Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
File:                     1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft (raw, json)
Hash identifier:          5Zp1rutaBrOOIC47EH9YJ81SELkEwWR32zIpDYqQExw=
Subject key identifier:   42:22:51:0C:86:B9:6D:4C:23:37:C3:2B:60:4F:F0:16:27:3D:70:38
Authority key identifier: F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
Certificate issuer:       /CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Certificate serial:       0191FA47BE432AB91AE97BB37311BECC8D72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
Manifest number:          12BE
Signing time:             Mon 16 Sep 2024 10:01:31 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:31 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:31 +0000
Files and hashes:         1: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl (hash: kXE46H0ZHLx9T/Ig+/ZuNLCxRx4mILeUTWwzm76MnGg=)
                          2: gsAaIYCOt51nCgFJmPiuTi2Yzao.roa (hash: KK+pjj1ZedySP95hE+fB3kFzYrjWFLUicQYSLk2TXS8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:be:43:2a:b9:1a:e9:7b:b3:73:11:be:cc:8d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95b27c1d543ae1efe83a141be12444e92418ff3
        Validity
            Not Before: Sep 16 10:01:31 2024 GMT
            Not After : Sep 17 10:01:31 2024 GMT
        Subject: CN=4222510c86b96d4c2337c32b604ff016273d7038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:8d:93:92:bb:d2:7d:18:58:b6:b7:fb:78:
                    c2:d5:b0:55:7d:05:78:d2:d0:fe:6b:3a:7b:c6:a3:
                    62:f9:3c:a1:a7:aa:28:f3:af:18:cd:89:5c:6c:dd:
                    96:aa:14:d5:b0:77:38:03:cb:1a:bf:c7:39:6e:7b:
                    10:59:d1:18:a7:ff:c7:42:5e:61:e0:6d:97:8d:e7:
                    83:ba:92:06:71:a7:49:9f:b6:da:e1:6d:f5:bd:79:
                    17:04:2a:22:94:b8:89:0a:52:b9:d5:3e:42:71:40:
                    37:4a:53:a5:fc:b6:09:74:4a:49:6c:db:ed:74:b8:
                    0f:2f:36:ff:4f:08:97:c2:c3:d3:7e:a8:3c:01:f9:
                    d6:5f:3f:80:a8:0d:b5:e8:f0:9a:1f:52:93:86:25:
                    24:f4:c3:e9:8e:82:05:8f:58:cf:fd:b5:c3:57:18:
                    9f:af:a3:94:b9:15:a4:e7:e3:ee:ef:95:b7:6a:21:
                    98:df:36:f4:2a:1e:26:bf:88:bf:76:d3:80:13:5e:
                    1c:29:c8:e4:be:cc:19:7a:a5:2d:9f:e1:4c:27:85:
                    b5:92:dc:f1:4a:d1:f4:b1:fd:03:79:a8:1d:69:79:
                    f3:c7:e8:3a:27:d6:48:7c:15:1f:61:64:e7:c3:fb:
                    72:68:9b:ee:6d:ab:b6:7c:e9:b9:c6:af:6d:d1:d8:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:22:51:0C:86:B9:6D:4C:23:37:C3:2B:60:4F:F0:16:27:3D:70:38
            X509v3 Authority Key Identifier:
                keyid:F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:44:c4:72:f6:1c:15:11:ef:00:10:f6:fa:e4:60:b8:90:b5:
         1a:4d:ef:7e:9d:6f:34:04:a6:e0:e3:d3:d1:47:11:2d:f3:36:
         b3:50:02:5e:24:fb:c0:42:1f:b6:91:55:f2:24:f5:6b:2f:c8:
         0f:30:6b:10:d3:ba:be:2e:f8:b1:cc:37:cc:7b:96:fb:a5:8d:
         0e:64:ac:de:a7:3c:63:f7:d7:24:36:72:1e:85:ab:17:1b:a7:
         78:a0:54:d6:f7:62:c4:dd:ec:91:be:7b:2f:ed:2c:53:17:02:
         ac:2e:49:5e:d0:25:76:ee:2c:3c:16:c3:65:68:f8:0d:25:6f:
         45:fd:fb:a0:ed:73:b0:6a:fa:38:e2:32:4e:11:bc:ba:3a:77:
         e3:ba:66:4c:13:83:9c:b8:72:8c:72:b9:b3:ed:7a:c4:d0:df:
         49:c9:c6:d7:de:a0:83:32:db:3b:b1:bd:db:81:38:9d:3d:17:
         4e:e8:68:e4:28:0b:5a:57:79:c9:82:1e:57:40:da:aa:f9:77:
         37:5a:9c:8e:2d:4c:d5:6d:d4:77:31:ae:03:ef:cc:bb:20:cc:
         28:76:db:71:2d:c1:12:44:0a:6e:e4:99:86:8d:24:04:a0:ea:
         97:1d:19:8b:66:a0:70:18:6c:c7:1a:b3:d3:e8:a8:5e:c3:46:
         64:6a:d1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----