Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File:                     lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier:          Cptsbz1Ec+3Bd+Fcoi4yidZEHtSNkD6YhHO3IU+Uri8=
Subject key identifier:   6C:24:F8:B8:C1:A5:1A:01:B4:74:C8:C1:62:38:92:1E:A0:34:14:2C
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer:       /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial:       0191FAED3EBD42B0F2215F5FAAF835226BD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number:          0149
Signing time:             Mon 16 Sep 2024 13:02:17 +0000
Manifest this update:     Mon 16 Sep 2024 13:02:17 +0000
Manifest next update:     Tue 17 Sep 2024 13:02:17 +0000
Files and hashes:         1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: O3YRjTT4DQi6rY30ZUfxSWOywXGo75gwpAUsGgqkngg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ed:3e:bd:42:b0:f2:21:5f:5f:aa:f8:35:22:6b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
        Validity
            Not Before: Sep 16 13:02:17 2024 GMT
            Not After : Sep 17 13:02:17 2024 GMT
        Subject: CN=6c24f8b8c1a51a01b474c8c16238921ea034142c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:b1:f4:55:d5:95:28:7e:8b:ca:9d:90:2d:
                    8f:ff:65:d1:bb:d0:ae:06:3d:b6:f1:7a:ba:d4:58:
                    48:91:cf:05:e4:ed:7e:80:86:40:7d:b7:71:b5:06:
                    b4:f7:64:63:92:05:b2:ba:59:c4:9d:97:13:bd:ba:
                    6d:d2:64:0d:16:57:7d:cf:1f:b5:77:9d:6d:4b:e3:
                    98:81:c7:5b:12:a9:d8:c0:a3:d0:3f:d1:25:01:98:
                    3d:42:b4:b3:92:41:fd:d5:68:ba:f5:72:32:62:8a:
                    39:83:be:79:b9:ce:87:06:fe:4a:c8:1f:dc:ea:1c:
                    d3:ba:59:56:e2:fd:fb:f1:c9:a3:47:e6:b4:83:af:
                    eb:2a:ac:fc:3a:f8:70:0c:9a:46:86:3f:71:72:53:
                    ae:0d:31:fb:a7:85:89:46:3b:b0:1b:03:62:67:fa:
                    93:ec:5e:18:97:d1:33:1f:ab:82:dc:6e:84:54:4a:
                    41:e1:81:69:04:b0:74:f6:38:9a:1a:cf:cb:d9:d4:
                    a4:b8:98:92:a6:94:12:ad:75:18:54:5d:ac:0c:2e:
                    7c:aa:3d:cc:f0:8c:87:72:5c:4e:f2:ac:14:90:db:
                    b8:a7:db:d6:98:27:b1:61:e6:e3:40:2b:9d:7b:21:
                    17:35:d7:f5:d7:8c:d3:5a:75:32:9c:82:49:b8:ac:
                    98:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:24:F8:B8:C1:A5:1A:01:B4:74:C8:C1:62:38:92:1E:A0:34:14:2C
            X509v3 Authority Key Identifier:
                keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:dc:63:a7:f6:96:f7:3a:dc:15:81:42:fe:3f:0f:3c:1d:f2:
         ea:3c:0a:bf:86:af:7d:01:f1:73:d2:54:39:19:31:a8:cb:87:
         a1:1c:d8:dc:9c:bc:72:8f:72:0d:5c:7f:0f:96:6c:da:60:21:
         e9:cf:7d:a5:0b:19:0d:73:38:fe:33:17:98:0e:a9:4a:0d:af:
         3f:d1:2b:c6:b5:b2:83:34:4f:d3:8d:7a:fe:e8:8a:79:0f:a3:
         82:3f:4c:89:11:cc:5b:3a:49:b9:ad:53:3b:08:2f:af:5f:aa:
         22:8e:4f:a8:e2:f3:9d:68:5d:39:8e:18:d9:11:bc:20:fe:11:
         8a:b0:c5:1e:90:99:73:a0:6c:50:e1:1e:a9:45:01:a1:07:2e:
         3c:07:c8:5a:5d:98:e8:23:c9:52:d1:e8:c3:fa:a0:4a:b6:f9:
         f2:77:aa:51:44:cf:f7:34:a6:1e:0e:b7:7b:84:9a:31:4a:2a:
         b9:71:4f:06:00:2d:82:43:4e:45:c4:d1:27:38:33:54:03:79:
         e0:b4:32:62:2f:11:0a:f7:58:e2:70:b6:8e:9d:27:da:41:91:
         8c:be:36:71:41:ed:ad:20:3e:a4:ca:89:0d:79:e8:14:c3:9b:
         b2:db:a5:cf:1f:b6:40:c9:b3:9e:71:15:0b:97:01:a9:1e:34:
         5d:68:7b:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH67T69QrDyIV9fqvg1ImvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTBiMWM0ZWEyODQyZGRmOTkyOWVhOGE2NTQ1YjgxN2Ey
ODc2ODAwHhcNMjQwOTE2MTMwMjE3WhcNMjQwOTE3MTMwMjE3WjAzMTEwLwYDVQQD
Eyg2YzI0ZjhiOGMxYTUxYTAxYjQ3NGM4YzE2MjM4OTIxZWEwMzQxNDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9ax9FXVlSh+i8qdkC2P/2XRu9Cu
Bj228Xq61FhIkc8F5O1+gIZAfbdxtQa092RjkgWyulnEnZcTvbpt0mQNFld9zx+1
d51tS+OYgcdbEqnYwKPQP9ElAZg9QrSzkkH91Wi69XIyYoo5g755uc6HBv5KyB/c
6hzTullW4v378cmjR+a0g6/rKqz8OvhwDJpGhj9xclOuDTH7p4WJRjuwGwNiZ/qT
7F4Yl9EzH6uC3G6EVEpB4YFpBLB09jiaGs/L2dSkuJiSppQSrXUYVF2sDC58qj3M
8IyHclxO8qwUkNu4p9vWmCexYebjQCudeyEXNdf114zTWnUynIJJuKyYEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwk+LjBpRoBtHTIwWI4kh6gNBQsMB8GA1UdIwQY
MBaAFJSQscTqKELd+ZKeqKZUW4F6KHaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lZGRkYWEtYzMxYS00MDI2LThmODUt
MDU2NmY1MTI1MmE5LzEvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lZGRkYWEtYzMxYS00MDI2LThmODUtMDU2NmY1MTI1MmE5
LzEvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdxjp/aW
9zrcFYFC/j8PPB3y6jwKv4avfQHxc9JUORkxqMuHoRzY3Jy8co9yDVx/D5Zs2mAh
6c99pQsZDXM4/jMXmA6pSg2vP9ErxrWygzRP0416/uiKeQ+jgj9MiRHMWzpJua1T
Owgvr1+qIo5PqOLznWhdOY4Y2RG8IP4RirDFHpCZc6BsUOEeqUUBoQcuPAfIWl2Y
6CPJUtHow/qgSrb58neqUUTP9zSmHg63e4SaMUoquXFPBgAtgkNORcTRJzgzVAN5
4LQyYi8RCvdY4nC2jp0n2kGRjL42cUHtrSA+pMqJDXnoFMObstulzx+2QMmznnEV
C5cBqR40XWh7EQ==
-----END CERTIFICATE-----