Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
File:                     zv4YrJccgqd399sZ_6szSjJTdwM.mft (raw, json)
Hash identifier:          nzTRXVleQ2hw6fWVLMzCiwbuYdkypzLZCa6A8OJ/GiU=
Subject key identifier:   5D:C4:AA:46:CA:E0:25:76:B6:EF:03:31:6F:EB:F2:2F:B0:D4:53:EE
Authority key identifier: CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
Certificate issuer:       /CN=cefe18ac971c82a777f7db19ffab334a32537703
Certificate serial:       019357D28F12DDB33D522A340A3D0075D65B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
Manifest number:          0E24
Signing time:             Sat 23 Nov 2024 07:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:37 +0000
Files and hashes:         1: zv4YrJccgqd399sZ_6szSjJTdwM.crl (hash: n0zenzXdeGahBO+5eXHkcXPwU/zalpSsPuFzC24MEtw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:8f:12:dd:b3:3d:52:2a:34:0a:3d:00:75:d6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefe18ac971c82a777f7db19ffab334a32537703
        Validity
            Not Before: Nov 23 07:00:37 2024 GMT
            Not After : Nov 24 07:00:37 2024 GMT
        Subject: CN=5dc4aa46cae02576b6ef03316febf22fb0d453ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:46:66:d7:37:2a:97:e3:1d:65:53:ec:bd:
                    b7:ae:03:5f:c1:41:d8:c3:bd:68:d5:7f:95:2e:36:
                    27:02:a0:95:88:fc:46:b0:6c:d0:9f:82:93:01:5b:
                    89:eb:85:d3:28:db:00:d1:39:15:db:53:76:02:2b:
                    72:81:d7:dc:f4:3f:54:cf:9f:83:b5:5b:71:8a:06:
                    60:67:01:d9:d9:e9:b4:7b:d6:7c:ec:3b:35:b9:50:
                    7d:3d:2f:85:3b:ab:96:f3:6a:c9:08:90:ec:c4:ac:
                    d5:f0:18:aa:62:4c:a9:c5:49:79:9e:a2:0c:57:81:
                    48:27:9a:db:32:e5:09:f8:a9:ee:ff:f9:ca:c2:8d:
                    95:38:19:1d:43:0c:75:c2:fe:20:92:49:90:57:f8:
                    9c:f0:a3:f4:84:1d:ef:17:1f:cc:45:d5:1c:39:cf:
                    76:27:66:80:a6:8b:17:43:01:15:fb:81:e2:03:b7:
                    38:77:85:49:ba:87:b1:a7:cb:aa:b5:71:73:c4:22:
                    74:1b:a6:75:07:dd:bc:aa:8c:d0:a2:dd:43:a5:fd:
                    2f:24:6f:c4:52:59:fc:3d:64:b8:9c:75:6f:5b:70:
                    48:80:85:cc:90:13:a6:3a:44:0b:32:f5:f0:7d:d9:
                    f3:69:f1:02:db:dd:8b:8c:a8:2f:c9:23:18:78:ff:
                    cf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C4:AA:46:CA:E0:25:76:B6:EF:03:31:6F:EB:F2:2F:B0:D4:53:EE
            X509v3 Authority Key Identifier:
                keyid:CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:85:a3:20:8b:ce:2e:60:77:ed:ca:fa:6c:bd:c3:53:77:44:
         78:7c:cc:8b:45:c8:3f:2b:ac:3e:33:1b:c4:94:33:4b:6d:d4:
         b1:07:59:50:1e:99:ae:8a:af:f4:af:4e:74:10:db:3c:b6:15:
         bf:6b:5f:77:fc:d0:ee:59:1f:ca:a8:f2:44:2d:23:18:75:97:
         87:42:c7:8c:fa:bd:27:52:87:99:6b:c3:58:a7:0d:ce:e4:f9:
         ec:a7:a7:69:55:25:cc:66:4c:7b:34:cd:b8:fd:99:2f:7d:86:
         c4:2c:c6:fc:fe:67:82:af:94:1b:43:5f:13:98:a1:24:3b:87:
         1f:dd:da:1d:88:f9:b6:7e:6b:ed:49:89:cf:de:4b:66:f6:74:
         47:6c:13:3b:e8:53:78:73:2c:21:68:ed:63:7c:6a:e9:9f:e9:
         bb:5d:66:a8:c4:4a:60:c8:8a:34:8f:11:df:00:b0:cf:2d:9a:
         a2:e1:a9:9a:39:1c:b8:5d:06:43:3b:a6:ca:0b:ca:cb:10:af:
         63:99:e0:6f:3f:ea:54:f2:b2:d7:3a:6b:5e:4d:84:7b:dd:96:
         12:4a:01:a9:f1:bf:df:fc:34:5a:1b:21:30:54:f7:f4:01:86:
         48:65:b0:7f:c0:b7:69:a3:b5:e6:68:73:9d:76:b6:5d:34:7d:
         b5:3c:e0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----