Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File:                     8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier:          kOu5YY9h3ikQHWXao7GNr+KEZnvu+gtvVSSRIsvf2pg=
Subject key identifier:   30:26:4C:24:A9:0A:A3:6E:FC:D7:6D:B1:33:78:56:D8:A8:52:00:34
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer:       /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial:       019406470C97462CBD9E8AE07369537A2C1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number:          13C9
Signing time:             Fri 27 Dec 2024 04:01:47 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:47 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:47 +0000
Files and hashes:         1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: nyaNgjh/3BYvLT2xt+Q6OR6ln6OPfQDEktI6Ifuvg5s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:0c:97:46:2c:bd:9e:8a:e0:73:69:53:7a:2c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
        Validity
            Not Before: Dec 27 04:01:47 2024 GMT
            Not After : Dec 28 04:01:47 2024 GMT
        Subject: CN=30264c24a90aa36efcd76db1337856d8a8520034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5c:63:4e:c4:b0:08:75:00:b7:14:57:d9:89:
                    c1:fb:e5:bd:c8:46:cf:9c:7d:dd:25:31:1f:13:e3:
                    7b:26:db:08:90:d4:72:3e:a9:08:20:cb:33:13:b5:
                    82:0e:ba:c9:09:b2:a6:55:a6:f1:4e:0b:3f:5d:4b:
                    7c:1b:01:d2:d0:4d:66:ac:a7:64:40:d2:b1:81:ec:
                    d2:dd:c5:bf:10:5d:dd:05:ea:7b:fe:88:28:9e:db:
                    0f:7c:60:3d:e0:0c:64:f4:03:64:b8:74:99:23:87:
                    c4:de:af:cc:8e:b2:23:46:ca:fd:7b:a7:c0:93:c7:
                    f9:03:8e:19:e5:2f:85:07:28:d9:9b:e9:76:2f:58:
                    1e:e1:1f:c1:86:d1:3c:b6:f9:95:f5:2c:4b:ab:ff:
                    c2:5c:65:1e:2a:b1:ea:03:e0:d5:c4:09:ef:e1:82:
                    3d:37:dc:ee:00:47:39:64:2c:f9:82:9f:69:31:cc:
                    48:42:fb:9f:a5:83:a2:3c:97:5b:d7:9f:e5:23:9e:
                    31:8e:d1:09:3f:0a:b9:fa:ce:38:04:7f:58:bb:4b:
                    b9:3f:30:40:fe:75:20:fe:08:1a:ee:33:42:9a:37:
                    ed:3d:f3:d1:1f:ba:bb:49:f2:59:94:2c:6e:82:73:
                    93:6e:65:4a:e5:02:a8:b1:c5:4a:c0:41:f3:1c:aa:
                    8b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:26:4C:24:A9:0A:A3:6E:FC:D7:6D:B1:33:78:56:D8:A8:52:00:34
            X509v3 Authority Key Identifier:
                keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a6:c2:07:9a:08:39:44:35:1a:90:e8:b6:53:fa:69:c2:9f:
         a3:a9:b4:60:51:97:5f:c3:7c:92:45:64:d8:65:8c:5e:ef:70:
         0e:70:1b:1c:4c:65:1a:51:0c:e8:c8:39:1f:e9:c3:6f:df:24:
         49:12:a9:44:1b:57:cf:ec:f6:81:48:e2:2b:cc:f1:b6:3e:da:
         e8:4e:bf:b1:3a:16:e4:aa:81:e1:63:5c:fb:ea:93:3f:a3:f7:
         9b:d2:a7:ac:e0:79:71:ac:a1:bd:ba:65:03:cc:8d:09:22:13:
         a4:0c:54:25:bb:3a:37:0e:2c:9c:d4:7a:35:72:73:19:ac:12:
         52:39:78:c2:88:fa:7a:9f:94:9f:c0:95:1a:7a:66:81:ec:42:
         44:ab:02:16:67:c1:6c:ca:73:6f:3f:34:2d:46:6d:5a:4f:75:
         9b:2e:1b:84:e8:68:a2:5c:0f:36:e0:a3:f8:1c:d7:f6:06:5f:
         6d:90:62:bb:32:ef:66:78:5c:1a:d4:12:23:92:e6:44:20:4f:
         4a:aa:b3:81:da:7b:1c:69:f2:27:d7:bb:04:57:13:c9:a4:c7:
         bb:9c:60:20:55:4e:46:ef:de:f6:e6:a4:38:97:10:50:d0:bc:
         56:e0:6f:19:c7:bb:31:82:86:8f:e2:62:4e:63:d4:45:ad:86:
         b2:31:2c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----