Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File:                     AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier:          SRvPhXooTIXzXjLzN/8HWbxIbGTNe3HjQmYxOVVADJM=
Subject key identifier:   65:EF:EE:79:98:C6:D0:DA:BE:49:1E:02:6B:CC:D5:44:1D:E1:49:AE
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer:       /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial:       019356896C4D24F40D61CDFF0A60B8FD639A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 01:01:06 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:06 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:06 +0000
Files and hashes:         1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: GOxrm0JdvrfmFZu+jAMLIOQRnf62XFaM9faHu81IrG0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:6c:4d:24:f4:0d:61:cd:ff:0a:60:b8:fd:63:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
        Validity
            Not Before: Nov 23 01:01:06 2024 GMT
            Not After : Nov 24 01:01:06 2024 GMT
        Subject: CN=65efee7998c6d0dabe491e026bccd5441de149ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ba:16:e2:fd:9a:61:f0:0b:53:21:31:b3:a6:
                    93:7b:b7:e2:aa:07:fa:83:99:4f:10:c7:11:f6:f1:
                    13:9f:5c:72:34:e1:0b:a2:a7:64:e8:66:bd:e2:a2:
                    87:c3:5f:ca:dd:8a:96:e0:15:f9:8a:bf:de:31:3b:
                    05:a2:8e:72:2a:27:8e:c1:5e:fb:99:28:79:0d:5b:
                    e7:fa:3b:c7:b6:90:eb:5c:b9:fa:4d:39:33:e9:e5:
                    60:63:af:4a:90:b7:61:bb:37:99:a5:b4:0d:26:e7:
                    3a:28:c9:72:f9:e2:15:9e:67:b9:02:2d:8c:45:a8:
                    54:01:c2:4d:c2:26:b5:6a:51:9d:4c:d0:df:d0:9c:
                    7f:77:a4:f7:5c:00:85:84:33:61:92:aa:11:43:d7:
                    bc:43:fc:22:15:26:ac:ac:fa:27:e2:eb:67:ae:02:
                    21:93:35:3f:2f:ab:05:f2:62:fe:ba:fc:f0:34:46:
                    ac:71:a3:07:9b:a6:ae:4c:b9:1d:2c:82:d7:e9:64:
                    09:fe:9b:6a:fc:c6:70:5d:f5:52:91:bd:7d:0a:bb:
                    a5:f3:fd:17:86:47:d3:bd:a0:14:7f:69:a5:ea:2f:
                    ba:b9:f7:74:40:52:e9:2f:20:bc:e5:b0:cf:1d:24:
                    a2:9e:ac:4a:cc:b4:0c:a4:11:7b:c7:a5:a3:51:e1:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EF:EE:79:98:C6:D0:DA:BE:49:1E:02:6B:CC:D5:44:1D:E1:49:AE
            X509v3 Authority Key Identifier:
                keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:23:f2:69:09:21:24:f4:36:4a:0e:e6:32:74:39:85:02:68:
         82:0f:88:6a:e4:68:e7:f4:84:73:ff:17:40:19:b8:45:25:de:
         10:a6:fa:aa:3b:f1:fa:f6:e4:83:1e:61:e1:bb:02:94:cd:c1:
         50:f0:97:dd:57:a1:a4:a7:40:23:fd:e3:eb:2f:0b:f5:07:ef:
         03:64:4a:fa:ba:72:a2:7c:dc:9b:f6:a4:6b:7c:0f:12:96:bd:
         6f:2a:02:3a:20:d9:ab:a6:e3:f2:7d:a6:2b:3b:59:c2:f8:11:
         54:09:9f:ba:2d:81:9b:4c:06:34:47:61:88:ff:60:81:08:e0:
         59:58:e8:69:f7:b1:24:8e:f3:1e:45:f6:db:75:5b:b2:62:b5:
         2c:de:5a:a9:d9:72:77:5c:9c:c2:06:ca:9c:98:df:cb:ef:31:
         9a:e8:36:62:10:d0:39:03:8b:fc:62:5b:72:93:b9:69:f5:21:
         09:c5:40:d2:4c:e9:fc:4e:fc:3a:76:85:71:78:1a:06:62:36:
         d1:93:7b:53:92:c6:e4:b1:34:8c:b5:c1:46:1b:e3:f7:f7:fb:
         4e:91:ac:c5:73:a2:dd:af:b4:a1:3a:b7:da:59:fb:d9:d6:04:
         55:d8:f6:13:49:d5:d1:d3:a6:e6:aa:f5:0c:80:86:cb:67:b8:
         64:9b:94:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----