Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
File:                     vp7oIiPwQFhr4922qq9lXplCkSY.mft (raw, json)
Hash identifier:          kPX4hz20SPViQhiQ8A3PsxVlnF4z+I0bAA1XjISBEGY=
Subject key identifier:   2C:DB:F5:A7:85:84:0B:B8:6E:AF:33:46:54:A1:D2:4B:EB:8B:AA:FD
Authority key identifier: BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26
Certificate issuer:       /CN=be9ee82223f040586be3ddb6aaaf655e99429126
Certificate serial:       0193568B318AC68DC7F4E8A8EE58AB7CA4E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
Manifest number:          04B5
Signing time:             Sat 23 Nov 2024 01:03:02 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:02 +0000
Manifest next update:     Sun 24 Nov 2024 01:03:02 +0000
Files and hashes:         1: vp7oIiPwQFhr4922qq9lXplCkSY.crl (hash: IMmmyJKtDAJ+Nc9CDsp6viHGgZxTv5o3zpbWxELu1OQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:31:8a:c6:8d:c7:f4:e8:a8:ee:58:ab:7c:a4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9ee82223f040586be3ddb6aaaf655e99429126
        Validity
            Not Before: Nov 23 01:03:02 2024 GMT
            Not After : Nov 24 01:03:02 2024 GMT
        Subject: CN=2cdbf5a785840bb86eaf334654a1d24beb8baafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:a9:f7:a7:16:dd:fe:fc:a1:d7:a2:6c:6b:
                    69:60:f0:0c:47:dd:a4:9e:91:9d:20:ba:5f:9a:ad:
                    b6:ac:a5:3d:16:9e:41:69:cf:10:f2:dc:28:19:89:
                    86:a0:b5:fe:cb:78:89:46:cf:4c:69:9a:b4:54:f1:
                    e3:c3:9b:91:9d:3a:eb:0a:bf:f8:f4:83:03:3c:59:
                    c5:c1:d0:da:36:6a:2c:b5:11:20:da:ec:28:18:a5:
                    5f:9e:b6:7c:c7:6c:65:98:63:6f:fa:aa:84:3e:4c:
                    ee:2e:4d:9e:29:9d:57:f9:94:ef:14:26:b1:85:2e:
                    05:b0:f3:d9:84:a6:ef:5c:d7:28:06:aa:6b:29:f0:
                    dc:65:94:ea:21:7c:b9:ef:db:26:6b:b3:36:67:43:
                    13:b8:87:d5:09:1b:44:5b:99:a7:a9:9b:a3:ae:ce:
                    97:74:17:33:56:a9:04:5e:02:71:18:a8:10:5f:d5:
                    57:e4:71:01:4e:20:11:0b:82:c9:10:09:ad:ef:65:
                    91:10:da:bb:b2:94:2a:73:89:be:6f:c6:29:48:2b:
                    ca:85:11:15:8e:94:d1:79:84:90:68:cb:2b:28:0d:
                    8f:1b:69:ec:c7:36:1c:b9:27:4b:6c:e0:f2:78:93:
                    f6:25:c7:32:ce:87:eb:5b:c8:5c:ac:a5:c8:e3:5f:
                    13:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DB:F5:A7:85:84:0B:B8:6E:AF:33:46:54:A1:D2:4B:EB:8B:AA:FD
            X509v3 Authority Key Identifier:
                keyid:BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:10:9c:44:ea:f1:a6:e9:44:66:60:41:d6:0c:b7:f2:10:36:
         fd:0a:0c:32:24:63:db:21:72:03:01:40:a7:ad:62:cb:5d:ed:
         37:ee:6e:18:a8:26:c2:8e:0e:40:18:7e:a8:19:89:5c:6b:f6:
         82:de:23:f8:89:a2:27:db:45:24:7f:78:b4:8d:b9:18:52:f6:
         07:61:c3:b5:cb:d7:2d:99:b4:29:0b:f7:41:7d:b0:40:9b:e1:
         d5:d9:2b:19:31:6a:89:05:76:ae:3f:d9:68:d9:5f:c2:c7:e9:
         7c:7e:c4:90:72:20:e2:d2:f4:65:9e:4a:08:f2:e3:5c:a5:7c:
         a4:32:d4:5c:d6:d6:e8:4a:20:ee:39:27:5c:5d:04:bb:71:cf:
         ac:27:04:59:00:8a:2b:e8:2d:f6:19:5b:a4:f9:36:a9:5d:26:
         52:1d:1e:c9:bb:f9:ca:fa:c2:b1:06:42:ca:82:4b:5c:2b:71:
         03:9e:b6:c9:c9:61:3d:fd:a6:34:4a:d0:4b:0f:ac:3e:88:cb:
         d5:55:6f:12:48:0a:d3:b7:6d:df:80:5f:01:5f:f5:06:b6:56:
         dc:9a:ee:e7:f3:ea:c8:73:ea:a5:ca:e1:06:5b:ed:58:97:5d:
         a4:df:b1:c1:72:ab:fb:d6:a0:00:d3:bb:7a:ec:65:f0:83:52:
         e9:91:9f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----