Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
File:                     ulnZ9a887kQgFLc1lhxzuWkmDhk.mft (raw, json)
Hash identifier:          Kl6CmOCh6FfB+iZTqo8zUWogE2Th1YbS80voT1/P7NQ=
Subject key identifier:   0E:A9:B3:EF:40:B2:B7:B9:00:0C:66:E7:8E:D6:5C:01:DA:EF:3F:3E
Authority key identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
Certificate issuer:       /CN=ba59d9f5af3cee442014b735961c73b969260e19
Certificate serial:       0193549AB80159C25443F0444BCE28939D3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
Manifest number:          136B
Signing time:             Fri 22 Nov 2024 16:00:45 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:45 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:45 +0000
Files and hashes:         1: ulnZ9a887kQgFLc1lhxzuWkmDhk.crl (hash: MIkvalX82GkOw2rUTtaQr5hepEj7kIV5kR7QaQzKclE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:b8:01:59:c2:54:43:f0:44:4b:ce:28:93:9d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba59d9f5af3cee442014b735961c73b969260e19
        Validity
            Not Before: Nov 22 16:00:45 2024 GMT
            Not After : Nov 23 16:00:45 2024 GMT
        Subject: CN=0ea9b3ef40b2b7b9000c66e78ed65c01daef3f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e0:0d:39:95:2b:45:51:9d:bc:4f:49:8d:dd:
                    8a:71:4d:8d:c6:6b:49:96:10:98:32:71:a4:4c:f0:
                    40:78:eb:3a:42:47:51:76:7e:59:d4:3f:65:0b:f1:
                    37:cb:cd:08:76:de:5b:9c:26:a5:a9:29:e1:ef:a7:
                    59:99:51:d1:e8:89:4c:08:4b:d7:84:b1:75:b5:e2:
                    af:4b:fc:d0:89:7b:5a:de:d8:0f:c9:29:56:22:24:
                    08:f8:94:5e:86:e1:7c:17:4b:2b:b8:46:8b:4f:f0:
                    d2:32:ce:c5:a7:33:09:8e:5d:1c:7a:f2:95:80:fd:
                    72:97:2c:fa:d6:1a:58:22:25:d0:a0:19:9c:f9:01:
                    fd:e6:1b:e4:d0:bd:dc:99:8f:d7:41:14:31:79:09:
                    c6:84:a6:dc:a4:b6:43:6a:39:46:9c:b9:f7:2e:3e:
                    e0:aa:33:16:04:6c:a5:e2:c0:a0:7a:cb:31:c3:2b:
                    42:6c:c2:51:f5:c5:05:23:14:5e:41:dc:5e:ac:40:
                    bb:35:0a:98:bb:76:44:78:0c:34:2a:24:45:c4:fb:
                    63:e8:05:5f:4c:b2:e1:69:1c:e3:e2:4d:eb:39:8c:
                    f7:36:02:16:32:1d:df:1e:0f:93:04:de:b0:bb:72:
                    18:05:7a:c5:a0:59:c7:6e:40:e1:3c:d9:c9:07:13:
                    b5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A9:B3:EF:40:B2:B7:B9:00:0C:66:E7:8E:D6:5C:01:DA:EF:3F:3E
            X509v3 Authority Key Identifier:
                keyid:BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e5:1a:df:cb:b9:1a:24:bd:4e:2b:c7:36:a2:07:90:0c:24:
         5b:78:18:77:fb:a5:da:52:5e:92:0b:00:b1:3e:c6:32:7d:c4:
         59:a2:34:9e:09:2d:b8:2e:9c:88:57:b0:a9:71:ad:ea:85:c2:
         0d:7e:3a:a9:5a:42:92:dc:97:6d:9f:c9:dc:e3:e8:45:e5:a8:
         03:20:4c:1a:fb:76:62:a5:0f:7f:85:fe:73:45:0c:09:fd:b3:
         ad:75:62:b4:47:18:6e:6f:31:05:63:5d:dd:f6:8a:37:bc:5b:
         bc:32:a9:3c:c2:c9:49:a1:8c:1d:14:7e:d0:9e:69:cf:53:54:
         ff:b9:aa:66:84:19:87:05:ba:2d:99:0c:c6:c7:80:ba:2d:84:
         c9:25:37:cc:4e:f7:99:fc:df:84:14:bb:f9:25:8c:87:ad:2a:
         67:ae:06:34:80:77:65:25:62:d6:70:74:1d:88:9e:e9:dc:cc:
         05:53:22:c6:eb:07:00:25:4d:de:c6:f3:ce:59:a6:ef:77:c3:
         65:10:c4:82:09:7e:6b:c0:37:ef:fc:bc:dd:bd:15:cb:f8:51:
         da:31:2d:b6:ea:d2:5c:af:b0:dd:c4:62:7d:d0:24:89:61:28:
         11:82:e5:19:44:b2:2b:dc:46:12:43:b9:7d:91:8d:af:bd:50:
         9b:49:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----