Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File:                     7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier:          JBs+6ZjGC7fZmKJFK2lke1pqRWi3sxJbcCy2hdoASnc=
Subject key identifier:   AD:47:41:E5:A0:64:FB:A2:75:8C:7F:97:74:ED:6F:E3:C8:D5:93:8C
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer:       /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial:       019356F6915546AE09B23F8C288C0F20334B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 03:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:19 +0000
Files and hashes:         1: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: mUqpLUbvrLXDH41q0wOKnOtY8BOArLFCTsLbBvzDuG8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:91:55:46:ae:09:b2:3f:8c:28:8c:0f:20:33:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
        Validity
            Not Before: Nov 23 03:00:19 2024 GMT
            Not After : Nov 24 03:00:19 2024 GMT
        Subject: CN=ad4741e5a064fba2758c7f9774ed6fe3c8d5938c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:2c:ac:2c:06:62:34:cb:be:92:e8:50:06:
                    54:51:a3:75:e2:45:a2:d6:51:c6:a7:1a:12:9e:45:
                    68:81:39:0f:00:85:3e:47:dd:f7:47:12:23:5b:69:
                    12:ae:64:1f:54:2e:07:43:bb:dc:d3:e5:a7:3d:a6:
                    4a:eb:29:a1:b4:35:7d:07:e9:13:02:1a:99:52:a8:
                    40:2e:37:e6:cc:05:48:7c:c5:f8:56:58:4c:4e:44:
                    85:2b:4f:ee:19:a0:af:98:15:f7:d0:d6:24:e2:30:
                    09:f0:48:a6:53:da:1c:d4:a3:12:8e:63:42:e1:c1:
                    f2:04:c5:cb:40:13:a1:79:10:2c:1e:84:98:db:f1:
                    3e:f3:22:d6:4f:d4:e0:28:b5:6a:c8:13:1a:d1:fc:
                    01:25:26:6c:67:08:6b:d8:2d:50:5c:1f:50:a1:3a:
                    a5:6d:aa:3c:f2:d4:5c:98:53:7a:e5:20:4e:af:b2:
                    4a:b0:fa:23:57:a1:8c:1e:4b:13:f5:fc:9c:47:53:
                    82:6a:83:57:a6:d8:73:47:a6:75:fb:3a:18:90:d1:
                    29:8e:bb:fe:7f:1d:fd:40:f8:24:a2:a5:89:32:8a:
                    15:be:3d:3b:67:34:e9:c2:de:af:77:0c:c2:40:3a:
                    b9:70:85:bb:23:c0:22:0c:63:a4:af:0e:b7:0b:db:
                    e2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:47:41:E5:A0:64:FB:A2:75:8C:7F:97:74:ED:6F:E3:C8:D5:93:8C
            X509v3 Authority Key Identifier:
                keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e5:b0:f6:20:59:f6:a2:74:38:cd:fb:58:72:7d:91:82:e1:
         6b:9d:b7:e0:80:23:ac:c6:a7:53:3f:6e:bc:7b:ae:00:be:8c:
         27:ee:76:33:77:65:fb:54:75:73:0f:27:c7:94:ba:03:8d:b6:
         99:14:73:fa:75:49:00:b1:29:c6:ba:9d:07:59:90:c6:10:98:
         81:98:2f:ad:e9:59:01:9b:b0:bd:5a:14:90:f1:c1:6d:48:a8:
         59:d7:9b:51:8e:a5:7b:57:7d:75:bd:9f:b2:3f:b1:ab:fe:2f:
         6b:a5:ec:8d:41:19:4e:8c:b3:11:91:b0:0f:68:2b:30:3c:e4:
         b8:91:4d:70:0c:07:8d:de:7d:4b:b6:79:2b:ca:25:02:1b:41:
         4c:60:0b:91:7b:ca:3f:f4:a5:41:5e:20:db:09:0f:3d:04:de:
         85:f5:82:85:88:2a:22:32:a5:8f:c8:f7:55:f6:36:e6:ad:0f:
         f2:51:30:dc:95:48:3a:ce:e3:76:ed:ac:a1:50:4f:dd:63:60:
         6e:6e:af:88:4f:c5:86:e2:49:68:ea:69:da:12:48:c2:77:a8:
         d4:c7:2b:f3:de:0d:3f:2d:16:23:2d:49:77:3b:e5:48:99:d2:
         7d:0b:91:32:f1:de:ef:ab:67:54:a5:db:f2:8f:f0:fe:e7:fd:
         0e:7d:4a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----