Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e152e7-9fcd-41cf-8c77-e8cff54cf320/1/FIbXSzxy_qXYDDZR6zJlfArDH4o.mft
File:                     FIbXSzxy_qXYDDZR6zJlfArDH4o.mft (raw, json)
Hash identifier:          MRKy5/akW8GwXSYmESXtPODklFbYSRJuxHWcKwKl4jk=
Subject key identifier:   57:09:B5:0F:46:88:1B:E9:A0:68:FB:6F:F5:7E:23:E3:4D:FD:44:87
Authority key identifier: 14:86:D7:4B:3C:72:FE:A5:D8:0C:36:51:EB:32:65:7C:0A:C3:1F:8A
Certificate issuer:       /CN=1486d74b3c72fea5d80c3651eb32657c0ac31f8a
Certificate serial:       01940648156B698065AC3BA4FD3887A7271F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FIbXSzxy_qXYDDZR6zJlfArDH4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e152e7-9fcd-41cf-8c77-e8cff54cf320/1/FIbXSzxy_qXYDDZR6zJlfArDH4o.mft
Manifest number:          057D
Signing time:             Fri 27 Dec 2024 04:02:54 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:54 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:54 +0000
Files and hashes:         1: FIbXSzxy_qXYDDZR6zJlfArDH4o.crl (hash: EbABanhX9Ak/HIft7dAKOp0T5WH3Q21MI4ARU+2vT1U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e152e7-9fcd-41cf-8c77-e8cff54cf320/1/FIbXSzxy_qXYDDZR6zJlfArDH4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e152e7-9fcd-41cf-8c77-e8cff54cf320/1/FIbXSzxy_qXYDDZR6zJlfArDH4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FIbXSzxy_qXYDDZR6zJlfArDH4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:48:15:6b:69:80:65:ac:3b:a4:fd:38:87:a7:27:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1486d74b3c72fea5d80c3651eb32657c0ac31f8a
        Validity
            Not Before: Dec 27 04:02:54 2024 GMT
            Not After : Dec 28 04:02:54 2024 GMT
        Subject: CN=5709b50f46881be9a068fb6ff57e23e34dfd4487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:aa:0c:cb:8e:56:86:f5:90:a7:9a:75:28:2d:
                    06:15:e1:ea:24:fb:5f:3b:4f:f7:cc:63:85:de:4d:
                    06:2b:60:59:7c:27:0d:88:7a:55:00:58:f7:9f:cd:
                    21:7e:d5:47:16:dd:6c:d8:33:52:83:8c:4d:1f:5d:
                    01:f3:00:a3:a5:43:91:12:05:e9:2c:cb:58:ab:70:
                    c7:08:30:8d:37:0a:d2:51:1c:82:ab:06:09:4f:0e:
                    9a:26:73:3d:c4:20:ba:0a:38:19:ee:5d:54:d5:ba:
                    89:14:54:e8:83:4f:4c:db:15:94:6a:94:8d:8c:91:
                    80:e7:f2:2f:e1:cf:0c:63:26:08:25:d1:ad:cc:a2:
                    0d:6d:a6:c6:3b:8b:f3:66:e1:76:bc:de:46:ef:10:
                    c7:1f:61:27:1e:da:01:a5:af:4e:a5:0e:17:8b:d2:
                    54:0a:62:e9:5f:53:93:29:c9:1e:38:47:82:46:9a:
                    4a:b7:49:51:f2:4c:f6:c6:f7:00:d7:de:23:c1:76:
                    e0:19:63:06:ba:d8:97:3f:d6:05:41:3f:e9:d9:54:
                    73:87:51:1b:dd:09:fd:81:e5:9f:44:c4:e8:bb:7d:
                    1f:db:ef:ea:d5:67:d8:d5:a9:26:51:ed:5f:6a:d1:
                    ae:08:40:a6:d5:7f:14:04:41:53:8e:93:58:73:37:
                    0b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:09:B5:0F:46:88:1B:E9:A0:68:FB:6F:F5:7E:23:E3:4D:FD:44:87
            X509v3 Authority Key Identifier:
                keyid:14:86:D7:4B:3C:72:FE:A5:D8:0C:36:51:EB:32:65:7C:0A:C3:1F:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIbXSzxy_qXYDDZR6zJlfArDH4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e152e7-9fcd-41cf-8c77-e8cff54cf320/1/FIbXSzxy_qXYDDZR6zJlfArDH4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e152e7-9fcd-41cf-8c77-e8cff54cf320/1/FIbXSzxy_qXYDDZR6zJlfArDH4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fe:70:3d:db:2e:8b:4c:50:c2:cb:0f:5c:85:7a:92:5b:4f:
         d1:29:d0:30:ef:b2:0b:e0:d8:e3:2a:7c:0a:b2:0d:4c:40:cd:
         e6:59:f3:73:ef:41:c7:59:bd:cd:9a:44:3e:cb:c5:4d:d3:b1:
         9a:6e:c7:62:66:4d:bf:51:09:83:6f:90:13:15:6e:e1:8f:04:
         44:5a:39:a6:42:0f:c1:e5:b8:69:a0:74:a2:96:45:a0:1c:1e:
         7d:01:4f:ad:ab:8b:b1:74:6c:48:00:58:76:9c:df:18:80:19:
         63:e6:36:1f:66:33:40:f0:5c:f0:4d:fe:9b:14:7d:fd:36:72:
         49:c1:04:89:ea:0f:31:d2:3a:2f:5a:6f:4c:be:bd:8a:05:b1:
         7a:38:c7:1a:a6:37:07:c2:50:51:87:31:76:5f:f1:11:56:d6:
         5b:28:12:15:ef:4a:ce:cd:2c:0b:9b:70:90:32:a3:f0:3e:dd:
         c8:f2:14:2d:d7:04:c9:27:60:95:68:6a:2c:0f:9b:c6:2a:49:
         da:e9:cc:3d:50:8f:23:98:83:51:dc:25:4c:2f:db:c5:47:8c:
         30:f5:d9:ac:d4:79:65:2e:95:32:ba:fb:48:a0:77:2c:e9:18:
         be:58:06:b1:5b:95:e0:8d:03:bf:70:36:e6:6f:ec:a6:fc:4e:
         c4:31:35:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----