:b8:bd:03:78:13:3d:cb:cd:69:be:b9:e3:5f:
                    e6:d2:5d:05:82:ae:99:9a:08:01:10:a4:3b:38:ae:
                    7e:6f:d2:4e:5c:4e:eb:66:34:7d:68:82:3e:02:1c:
                    c2:40:e0:03:4d:0b:00:40:a1:92:54:3d:96:85:71:
                    93:00:94:bc:42:8f:52:b8:50:2d:c0:d3:a4:ab:8c:
                    7e:e2:bb:c6:88:0e:e2:91:ee:65:82:bd:28:eb:23:
                    55:6c:26:c7:e4:ae:77:5a:b5:c8:02:18:11:8b:44:
                    b9:0a:3d:ee:b8:45:ab:d7:99:1b:12:71:ab:3b:f1:
                    d2:39:9f:25:cf:71:8d:a5:d0:46:a4:f1:b9:8c:ed:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:60:79:B9:FE:C3:58:67:49:F8:2B:8F:2F:DD:1F:9A:E4:BC:E5:B8
            X509v3 Authority Key Identifier:
                keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d0:ce:07:8e:3c:df:9d:5c:5a:65:9c:23:b8:bc:e5:16:26:
         7a:9d:bc:e2:0c:52:77:43:16:b9:23:65:ef:3b:70:9b:75:3b:
         5d:21:f5:b9:0c:d1:1a:9a:03:5a:13:dc:8e:83:6a:fb:07:bd:
         ec:20:36:20:dc:b9:0d:d8:d7:6e:ed:61:fd:98:d2:8c:e3:1f:
         c3:ed:6b:0a:25:39:3f:ef:30:89:9a:66:d9:c5:d4:cc:44:e3:
         40:7f:d7:8a:cb:40:b2:a9:03:d4:ff:4c:90:d3:d1:73:b2:e1:
         89:dd:b0:d2:74:f1:4b:ac:69:77:c4:3c:34:d0:b6:93:89:4e:
         cb:d8:35:74:fa:27:ee:28:98:d4:18:1c:ee:a5:3b:c7:59:f9:
         67:93:67:b8:0e:54:42:69:81:6c:24:b7:80:4a:fc:64:8a:41:
         58:fc:9f:69:14:2f:e6:9d:b7:2b:b0:92:5b:1d:b2:55:92:e2:
         5d:f2:56:a6:19:ab:50:d0:fa:c8:c1:b7:e3:c7:97:39:e7:aa:
         03:ad:b0:d5:2d:f3:ba:d9:59:38:0d:65:0f:a5:ec:0c:e3:fc:
         8b:b7:98:31:fc:10:7a:76:6b:6c:ac:fb:0c:13:8b:8c:05:34:
         d1:ac:55:0a:fa:28:03:46:de:c5:f3:7d:8f:72:14:7d:e8:c0:
         36:70:a5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----