Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
File:                     NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json)
Hash identifier:          aSOdLeJwevXX3N8arnKghonoGInyA9kTc8sTdVWZp0s=
Subject key identifier:   12:F6:3E:9D:49:79:64:6E:37:42:39:AC:F8:35:2F:5A:DA:95:A9:81
Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
Certificate issuer:       /CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Certificate serial:       0191F9D99145BC64C8527C9439143461098A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
Manifest number:          0116
Signing time:             Mon 16 Sep 2024 08:01:10 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:10 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:10 +0000
Files and hashes:         1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: 3YNGaz1JU0GjkXIr0p3q+MaVsRrO1BTXhHYN4tNonE4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:91:45:bc:64:c8:52:7c:94:39:14:34:61:09:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83
        Validity
            Not Before: Sep 16 08:01:10 2024 GMT
            Not After : Sep 17 08:01:10 2024 GMT
        Subject: CN=12f63e9d4979646e374239acf8352f5ada95a981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:0b:91:f2:66:51:3e:fe:17:48:38:50:77:
                    66:88:8c:56:26:1d:c4:32:ed:d8:58:92:71:26:4f:
                    e5:7d:02:85:2b:45:09:0b:a5:ab:f3:c2:9e:c2:49:
                    f8:0e:1a:8e:9f:ab:ae:6f:ba:2a:df:3e:8f:f3:9f:
                    09:2b:3f:69:ab:14:f3:47:d3:f5:6b:45:9f:63:ef:
                    6f:75:c1:e2:9a:46:ff:e1:97:d3:45:88:24:ff:4a:
                    81:6a:67:65:28:f0:91:ff:80:8c:d7:1a:46:79:40:
                    f7:09:c4:6e:9e:cd:bc:a6:5a:13:51:19:41:fd:d4:
                    4f:42:9c:6c:14:c7:1b:33:d0:92:30:36:21:fe:0a:
                    c4:22:95:f0:29:02:41:0d:86:02:72:7d:d3:80:31:
                    df:d1:75:42:8a:b9:81:af:9b:ba:bf:77:37:70:24:
                    dd:63:d7:44:d2:01:92:6b:8e:25:dc:be:6b:e2:21:
                    60:1d:65:3f:86:87:ee:80:3c:21:f2:bf:6b:c3:67:
                    3d:11:9f:e2:a3:80:18:02:3c:3e:4e:cc:9c:44:b4:
                    3b:4b:96:47:2d:20:aa:cb:7b:ce:d8:20:bb:83:c1:
                    05:ea:f0:72:86:a8:ab:18:cd:35:9d:62:bb:b5:2e:
                    e0:47:c9:ef:87:5e:28:a9:19:9c:4d:21:06:4f:d8:
                    76:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F6:3E:9D:49:79:64:6E:37:42:39:AC:F8:35:2F:5A:DA:95:A9:81
            X509v3 Authority Key Identifier:
                keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:85:e7:13:85:9d:2f:6b:33:e5:d3:ec:eb:4b:ec:7b:5e:8d:
         3d:48:60:23:d2:f0:76:7e:b1:82:dd:01:36:aa:5c:2b:ca:41:
         1d:df:e7:97:9b:d9:8b:83:c1:97:66:40:fa:d2:47:a0:94:f3:
         1d:b8:09:20:5d:b4:e4:ca:72:de:42:12:19:01:07:51:54:84:
         e3:c4:0a:67:ab:0f:2d:65:f5:17:18:f9:f9:55:9c:0f:12:87:
         b5:e0:41:7b:de:2d:83:51:d1:45:e1:c0:cd:7a:7b:3b:e4:c9:
         08:d2:f6:a2:a7:47:15:f8:4c:b1:7d:2d:68:08:49:d7:1c:b8:
         70:b5:d3:dd:fa:6f:6d:02:ef:9f:7e:8d:67:fa:71:cf:dc:8f:
         27:44:4e:cb:ca:1b:79:c5:84:dc:b4:0e:8b:17:22:a4:f3:8b:
         9d:a9:5c:1d:32:e6:41:86:ab:0a:6d:35:f2:fa:68:55:1b:4f:
         9b:b9:27:5a:08:a8:24:b9:1a:ac:d5:09:4e:37:2a:ab:77:49:
         3d:9d:f4:0c:c5:41:99:99:39:4c:40:2c:b2:6b:95:ce:ef:94:
         9a:79:42:a8:3c:df:34:df:36:5e:e5:9a:7f:3d:a3:23:d8:bc:
         e3:a2:0a:08:20:b4:85:0f:68:9f:7f:f8:9a:bd:57:a8:ea:bd:
         54:a8:7d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----