Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
File:                     v0fz41wqjMrpbOFyEPkTq-fpI_g.mft (raw, json)
Hash identifier:          roU6sPEgna2jFuMBGoW/e2afZHevbmDADlPG4nhdVyc=
Subject key identifier:   93:98:FD:13:19:8C:EA:96:4F:2C:CA:31:64:61:2D:7E:90:0B:CD:B5
Authority key identifier: BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
Certificate issuer:       /CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Certificate serial:       019357648083B61F64559127B5C5C831DB01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
Manifest number:          117C
Signing time:             Sat 23 Nov 2024 05:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:24 +0000
Files and hashes:         1: v0fz41wqjMrpbOFyEPkTq-fpI_g.crl (hash: oHNQ+gqnWdgFdj6diiVUkQ02ddb0Bk7XA99f4OofkhY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:80:83:b6:1f:64:55:91:27:b5:c5:c8:31:db:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
        Validity
            Not Before: Nov 23 05:00:24 2024 GMT
            Not After : Nov 24 05:00:24 2024 GMT
        Subject: CN=9398fd13198cea964f2cca3164612d7e900bcdb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:77:e9:a4:cd:d1:e9:6b:8b:58:5e:e3:94:
                    33:95:48:3b:02:0a:82:05:e9:bd:62:2e:f2:64:31:
                    85:81:da:72:48:9b:82:65:b1:8f:82:28:ae:86:78:
                    80:7f:d9:e0:95:35:ef:28:46:9d:0c:69:5b:c8:4d:
                    a9:f8:65:a2:0e:2e:f6:da:2e:15:c2:4f:1d:fc:b8:
                    db:b7:4e:55:04:55:f0:e2:4d:38:32:3c:42:f6:88:
                    54:93:f8:c9:3f:26:a1:3a:91:8d:5c:ab:f5:f5:58:
                    fb:aa:92:83:b5:05:f3:4f:a0:62:19:5e:9c:1c:dd:
                    34:f5:8c:e3:b6:91:2c:40:5f:19:58:26:ad:ec:e7:
                    a3:da:d2:f4:2a:b4:e2:61:b1:a9:03:ab:34:6e:0a:
                    81:bf:5a:0b:29:0a:97:0a:a9:a8:dd:50:6c:28:41:
                    27:e3:28:65:23:f6:a0:5b:c9:6d:da:e5:78:81:a0:
                    4a:94:8a:d7:02:99:96:60:aa:44:f8:04:01:44:1d:
                    47:f2:3b:cb:5c:02:73:36:af:06:d8:0a:d9:19:93:
                    6e:7a:7f:56:ef:aa:df:ca:a1:0c:95:94:46:3e:33:
                    24:c0:45:30:3b:88:fb:37:f1:86:0c:75:4d:90:33:
                    3f:a5:b7:e3:82:ca:a7:20:55:ef:f5:78:66:56:63:
                    8a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:98:FD:13:19:8C:EA:96:4F:2C:CA:31:64:61:2D:7E:90:0B:CD:B5
            X509v3 Authority Key Identifier:
                keyid:BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ee:4d:19:58:dd:0e:11:bf:2f:e6:ce:35:95:17:d0:db:7b:
         7a:8d:d5:fe:31:9d:a9:91:ea:13:07:31:c2:74:7f:58:da:62:
         42:fd:80:40:18:36:7b:7f:99:45:25:6e:45:71:57:3e:85:a7:
         9a:e7:c0:3d:26:68:1c:61:f4:91:26:00:83:ad:84:49:b1:7b:
         0d:f0:2a:fb:fa:fd:48:e0:9d:8a:88:46:8d:49:5a:47:a5:96:
         68:57:99:d6:77:3b:e2:94:f2:c1:c5:9b:33:31:53:2f:56:b5:
         8a:15:88:92:3f:5b:e9:26:e3:1d:6a:db:86:5c:70:cd:7f:2b:
         54:5b:cc:69:68:d0:f8:ca:29:fc:10:b0:a1:28:d2:2c:06:cc:
         5b:40:64:14:f6:ff:41:7a:14:9f:20:d5:1c:59:04:8b:bb:60:
         ec:29:14:12:55:6f:06:f3:02:2f:b9:4c:26:f3:f6:16:bf:2c:
         06:91:55:e0:67:8e:3d:d7:af:c3:a5:73:46:e3:c5:f1:51:8e:
         7f:b3:0d:d0:de:03:b4:f1:17:27:f8:bc:ef:c7:7d:3b:b6:1f:
         3d:7e:3d:60:9d:1e:8d:a4:ee:a8:fe:02:b5:6b:44:0d:ea:c3:
         ed:72:9b:75:07:9a:4e:e7:ae:ea:3e:af:58:7d:f1:ea:9c:23:
         aa:72:ed:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----