Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/38f308-20ea-4e51-9204-70bc1c7da8d7/1/xo7k-WjmDg08qIf3Bz3JfqbfRE4.mft
File:                     xo7k-WjmDg08qIf3Bz3JfqbfRE4.mft (raw, json)
Hash identifier:          jv446YOZADI9POgsqbgduAWOL3gwHbbX5E4dT+rKSWs=
Subject key identifier:   9A:C3:3C:6D:77:A2:9F:EA:B6:56:D0:38:B5:81:EF:C8:D2:54:E8:5F
Authority key identifier: C6:8E:E4:F9:68:E6:0E:0D:3C:A8:87:F7:07:3D:C9:7E:A6:DF:44:4E
Certificate issuer:       /CN=c68ee4f968e60e0d3ca887f7073dc97ea6df444e
Certificate serial:       01936A4648DF122218AB2F6A1B647E044C36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xo7k-WjmDg08qIf3Bz3JfqbfRE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/38f308-20ea-4e51-9204-70bc1c7da8d7/1/xo7k-WjmDg08qIf3Bz3JfqbfRE4.mft
Manifest number:          0275
Signing time:             Tue 26 Nov 2024 21:00:11 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:11 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:11 +0000
Files and hashes:         1: xo7k-WjmDg08qIf3Bz3JfqbfRE4.crl (hash: nJbHGEpnh7ifB9Vwg0lpkEla6xOmjRIyy1rLkYgIQeo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/38f308-20ea-4e51-9204-70bc1c7da8d7/1/xo7k-WjmDg08qIf3Bz3JfqbfRE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/38f308-20ea-4e51-9204-70bc1c7da8d7/1/xo7k-WjmDg08qIf3Bz3JfqbfRE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xo7k-WjmDg08qIf3Bz3JfqbfRE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:48:df:12:22:18:ab:2f:6a:1b:64:7e:04:4c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68ee4f968e60e0d3ca887f7073dc97ea6df444e
        Validity
            Not Before: Nov 26 21:00:11 2024 GMT
            Not After : Nov 27 21:00:11 2024 GMT
        Subject: CN=9ac33c6d77a29feab656d038b581efc8d254e85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:69:ae:12:c8:21:ab:ce:05:0c:67:44:b4:
                    0d:3b:50:6d:a0:55:bb:68:1f:38:a4:34:d0:67:43:
                    48:e8:43:56:8b:53:0e:b8:ad:da:f6:23:48:38:96:
                    fc:3a:34:de:92:59:28:88:6c:ac:ad:a1:d2:56:22:
                    13:cc:69:b3:b7:05:94:72:1b:7d:28:c9:8e:85:87:
                    bd:33:7b:94:c2:54:65:3d:50:cc:f9:4c:2a:ae:b5:
                    4b:5f:ed:01:97:ee:40:1d:28:d6:ce:fa:d9:03:53:
                    c3:ad:94:0f:d2:e5:e6:3d:4e:cb:d1:85:48:0e:b8:
                    ba:d3:f7:14:62:8e:91:19:a7:0c:4a:9f:96:30:52:
                    f1:42:88:16:58:0d:d8:2c:98:9e:40:00:e5:96:25:
                    c9:a0:a7:fa:71:46:33:21:7a:79:88:61:45:a7:f6:
                    64:a9:aa:9a:c1:0f:d5:49:bb:de:40:74:f1:a6:5d:
                    56:f2:d9:34:72:8c:67:2c:d1:32:e3:bf:27:6a:b3:
                    a9:12:8e:b1:2d:b9:ab:9c:29:74:bc:8f:6f:0e:c1:
                    34:3a:ec:e6:08:82:bb:6e:44:82:40:b8:e4:dd:44:
                    a9:4b:eb:a5:b1:79:6e:95:51:1a:6b:18:f8:2b:29:
                    9c:fc:28:b0:1d:8d:f6:64:33:92:a3:21:e1:87:70:
                    24:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C3:3C:6D:77:A2:9F:EA:B6:56:D0:38:B5:81:EF:C8:D2:54:E8:5F
            X509v3 Authority Key Identifier:
                keyid:C6:8E:E4:F9:68:E6:0E:0D:3C:A8:87:F7:07:3D:C9:7E:A6:DF:44:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7k-WjmDg08qIf3Bz3JfqbfRE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/38f308-20ea-4e51-9204-70bc1c7da8d7/1/xo7k-WjmDg08qIf3Bz3JfqbfRE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/38f308-20ea-4e51-9204-70bc1c7da8d7/1/xo7k-WjmDg08qIf3Bz3JfqbfRE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a3:9b:a7:4e:d8:39:cf:ac:b0:fe:ca:41:9c:af:84:9b:20:
         fe:9b:fc:ed:d4:2f:e7:f2:ce:eb:b7:f2:5e:94:6a:a6:b0:14:
         20:99:4c:c9:67:54:7d:2a:82:15:a9:31:b1:19:47:0f:58:58:
         de:6b:bf:b5:54:59:87:de:89:18:f7:b3:38:87:21:3d:93:67:
         32:84:9f:d9:d1:60:e6:44:2a:1b:91:78:c5:69:4c:c1:08:ff:
         74:f7:7a:ca:cf:6a:42:94:50:9a:f2:1d:39:f3:0c:b4:c6:da:
         4b:91:73:10:23:52:1a:ff:be:78:98:27:1a:b9:48:a5:54:3b:
         3d:13:a5:22:20:98:b1:f0:65:6f:07:9a:7a:f6:28:42:eb:ce:
         f8:b9:02:a4:7c:17:78:3b:6a:36:a0:1f:39:19:9f:04:38:f5:
         85:23:82:14:45:64:36:dc:3d:04:14:a0:5a:43:6d:d7:8b:e3:
         62:34:0e:e2:f9:e0:8a:d7:3c:0b:48:43:7e:ad:c7:ea:fe:fd:
         28:b1:50:da:45:65:14:a1:24:ea:cc:33:ef:05:28:8a:0d:a4:
         ab:ab:0e:95:d2:53:b5:98:67:48:45:f5:d6:54:dc:a2:88:b0:
         fb:13:fc:80:10:90:2e:30:e5:79:cf:d8:1f:5c:fd:33:15:bb:
         45:af:2b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----