Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
File:                     n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft (raw, json)
Hash identifier:          wOgASi4MymqizaTo2l9atGHKC+2GLEGsdPiAnFV3NJc=
Subject key identifier:   42:4C:15:1E:FE:03:C5:6A:3E:03:9E:67:98:F3:5F:AC:9C:01:E7:10
Authority key identifier: 9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
Certificate issuer:       /CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Certificate serial:       0193696AD34A7297D041C86B13589F25ADD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
Manifest number:          011F
Signing time:             Tue 26 Nov 2024 17:00:28 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:28 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:28 +0000
Files and hashes:         1: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl (hash: e2+ShyDWeusWbVd5ipfSvhkjuElwSqccmOUJo2VuYTQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:d3:4a:72:97:d0:41:c8:6b:13:58:9f:25:ad:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
        Validity
            Not Before: Nov 26 17:00:28 2024 GMT
            Not After : Nov 27 17:00:28 2024 GMT
        Subject: CN=424c151efe03c56a3e039e6798f35fac9c01e710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3e:66:7a:b8:72:43:1d:10:4d:30:c3:61:b0:
                    99:e7:40:2d:71:45:d9:a8:01:a9:5e:a6:87:30:77:
                    06:9e:c9:4f:d8:4f:c8:a6:94:da:15:a3:fb:5b:51:
                    d3:3d:af:19:e7:52:a7:ce:c1:59:0a:c5:9e:86:c0:
                    83:20:b0:28:38:e7:e2:f9:9a:e1:c0:40:ce:a4:28:
                    9f:09:6c:c5:05:b6:c0:af:13:b3:58:9f:54:89:d4:
                    00:8e:b7:c5:b4:ed:c5:a7:50:91:d0:04:9e:b8:ca:
                    e0:6d:a0:62:b8:1d:25:5e:c5:3d:62:e2:c7:87:c9:
                    78:b2:16:c9:f5:6d:4f:3a:5f:96:52:e1:5e:04:b1:
                    7e:97:85:9c:cf:9d:78:b1:54:da:3b:39:5c:cb:a2:
                    dd:f0:60:12:20:4e:8c:0d:b1:b7:a9:d9:0b:d5:c2:
                    4f:cd:1f:70:27:b9:db:37:03:55:44:c8:3c:01:50:
                    33:f8:90:4f:50:02:b1:e6:11:c5:6c:69:59:c4:d3:
                    59:0d:98:cb:0b:78:50:a1:09:de:b9:16:1b:0f:f6:
                    33:7d:f8:63:ee:85:5c:d2:a4:bd:71:b8:0a:bb:d6:
                    f0:28:f0:f2:b7:eb:80:d0:65:76:0b:7e:af:b7:1e:
                    38:8a:4b:01:0a:26:8c:a2:a5:ad:e9:72:ee:8d:a5:
                    89:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4C:15:1E:FE:03:C5:6A:3E:03:9E:67:98:F3:5F:AC:9C:01:E7:10
            X509v3 Authority Key Identifier:
                keyid:9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:93:ca:61:d8:d7:15:28:c0:1a:b4:e7:be:f2:6b:df:7b:59:
         24:56:c7:f3:12:08:0a:2a:e5:d3:fe:43:84:df:f7:0d:4d:43:
         92:67:70:6d:ee:5b:f1:46:1e:c8:cd:ad:34:c9:55:26:29:f0:
         9e:a4:d7:2d:22:cb:52:bc:5c:9c:8c:7f:01:17:79:b5:23:fc:
         80:22:24:9e:c9:50:ce:f5:76:5e:c7:58:ad:06:a9:4b:9d:aa:
         d8:18:8e:55:e8:b1:df:7a:3a:74:23:a4:fe:e5:28:e2:62:4a:
         41:19:85:2a:20:26:23:f7:4a:03:ee:4f:f6:02:69:27:ae:4d:
         c8:ac:6f:77:a3:5b:6c:ba:ec:16:53:ab:d9:55:23:c1:37:b1:
         ef:c5:16:e7:0c:13:aa:01:bc:d2:89:37:d6:e5:e5:e7:59:de:
         61:f4:75:c0:ee:42:69:ab:69:2e:17:de:86:41:dc:08:30:cd:
         46:90:9c:eb:55:0c:0c:ab:18:70:78:45:c1:93:11:2e:58:54:
         c4:93:68:1a:bc:20:b8:8b:e3:96:8e:61:d0:68:a3:0a:4b:83:
         26:5b:1b:0d:69:ed:39:20:01:02:5d:2f:93:c0:4d:40:aa:3c:
         54:22:17:71:0a:4c:e4:8e:ab:a2:85:5c:12:4c:5e:09:a7:4f:
         1c:b4:21:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----