Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/44da42-ef4c-4f8f-927c-9d445dead4e2/1/LQpv_SVU9SiZGIh5a_LKSjLDRAs.mft
File:                     LQpv_SVU9SiZGIh5a_LKSjLDRAs.mft (raw, json)
Hash identifier:          TxhVzE5QoCfu0+OU/SzzIeObxM+LvQxFWaZrr1lb+TU=
Subject key identifier:   92:ED:B1:F7:E2:B3:58:67:F1:E5:7A:5C:A3:E3:C8:5A:2D:A7:4E:D0
Authority key identifier: 2D:0A:6F:FD:25:54:F5:28:99:18:88:79:6B:F2:CA:4A:32:C3:44:0B
Certificate issuer:       /CN=2d0a6ffd2554f528991888796bf2ca4a32c3440b
Certificate serial:       0191F9D97251F9BF0C087444905D464377C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LQpv_SVU9SiZGIh5a_LKSjLDRAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/44da42-ef4c-4f8f-927c-9d445dead4e2/1/LQpv_SVU9SiZGIh5a_LKSjLDRAs.mft
Manifest number:          A5
Signing time:             Mon 16 Sep 2024 08:01:02 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:02 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:02 +0000
Files and hashes:         1: LQpv_SVU9SiZGIh5a_LKSjLDRAs.crl (hash: Ddd5mMX7cGGVqUtwAeBimxPyaxKka6CmJ3i6qeDULII=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/44da42-ef4c-4f8f-927c-9d445dead4e2/1/LQpv_SVU9SiZGIh5a_LKSjLDRAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/44da42-ef4c-4f8f-927c-9d445dead4e2/1/LQpv_SVU9SiZGIh5a_LKSjLDRAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LQpv_SVU9SiZGIh5a_LKSjLDRAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:72:51:f9:bf:0c:08:74:44:90:5d:46:43:77:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d0a6ffd2554f528991888796bf2ca4a32c3440b
        Validity
            Not Before: Sep 16 08:01:02 2024 GMT
            Not After : Sep 17 08:01:02 2024 GMT
        Subject: CN=92edb1f7e2b35867f1e57a5ca3e3c85a2da74ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:7e:af:bd:a8:d7:82:6e:9f:6a:5e:d5:43:
                    52:59:f1:9a:26:ba:97:f7:e5:60:7e:75:89:b1:c6:
                    c2:77:f5:a8:63:a4:80:57:fb:de:11:dc:a4:fa:47:
                    2c:21:92:e1:4b:35:06:77:2a:1e:0d:44:27:74:56:
                    62:3b:1f:fa:3d:ce:5a:00:4b:10:88:8d:cf:e2:16:
                    2c:2d:f3:0d:db:c3:38:9c:80:e8:f3:87:f2:7c:46:
                    c1:d9:b9:79:b6:c6:6b:2a:01:16:4e:d0:42:ec:1b:
                    c4:36:ea:5e:2d:f6:8a:8c:50:ab:40:61:a5:75:af:
                    2c:8f:e9:28:da:6d:cb:28:8d:3a:8c:91:eb:e5:76:
                    bb:3e:d2:12:b9:9b:dc:3f:95:96:82:d5:48:84:16:
                    aa:e9:d9:13:70:94:3c:77:8d:1e:20:c5:fe:21:37:
                    8a:d3:8e:87:44:8d:4a:6c:54:8f:5a:f0:7b:25:80:
                    59:10:7e:cf:ff:32:ed:3d:6c:16:3b:0a:0f:68:0f:
                    c1:0c:da:fd:fc:46:4f:b0:ee:01:de:2b:12:6b:9b:
                    d3:83:11:b7:68:40:89:ee:5d:60:65:ca:cc:23:65:
                    af:77:ad:d0:f4:25:f0:1c:c2:8d:45:c2:37:e6:5f:
                    d8:1c:c2:4e:66:f6:ee:ab:19:6a:5a:95:55:64:b6:
                    2c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:ED:B1:F7:E2:B3:58:67:F1:E5:7A:5C:A3:E3:C8:5A:2D:A7:4E:D0
            X509v3 Authority Key Identifier:
                keyid:2D:0A:6F:FD:25:54:F5:28:99:18:88:79:6B:F2:CA:4A:32:C3:44:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQpv_SVU9SiZGIh5a_LKSjLDRAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/44da42-ef4c-4f8f-927c-9d445dead4e2/1/LQpv_SVU9SiZGIh5a_LKSjLDRAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/44da42-ef4c-4f8f-927c-9d445dead4e2/1/LQpv_SVU9SiZGIh5a_LKSjLDRAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:9d:9b:39:74:8f:b0:a4:04:fd:98:59:01:f0:d9:de:f1:93:
         ea:5b:83:2d:58:18:00:4e:82:4e:4d:09:8f:5b:58:28:bb:86:
         e4:62:6f:ab:42:f5:3e:73:fe:4d:c7:23:c7:f7:be:e2:85:0b:
         98:cb:e7:cb:64:8f:63:82:21:aa:2d:9f:00:f4:d1:30:2a:2a:
         ef:c9:72:7c:51:ea:1a:bb:29:f0:4f:b2:13:a3:7b:4b:6d:da:
         34:c5:a2:2c:c6:07:ea:33:28:1b:6c:c5:b7:8f:e2:1e:92:1b:
         12:d5:29:97:cd:25:4a:a1:cc:06:89:83:5e:97:c1:45:96:d5:
         2a:67:f1:ef:a9:c4:c9:74:05:f7:ef:98:44:ce:0b:9f:6a:19:
         ec:0f:ae:fe:fc:60:36:87:e0:87:31:29:ae:9e:3d:79:f4:2c:
         58:b0:f5:0a:6c:69:be:0b:d2:e1:01:e4:da:43:64:be:32:4a:
         c3:3e:13:a0:5f:10:d7:7b:7b:b4:ef:a0:d3:1c:b5:36:3d:e8:
         58:94:a8:89:b6:d6:df:1e:32:8a:50:39:89:43:50:3d:d1:5f:
         9f:e3:b2:6d:0c:c7:fa:51:c5:4a:47:dc:ff:79:6e:35:8a:8b:
         97:e0:f5:95:1a:e0:dd:e4:8a:a7:cb:e0:82:dc:8d:73:45:bb:
         9f:85:90:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----