Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
File:                     danDqBE5lKqnp7EhGTd3kbIB8Gw.mft (raw, json)
Hash identifier:          fqPAuqbhd9jDPyTXHhqCrXGO3K2BzxaGQ98Uyft2lSY=
Subject key identifier:   9C:3D:70:FE:F5:DF:43:0A:61:31:A9:97:4A:42:86:96:83:FA:DA:5D
Authority key identifier: 75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C
Certificate issuer:       /CN=75a9c3a8113994aaa7a7b12119377791b201f06c
Certificate serial:       019369A1A89D4F2047D23B05169B456D69DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
Manifest number:          4C
Signing time:             Tue 26 Nov 2024 18:00:22 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:22 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:22 +0000
Files and hashes:         1: danDqBE5lKqnp7EhGTd3kbIB8Gw.crl (hash: mi2BfaAJ0wZmvaOc86MMYgrrOcym2U0onnrnilQ81Dw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:a8:9d:4f:20:47:d2:3b:05:16:9b:45:6d:69:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a9c3a8113994aaa7a7b12119377791b201f06c
        Validity
            Not Before: Nov 26 18:00:22 2024 GMT
            Not After : Nov 27 18:00:22 2024 GMT
        Subject: CN=9c3d70fef5df430a6131a9974a42869683fada5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:2f:88:91:13:0e:9d:7a:6a:29:2d:7a:22:
                    af:29:f3:91:9b:0c:7c:90:bd:39:b4:50:91:24:6a:
                    fc:64:30:63:9e:8c:c0:e4:bc:a0:1f:7d:b9:32:6e:
                    75:26:47:f3:b5:a9:d2:be:95:7a:c5:be:31:f6:db:
                    10:8b:1e:80:99:42:67:5f:5e:ee:24:a7:30:8e:50:
                    65:f1:90:60:9e:5a:0e:66:8f:2c:ad:ca:dc:bc:b9:
                    8b:05:9a:25:19:d7:60:bc:c9:c9:9a:10:c3:5f:85:
                    39:31:7c:fe:cc:6c:fd:bc:9d:42:33:af:66:98:19:
                    da:91:a3:3d:96:5e:2f:91:dc:9b:f7:3c:df:89:d7:
                    08:a4:27:8c:a2:14:4b:07:41:4e:d7:72:e6:85:d9:
                    81:23:97:ff:e7:1b:b5:21:22:b3:aa:bb:e8:df:92:
                    ac:29:2a:c4:17:65:67:a8:75:f3:a2:f1:82:cb:05:
                    ff:7f:4f:b7:81:ba:0e:a0:99:87:56:d5:04:4d:2a:
                    ee:eb:16:d5:59:01:a3:9c:f8:e3:2d:4e:c8:9e:e4:
                    db:25:af:f4:7b:5f:6f:5d:f1:b8:4a:d5:a7:12:1f:
                    61:55:3e:c2:c1:0b:c0:dd:b4:a7:78:a8:2c:70:3f:
                    bc:f6:b5:53:98:12:e9:36:ec:77:a7:bb:57:1e:db:
                    77:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3D:70:FE:F5:DF:43:0A:61:31:A9:97:4A:42:86:96:83:FA:DA:5D
            X509v3 Authority Key Identifier:
                keyid:75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:cc:10:48:9b:cc:08:6d:52:51:de:22:0a:ab:78:c7:6e:06:
         86:06:40:19:05:56:e7:64:9a:d7:59:eb:e6:9f:2b:57:1f:28:
         f7:fd:1c:6b:57:d1:05:2a:ea:d5:22:f3:2e:93:a6:11:22:e6:
         92:0b:31:84:06:08:81:15:a6:87:dd:c7:b2:af:1f:54:00:a5:
         fa:2b:0a:c8:e0:5b:9a:f7:05:08:d7:e5:a9:30:ae:8f:01:4b:
         6b:e7:3d:1b:13:bc:6d:60:ac:54:ad:19:0b:1e:cd:43:8b:ff:
         e9:4d:c1:c1:81:e2:60:ed:f1:28:80:73:d6:07:21:93:bc:d8:
         bc:64:71:b9:19:5e:39:0e:21:cd:30:04:49:93:ab:ce:ba:12:
         12:b2:ba:98:56:b8:72:a9:68:2f:4d:af:06:04:b7:06:8d:c0:
         e5:62:3b:92:52:1d:58:53:71:73:d4:fe:f9:57:35:c1:50:21:
         79:e7:dc:47:e9:74:32:01:21:fd:b6:cf:e6:de:9c:7c:fc:dc:
         7a:2e:08:e1:64:ef:63:90:a0:7a:b8:dd:44:cd:86:3a:a1:86:
         1b:56:59:5a:d4:db:74:21:4d:53:74:18:20:fa:e3:9b:ee:55:
         d1:77:8e:87:9d:7d:99:7a:3c:39:c4:0a:ce:05:e2:fe:47:d6:
         a8:c1:35:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----