Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
File:                     c7lkn2pvtixtzQzowN8WVcEjZDQ.mft (raw, json)
Hash identifier:          HZDNvD3mO38oUqi2ftV/zAW2UmY+3PYZ0t8gwzd6xH8=
Subject key identifier:   5D:E6:82:E1:42:50:9B:C0:24:2C:FE:B8:BC:95:05:9D:86:BD:AB:D8
Authority key identifier: 73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
Certificate issuer:       /CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Certificate serial:       019369D9CAC6188BD9867549669B743EF0EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
Manifest number:          042C
Signing time:             Tue 26 Nov 2024 19:01:41 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:41 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:41 +0000
Files and hashes:         1: c7lkn2pvtixtzQzowN8WVcEjZDQ.crl (hash: pKGw6X0NoyPkVl9wfbObAV/VkjkCKyHIqAWnz/hFBUI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:ca:c6:18:8b:d9:86:75:49:66:9b:74:3e:f0:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
        Validity
            Not Before: Nov 26 19:01:41 2024 GMT
            Not After : Nov 27 19:01:41 2024 GMT
        Subject: CN=5de682e142509bc0242cfeb8bc95059d86bdabd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:68:84:a8:c3:fb:a4:99:d7:dc:f0:a1:89:
                    68:42:a1:b0:c9:0b:ab:ed:27:95:0f:05:a6:e8:05:
                    bd:57:59:b8:b9:e8:1a:93:9e:88:49:21:08:52:8c:
                    27:46:e1:a0:b3:4f:ac:6e:9b:a7:f4:01:b1:d3:29:
                    30:01:e6:19:01:2f:58:35:c0:d0:ef:63:f7:91:eb:
                    dc:ef:ee:aa:38:43:bb:42:a7:43:3e:65:b1:6d:61:
                    70:28:ab:6e:bc:44:a4:7f:41:fb:48:b7:0d:db:9e:
                    81:d1:5f:72:7e:df:1d:27:f2:4f:cd:0e:a0:64:75:
                    fe:35:01:82:cb:62:fa:18:a1:06:0a:56:43:45:8d:
                    40:cd:81:c3:15:8b:88:2e:25:f5:e7:c7:2a:3a:f5:
                    69:ed:47:8a:1e:68:75:8a:fb:2a:26:fd:b6:7c:f7:
                    d7:8d:85:86:f2:b6:84:26:eb:10:d4:20:04:13:fd:
                    09:4d:84:3a:79:6d:1b:36:5c:e4:ad:8b:87:97:5e:
                    09:8b:26:bd:d7:48:5e:4e:99:b9:9b:ac:73:00:59:
                    35:c5:b3:ab:ae:f8:05:4c:1a:a1:79:42:27:7b:01:
                    33:67:84:1f:a6:69:bf:22:e3:0a:9a:4c:9e:3b:1e:
                    16:40:dd:28:69:22:5e:b4:1f:59:1d:ca:7e:03:19:
                    b2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E6:82:E1:42:50:9B:C0:24:2C:FE:B8:BC:95:05:9D:86:BD:AB:D8
            X509v3 Authority Key Identifier:
                keyid:73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:cd:61:22:41:b7:2b:5f:41:c9:ec:c7:52:f5:f5:52:cc:b1:
         c0:bd:e3:a9:86:6e:49:e5:bc:39:cc:f3:cf:6a:aa:23:51:75:
         22:f2:a2:b7:7a:df:bc:19:b1:d8:a8:5b:45:81:ff:f1:25:fd:
         56:61:c5:ad:3f:3d:d1:8a:26:a7:9e:12:4b:05:5e:24:24:ac:
         69:22:77:b7:b7:82:29:9a:90:0b:17:7f:26:0c:cd:32:7c:92:
         60:83:88:6c:c8:e0:4d:75:a2:f7:7d:ad:d1:7e:01:b0:b2:ed:
         8b:51:54:dd:74:4b:9a:e9:db:a4:9e:9f:6a:af:3f:10:ce:4f:
         8a:db:fc:50:fe:e3:70:b6:e4:3c:06:ae:c5:bf:01:28:fa:76:
         86:78:a0:30:ec:1a:22:fd:b5:fb:13:2e:ee:e3:7b:d5:4c:48:
         94:4e:a7:3a:dc:ac:0d:54:78:43:4c:c1:75:dd:a8:d0:ca:7e:
         2e:cc:cf:3a:ec:7b:19:1b:a7:c9:59:dc:e9:6c:5e:b7:cb:7e:
         15:e8:e6:bb:c4:f1:60:cd:3f:ee:ca:c0:12:1c:56:cd:de:63:
         12:22:1a:5a:ad:ae:fe:f6:19:0d:00:e9:b8:80:b1:c4:96:1e:
         f4:d7:aa:2e:21:f6:28:78:e2:64:cb:3f:35:06:92:dd:a6:37:
         04:c3:3e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----