Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
File:                     ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft (raw, json)
Hash identifier:          c47BRXVeUW+x6+HjHKwCUGTqqru3Vr8wqSd5nJHuQLQ=
Subject key identifier:   C8:13:50:07:D8:47:92:BE:A6:FF:3F:A9:DA:F4:CE:54:8C:37:36:F4
Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
Certificate issuer:       /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Certificate serial:       0193561AD4F324D8944382E2A6F2A1DAEDD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
Manifest number:          0B7E
Signing time:             Fri 22 Nov 2024 23:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:19 +0000
Files and hashes:         1: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl (hash: hZhA3LRUV6rKAAWi3kV+74cq0jCIN96WXAGQQOsG9TE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:d4:f3:24:d8:94:43:82:e2:a6:f2:a1:da:ed:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
        Validity
            Not Before: Nov 22 23:00:19 2024 GMT
            Not After : Nov 23 23:00:19 2024 GMT
        Subject: CN=c8135007d84792bea6ff3fa9daf4ce548c3736f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:8a:59:1b:95:a9:1b:57:ef:19:0f:47:11:
                    9f:c9:42:fb:f9:13:be:d1:b4:8c:bd:bb:6c:de:be:
                    40:36:69:db:b6:85:b2:02:81:7a:86:5e:5a:a4:22:
                    3d:28:7f:15:59:e7:da:55:ea:3b:0c:69:0f:ef:2f:
                    26:7a:83:00:de:22:f7:31:f2:25:b8:bc:58:07:68:
                    2c:ec:0c:9f:66:0e:b7:12:5c:3e:80:fa:2d:b1:ec:
                    12:ec:b1:a6:a2:63:46:c1:c5:72:ca:8a:d1:2e:be:
                    c3:2c:b7:5f:a7:5a:8a:93:0e:48:aa:bf:d5:e0:20:
                    30:ef:e1:85:9d:e6:44:2e:20:e3:da:18:91:5a:82:
                    53:46:14:11:6c:3d:e2:47:a9:d2:19:a8:c1:dc:ee:
                    eb:01:01:a6:98:6b:6e:6b:03:93:77:60:fd:e7:f8:
                    24:9d:c7:e4:77:89:c5:1b:94:83:c3:cb:3d:df:86:
                    81:3b:e4:8b:54:e6:87:ca:a8:55:5d:f5:0f:d8:1b:
                    1d:21:34:51:53:f9:44:fd:43:f8:c4:36:8d:ef:b9:
                    8f:34:69:fc:b3:99:14:df:57:58:0f:f8:70:e7:74:
                    4e:cd:cf:50:09:c5:dd:5b:ce:b9:01:5c:8d:6d:9e:
                    c9:83:a8:4c:8d:6d:c8:1a:c4:f4:eb:f9:ba:d2:12:
                    f7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:13:50:07:D8:47:92:BE:A6:FF:3F:A9:DA:F4:CE:54:8C:37:36:F4
            X509v3 Authority Key Identifier:
                keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:78:58:98:04:61:bf:fb:50:ad:8e:82:f7:96:46:3b:11:d1:
         5c:ed:26:f9:f0:87:d4:01:8c:6d:99:cc:99:a0:ca:b3:b6:4a:
         ad:26:9b:f2:c2:c1:b0:6e:1a:c1:f5:d5:fb:80:18:6d:46:06:
         be:66:b2:db:25:d8:09:e2:e0:12:12:f4:cb:75:25:01:be:25:
         bf:42:0a:f2:bc:05:1a:f5:b4:ae:3d:99:51:4b:e7:1e:96:c4:
         82:d9:5e:71:ef:f6:2d:08:56:88:a1:ce:97:6b:8b:dd:24:d8:
         f2:7b:70:a6:34:12:e1:fc:59:7b:55:67:46:5a:32:3c:7b:fb:
         74:03:e1:29:eb:cc:e1:84:9a:f4:4d:27:17:07:2d:e0:b3:b6:
         bc:60:b0:21:c4:8d:9e:9f:bc:48:cb:50:86:e2:c2:7b:88:82:
         21:73:03:00:b3:73:37:90:46:5a:7c:5f:e1:da:15:2d:88:bb:
         ee:45:c2:c8:a1:a5:f4:a5:59:4b:7c:9d:de:fb:a4:56:86:98:
         e9:92:e2:6b:36:3c:46:00:91:2b:e0:ef:64:52:73:b4:0a:1d:
         05:7b:c7:0e:97:06:78:72:79:01:6c:f2:42:ba:87:db:b9:be:
         d6:14:4f:eb:db:94:1d:35:de:43:18:8b:3b:97:30:00:4c:b9:
         69:c2:56:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----