Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.mft
File:                     5pgECu2WLzBoge6mVTBA-5ptNMk.mft (raw, json)
Hash identifier:          v24EQdHPq576ZVd1+DuzwLR/eVQV4GcuOepI5y4KP5o=
Subject key identifier:   FD:0F:9B:38:E9:7A:2A:92:6F:7B:00:74:3C:6E:F4:6D:0A:32:66:5C
Authority key identifier: E6:98:04:0A:ED:96:2F:30:68:81:EE:A6:55:30:40:FB:9A:6D:34:C9
Certificate issuer:       /CN=e698040aed962f306881eea6553040fb9a6d34c9
Certificate serial:       019356F6757DCB8A15D713D89D06400D065B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5pgECu2WLzBoge6mVTBA-5ptNMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.mft
Manifest number:          0215
Signing time:             Sat 23 Nov 2024 03:00:12 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:12 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:12 +0000
Files and hashes:         1: 5pgECu2WLzBoge6mVTBA-5ptNMk.crl (hash: ktIme6tLRCnBphpL4keG/V+zTlC+cDBgIcpO2UCjwh8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5pgECu2WLzBoge6mVTBA-5ptNMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:75:7d:cb:8a:15:d7:13:d8:9d:06:40:0d:06:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e698040aed962f306881eea6553040fb9a6d34c9
        Validity
            Not Before: Nov 23 03:00:12 2024 GMT
            Not After : Nov 24 03:00:12 2024 GMT
        Subject: CN=fd0f9b38e97a2a926f7b00743c6ef46d0a32665c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b0:29:2a:bf:74:57:ca:44:5e:b4:e0:e2:55:
                    e3:d5:87:d3:0d:e1:20:9c:1f:10:1f:79:4d:77:7f:
                    f9:e3:8f:58:6a:cd:43:b2:2a:71:90:27:0d:1f:59:
                    de:5d:92:c2:c5:41:79:90:e3:d3:1f:bf:c5:35:52:
                    34:48:be:fd:90:72:a9:57:d7:a7:4a:cf:b1:35:4c:
                    a8:11:ec:4c:74:15:5a:5b:bc:f2:fa:02:f3:6e:b1:
                    4f:bf:b7:8c:e9:71:91:57:c9:2a:54:72:ac:56:5b:
                    42:10:e7:a7:1a:71:72:3a:77:4d:43:1b:d6:4e:6d:
                    43:41:2c:83:bf:6c:b4:3b:0d:46:7a:77:38:05:60:
                    dc:77:b1:a5:b6:f5:13:8a:71:38:6d:ca:bb:98:f5:
                    b5:b3:d0:a1:3c:74:57:c2:87:9a:46:65:89:ca:42:
                    2d:bd:7a:52:f3:fc:da:17:15:70:84:ca:da:fe:0c:
                    bf:ac:e4:a4:17:ba:af:59:bd:e0:41:4b:0d:c2:b2:
                    53:87:a7:69:20:6d:7b:2f:46:d3:6b:eb:2e:84:d8:
                    31:4b:1e:8c:a0:dd:66:90:40:a2:09:79:02:6e:af:
                    75:c3:28:9c:11:56:cd:33:ca:ed:aa:7a:be:fa:6f:
                    14:0e:75:73:25:a2:1c:78:ff:60:32:4e:c7:c1:db:
                    43:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0F:9B:38:E9:7A:2A:92:6F:7B:00:74:3C:6E:F4:6D:0A:32:66:5C
            X509v3 Authority Key Identifier:
                keyid:E6:98:04:0A:ED:96:2F:30:68:81:EE:A6:55:30:40:FB:9A:6D:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pgECu2WLzBoge6mVTBA-5ptNMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:76:28:32:3e:00:bf:d4:0b:65:2f:4e:96:87:2a:97:9b:99:
         5f:33:10:5a:81:67:7b:b7:ba:57:e0:7d:b2:49:c8:1c:c0:1c:
         a6:f4:1e:99:8c:e2:2b:5d:e9:73:2b:b2:3a:32:cf:2d:26:f4:
         07:a1:7f:47:81:83:cb:e0:5d:06:61:07:20:12:b0:ce:d7:7b:
         7c:ae:54:05:bb:d0:0b:e7:57:6b:69:41:1f:75:77:37:88:15:
         f4:61:b8:f1:ab:09:61:eb:3a:12:19:b1:3f:c1:e9:a2:aa:4f:
         3f:ce:f2:b1:76:23:47:15:b2:dd:6e:27:aa:7e:67:46:ba:58:
         45:36:be:a1:68:bd:08:94:5f:f9:85:71:1d:7c:a4:31:89:a6:
         72:44:ad:94:05:64:66:38:56:52:20:30:e9:1d:00:c0:b4:70:
         d9:68:5e:54:16:14:51:a8:cb:45:39:4f:32:3b:10:0e:dd:06:
         40:83:60:51:4a:52:3e:78:49:8e:e2:60:36:7b:75:49:0a:4a:
         74:3b:70:7b:f7:f2:8d:8a:dc:1f:c7:f0:c9:87:f9:63:a3:10:
         d6:d8:39:90:dc:a4:a1:03:6e:7f:18:03:11:e5:7d:6f:8f:26:
         e6:dd:42:08:e9:dc:ad:5c:28:f8:3e:96:81:73:26:28:70:47:
         78:4a:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----