Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
File:                     EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft (raw, json)
Hash identifier:          DQ9qMWFIOhldZ/NCmaZ65FRXyJWqNwgv3VMqxtxO7SQ=
Subject key identifier:   CF:AB:33:CD:B4:15:4C:1B:72:7F:14:7B:9D:45:4D:CE:4C:3E:2E:E8
Authority key identifier: 10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0
Certificate issuer:       /CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
Certificate serial:       019356F711324507A49547D84D643B159D47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 03:00:52 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:52 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:52 +0000
Files and hashes:         1: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl (hash: wIWA1L0dn1uHY21sy/EmGxQ30/VLmPrQVDUIhLW5hZ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:11:32:45:07:a4:95:47:d8:4d:64:3b:15:9d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
        Validity
            Not Before: Nov 23 03:00:52 2024 GMT
            Not After : Nov 24 03:00:52 2024 GMT
        Subject: CN=cfab33cdb4154c1b727f147b9d454dce4c3e2ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:d9:fa:28:20:0f:f1:0b:ce:59:53:f2:42:
                    ef:c4:40:20:a4:b8:bd:d5:9c:38:e2:63:40:8f:7d:
                    ce:2d:d4:3c:85:30:f5:96:73:db:e0:db:f0:99:f3:
                    fc:c9:b3:4f:7a:eb:e8:98:08:2b:f8:05:df:05:29:
                    e1:ab:b4:49:af:c9:ee:c0:a9:c3:0d:06:dd:6f:e4:
                    06:00:f6:7f:63:8f:cb:68:ad:ef:f0:10:06:f6:a4:
                    aa:f7:d0:d0:7f:81:8b:de:8f:3d:b5:84:b9:1f:61:
                    d7:c0:ef:0c:dc:4b:81:cc:38:dd:24:f0:c8:7e:89:
                    e7:46:8a:61:d8:be:ba:c5:aa:58:e0:e5:1e:4b:b6:
                    9a:d0:cd:a7:d5:e5:c7:66:df:ea:6f:ef:ca:43:06:
                    64:25:5d:61:aa:8e:64:e8:ee:7c:4b:f2:0b:9a:d6:
                    59:c5:05:f7:58:e0:99:16:15:2f:ee:43:d1:26:12:
                    18:cb:1e:27:13:4b:0d:d3:2b:ec:1d:53:c8:82:66:
                    2a:22:ae:9c:ab:92:51:39:f3:a5:3b:ac:2b:8d:7e:
                    2c:1d:fc:60:b5:ac:4d:e5:6c:25:ec:f4:57:36:96:
                    14:6c:07:41:a9:9b:1c:99:42:4e:6b:aa:11:9c:46:
                    70:8a:7b:79:9d:b2:6f:04:67:0f:8b:a4:36:cd:22:
                    ae:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AB:33:CD:B4:15:4C:1B:72:7F:14:7B:9D:45:4D:CE:4C:3E:2E:E8
            X509v3 Authority Key Identifier:
                keyid:10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:76:5f:73:71:30:45:e3:aa:10:17:c1:07:ae:63:9f:ce:e3:
         7b:60:64:66:00:c5:6f:e2:77:0f:ae:1b:0e:6b:24:fe:80:4e:
         34:c8:5f:5c:8d:8b:3c:00:68:9d:6c:c7:58:21:c3:aa:8b:e1:
         bb:94:8c:37:4e:95:15:9c:a5:00:73:43:ab:9f:a9:7d:b0:67:
         a4:d6:f4:97:e8:8d:f8:50:5d:6a:aa:4a:8e:1d:95:33:82:ec:
         8c:2d:39:a4:74:ec:9c:1b:df:6a:cb:f8:80:01:1f:de:39:b4:
         97:17:a3:6d:c2:96:28:c3:89:71:26:86:50:37:40:e4:fe:6d:
         ea:62:7d:91:78:68:7a:02:ed:b6:66:d9:f7:0c:85:82:7d:96:
         a8:15:51:1e:ae:15:ee:9a:52:f9:56:bf:da:1f:be:72:a3:dc:
         3b:89:a9:94:f9:bc:d2:0f:20:ea:25:99:eb:a9:25:c8:da:70:
         18:d8:70:28:23:b3:e1:f2:13:81:f9:fe:b4:a2:51:e9:8a:83:
         00:d3:4f:ef:6a:48:a2:92:27:26:2e:67:4d:a5:87:4e:b1:f7:
         05:4c:5d:c1:ea:c5:3b:9e:ea:82:f3:1d:eb:68:0e:69:82:dc:
         0e:78:e0:79:ed:61:de:22:61:a5:39:68:a2:9c:3f:df:6b:56:
         3a:b5:a8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----