Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File:                     fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier:          OeFOT9LfhYHbPJtdCoe0tASNvo8qO9inNbPJf02wR9c=
Subject key identifier:   D1:64:E6:98:4C:36:CD:61:0F:99:3D:86:E1:F5:E7:4A:AA:65:C1:7C
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer:       /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial:       01936AB4CEDF7744211923720DA777A785A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number:          1377
Signing time:             Tue 26 Nov 2024 23:00:54 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:54 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:54 +0000
Files and hashes:         1: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: 4grye/Sv9CyNfOgfUl1o4V8ax/JgvttiSjmZzE9q6Fk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:ce:df:77:44:21:19:23:72:0d:a7:77:a7:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
        Validity
            Not Before: Nov 26 23:00:54 2024 GMT
            Not After : Nov 27 23:00:54 2024 GMT
        Subject: CN=d164e6984c36cd610f993d86e1f5e74aaa65c17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a3:44:cb:43:3d:91:4e:e4:50:48:c4:c2:f3:
                    6b:6e:3c:5a:7f:a3:cc:76:c0:13:b4:38:6b:aa:b3:
                    f9:d3:f7:c2:ba:41:ff:a6:e5:4a:e2:df:e7:a8:c5:
                    ec:2e:34:43:41:56:76:f1:d0:1a:e7:22:9a:95:86:
                    43:9b:84:ed:13:4b:ed:12:3f:6a:33:ef:73:b7:61:
                    85:6f:a1:64:85:8c:fb:ff:8d:c3:cf:45:92:f2:da:
                    ce:ab:81:fa:9d:a0:df:fa:15:3c:dc:10:99:a0:6f:
                    f4:b4:5e:66:f7:fd:7b:9b:c5:96:41:2e:fc:1a:4f:
                    14:62:81:f6:a6:c3:76:2c:4c:12:78:c9:0b:ce:43:
                    b0:4e:ec:82:72:ea:a9:16:e2:68:57:c8:c7:61:e8:
                    2a:4a:07:c6:86:7c:31:76:4a:15:58:d1:67:78:bb:
                    51:1b:01:d0:a5:ad:8c:17:57:94:9a:a8:56:13:a2:
                    e6:1b:2b:56:2e:06:6b:dc:0b:7f:96:b9:c0:ad:17:
                    82:d9:c8:e6:a8:c0:19:fc:67:dc:37:ec:de:a7:91:
                    a5:0d:d5:73:a3:af:34:42:ba:d0:af:a7:3e:78:28:
                    f7:f6:41:e2:f8:40:0e:e9:7c:e4:44:00:5f:38:75:
                    35:97:81:11:1e:41:b4:b8:2d:fe:cb:b3:ba:53:9e:
                    05:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:64:E6:98:4C:36:CD:61:0F:99:3D:86:E1:F5:E7:4A:AA:65:C1:7C
            X509v3 Authority Key Identifier:
                keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:74:c8:17:c7:e7:5f:4b:ec:a5:90:64:39:5f:c7:3c:b5:56:
         cf:5f:85:8c:b2:fd:b8:c9:c1:93:31:f1:77:a0:bf:82:23:fc:
         0b:54:62:51:9e:2f:90:d2:e1:37:7b:19:7e:d3:96:b4:57:b1:
         51:b6:91:36:80:8e:63:f0:73:e9:ec:a7:41:7e:81:d9:c6:2b:
         f0:6d:0d:ef:9c:e4:ee:da:d7:9f:99:82:45:9f:c1:9d:0f:9c:
         a0:51:82:3f:5e:2b:65:64:aa:37:d6:03:51:5e:fe:83:aa:68:
         c1:e2:1c:2e:cd:b1:54:1a:9c:df:1e:d7:e1:44:f0:74:12:cd:
         fc:7c:91:a7:03:ef:81:5a:be:83:0f:a7:3e:ea:00:cf:d0:3f:
         d5:23:63:a8:02:f5:89:87:f8:4b:65:33:54:52:2b:ab:7f:42:
         03:85:f2:b0:ea:46:80:4e:4a:97:85:ed:3f:5f:70:5c:d0:80:
         c7:7a:de:35:7b:95:20:d6:99:b1:41:ec:f4:98:8e:24:67:96:
         47:07:61:3c:20:13:cd:7b:68:a2:12:74:4b:5e:ee:4e:35:e8:
         f9:fe:43:c8:72:34:99:f1:e7:09:3a:9a:25:bc:07:2d:94:7d:
         9f:b1:cf:64:57:3e:ce:a4:4c:bc:b5:75:c5:c3:65:fb:83:2c:
         03:f1:ce:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----