Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
File:                     GGDjbiWx26EXgHXIA8KaBEzs_eE.mft (raw, json)
Hash identifier:          oC0bFWJK0MTWFGY8iQ+AH9RakU8u4SlLQDggzVuhJZk=
Subject key identifier:   89:6C:A5:BE:72:F7:9E:0B:DE:0B:DA:F4:66:B8:91:F8:FF:34:48:B3
Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
Certificate issuer:       /CN=1860e36e25b1dba1178075c803c29a044cecfde1
Certificate serial:       01940647BABBA0428DA8795D70B1B675A5D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
Manifest number:          06ED
Signing time:             Fri 27 Dec 2024 04:02:31 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:31 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:31 +0000
Files and hashes:         1: GGDjbiWx26EXgHXIA8KaBEzs_eE.crl (hash: MelOlKEWqLgadQVmJ3F6+Xi3GEZK8GlQKUFPqmziwEY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:ba:bb:a0:42:8d:a8:79:5d:70:b1:b6:75:a5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1
        Validity
            Not Before: Dec 27 04:02:31 2024 GMT
            Not After : Dec 28 04:02:31 2024 GMT
        Subject: CN=896ca5be72f79e0bde0bdaf466b891f8ff3448b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ca:b6:58:e3:eb:b1:72:b6:7b:54:58:ef:8e:
                    2c:ed:41:c7:06:32:da:49:c8:af:d6:a5:5b:17:16:
                    49:ec:b0:05:c0:8d:6c:b5:cc:a8:90:7a:47:1e:63:
                    39:8f:47:70:0f:4f:38:d7:0e:91:15:a4:62:72:96:
                    4c:76:6e:b8:2a:58:b2:41:b2:76:af:df:f1:52:d7:
                    22:69:83:a5:24:f4:7c:03:02:e5:81:cd:d0:84:3c:
                    bd:b6:24:1f:8c:6f:61:32:fe:1e:d4:4d:c2:62:56:
                    2c:b6:70:a1:05:ca:70:9a:1b:e8:e6:f1:2d:24:f0:
                    54:b4:2f:23:4f:68:07:45:1a:b7:56:ba:5d:e9:06:
                    72:0a:90:17:3d:a3:57:80:01:d4:32:f5:83:32:bf:
                    10:b5:49:ef:4d:46:aa:b2:9a:5c:b6:03:2d:3b:9c:
                    72:9a:ee:36:87:61:17:41:06:df:c3:fb:d9:ab:2b:
                    88:9e:c7:97:5f:8f:ad:15:dd:64:ca:5d:4b:09:3b:
                    d6:2b:09:5e:1b:d8:c7:82:92:1b:aa:de:78:95:f0:
                    89:1f:f7:f8:67:cd:79:91:20:c5:d3:69:62:35:0d:
                    1a:d2:88:88:e0:fb:ed:8f:b1:68:e4:c8:f4:7c:e5:
                    12:31:32:fc:88:e3:0e:de:2b:e7:1d:99:4e:2d:b7:
                    bf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6C:A5:BE:72:F7:9E:0B:DE:0B:DA:F4:66:B8:91:F8:FF:34:48:B3
            X509v3 Authority Key Identifier:
                keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:04:80:55:4f:75:69:cb:b6:86:6d:c8:74:9c:45:d4:bb:c7:
         fa:43:1c:1b:99:63:47:d0:75:a7:00:01:29:41:25:7c:95:45:
         d4:3d:99:e6:39:db:dd:c4:9e:cc:19:3e:0f:55:f6:a2:ae:a1:
         65:72:4a:8a:42:ee:e4:e5:21:fa:ae:12:71:0b:dd:57:c4:20:
         40:30:3c:4c:39:0a:6a:19:05:15:85:ba:36:93:87:f9:44:0a:
         3a:96:cf:b4:53:27:81:c2:f7:cd:15:be:1a:62:78:4a:a2:fd:
         53:57:cc:ce:61:ed:09:11:46:59:a8:06:9d:59:c3:c0:f2:d1:
         f6:77:c5:c1:d5:9a:74:7c:1f:17:bc:17:5d:10:b8:4a:c7:4e:
         88:ed:ce:30:1e:0e:78:ec:80:75:a5:fd:a1:df:5e:27:5f:7c:
         2c:5d:f6:71:a7:51:96:30:24:47:e9:ca:f0:f3:06:be:99:b4:
         78:91:e9:ec:51:b2:04:eb:c5:52:e3:b3:a6:f8:ff:4d:e0:fe:
         1a:52:e5:ca:0d:63:89:ac:30:16:bd:d9:12:17:cd:bf:54:20:
         dc:d3:21:db:a3:69:2a:ed:8f:4b:a0:28:a9:de:a2:e8:3d:5a:
         d2:ae:1d:f6:77:63:f7:65:fa:d3:30:a9:57:c8:15:8f:67:1c:
         c4:8b:74:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----