Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
File:                     fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json)
Hash identifier:          6wes1y2z4LOJ2gstj0BQgkw2J7nTA0xKdJhsOJNlS4Q=
Subject key identifier:   EF:37:9A:61:85:74:8D:87:D2:D8:FB:7B:24:5A:73:E5:2D:4B:C3:B4
Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
Certificate issuer:       /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Certificate serial:       019369DA74514DB34F23ADBB89D7F5408910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
Manifest number:          0C37
Signing time:             Tue 26 Nov 2024 19:02:24 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:24 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:24 +0000
Files and hashes:         1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: jiC4zs42xgEZmXP3s8lAmSwzSbDNRV/Igo2wd6ro8fc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:74:51:4d:b3:4f:23:ad:bb:89:d7:f5:40:89:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
        Validity
            Not Before: Nov 26 19:02:24 2024 GMT
            Not After : Nov 27 19:02:24 2024 GMT
        Subject: CN=ef379a6185748d87d2d8fb7b245a73e52d4bc3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:31:a8:3e:ad:ca:ff:24:c4:f9:53:e8:c4:15:
                    d4:db:a2:51:0d:54:1b:e9:2a:24:d6:1b:36:3a:c7:
                    1d:31:3c:07:6f:d0:a9:d4:b2:bf:9a:4a:63:6b:d1:
                    3b:97:f9:a4:62:f3:3e:22:9e:51:4f:df:65:2a:db:
                    7e:36:ba:1f:7b:ff:4e:65:30:a6:1c:3a:d3:c8:f1:
                    20:79:a5:76:ce:89:fd:26:0f:be:96:8f:67:36:d0:
                    a1:1f:9f:22:8c:88:f9:7c:f9:e0:3d:9c:66:4b:9c:
                    6f:5d:c6:b5:b8:b9:5b:04:8a:03:03:ce:96:aa:8d:
                    7b:eb:25:a5:d7:16:ab:ba:19:51:6d:c4:56:88:ca:
                    cf:97:11:5e:19:84:fa:78:7a:fa:d9:3b:da:2c:1e:
                    3d:1d:49:64:76:3b:5c:5b:38:58:69:3e:82:71:ce:
                    80:7a:78:a1:91:85:11:aa:93:93:30:10:11:b2:30:
                    68:05:8f:5a:5d:0d:fd:7a:28:64:d5:23:95:54:43:
                    f5:7e:6e:84:c0:51:bf:42:54:82:34:1f:33:2c:6b:
                    9e:30:70:73:a8:4d:20:ba:1e:7a:00:bf:1c:45:4f:
                    96:18:ee:8f:ab:2e:37:20:f4:c0:ac:4c:41:fd:f9:
                    f3:d0:aa:04:55:fb:b8:d9:1b:f4:b4:2c:f6:91:08:
                    24:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:37:9A:61:85:74:8D:87:D2:D8:FB:7B:24:5A:73:E5:2D:4B:C3:B4
            X509v3 Authority Key Identifier:
                keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b1:ce:44:3e:1c:c3:49:c4:0c:40:5c:eb:f7:08:c3:e2:24:
         68:18:1c:36:f6:2c:c0:33:57:76:bc:19:ba:4a:b0:a4:b3:94:
         bd:04:ec:59:1c:29:58:1f:88:c4:f8:d5:c2:23:11:69:19:99:
         68:b3:fc:3d:70:4b:2e:c2:4b:bd:05:00:7a:51:6c:af:f6:0e:
         57:f4:46:c7:41:26:60:15:a1:01:82:2a:eb:b2:73:e3:a8:6b:
         77:14:24:e6:ce:e5:36:8a:0e:f1:22:ac:e8:58:83:df:4f:9e:
         1e:39:04:61:0a:ce:25:68:5f:c9:86:5d:e6:96:01:24:a1:18:
         14:14:e2:b8:d8:7d:ad:13:08:20:96:15:8e:a3:fc:05:c1:69:
         e8:8d:ef:26:f0:2a:7e:80:26:80:9a:55:b2:f3:c7:3b:b0:3a:
         ef:12:98:80:cf:e1:cc:bd:b5:eb:9b:67:43:a6:4d:39:a3:f2:
         88:c7:ed:b1:86:02:d5:ce:1f:cf:28:59:c1:58:7d:01:b8:c3:
         3e:26:b8:22:51:a5:13:48:fd:f6:fc:60:af:49:bb:88:bc:51:
         e1:a5:46:32:a8:e1:e6:ea:b2:79:64:73:19:6e:f4:22:23:ca:
         05:df:cb:ae:ce:ff:b8:2d:12:df:95:89:98:51:57:a7:b9:7d:
         db:91:41:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----