Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
File:                     u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft (raw, json)
Hash identifier:          PtT7h2KpZEVh4kDDdKZYQzKXwFvbqjfOZmoA5Zc8H0U=
Subject key identifier:   F3:55:A9:B3:0C:59:B3:ED:E5:E4:20:71:37:AE:63:C7:E8:12:24:6A
Authority key identifier: BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
Certificate issuer:       /CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Certificate serial:       019354D1349D4921858801BC47DB8A317301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
Manifest number:          F7
Signing time:             Fri 22 Nov 2024 17:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:16 +0000
Files and hashes:         1: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl (hash: bHCzgJ9dFfm52wYGm8B/cXIUh1qSypSiIstQNfVYae0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:34:9d:49:21:85:88:01:bc:47:db:8a:31:73:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
        Validity
            Not Before: Nov 22 17:00:16 2024 GMT
            Not After : Nov 23 17:00:16 2024 GMT
        Subject: CN=f355a9b30c59b3ede5e4207137ae63c7e812246a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:83:8f:7b:a9:ad:75:a6:b8:07:d9:2d:18:
                    f5:24:89:0c:2e:b9:73:04:01:14:61:38:96:38:95:
                    b7:fb:0f:25:2b:f8:4f:c3:fb:43:e8:c8:6e:83:df:
                    d4:db:3f:00:93:41:96:59:b5:dc:d1:7b:f0:c5:0f:
                    e2:75:52:09:43:19:58:0d:4a:d2:4a:51:4f:89:7b:
                    08:22:23:53:20:8e:dc:6d:e7:5a:42:46:3c:30:31:
                    42:bb:8e:55:ff:99:3f:0d:b7:ac:55:64:28:2f:f8:
                    ed:71:8a:5e:40:0d:d3:b6:b5:d4:b5:42:44:9a:00:
                    65:d9:2c:8d:ac:0a:4a:e8:d2:a2:42:59:2d:fa:d6:
                    e8:26:6f:82:68:1a:bd:ba:9b:9d:b4:b3:37:06:b2:
                    bc:d2:ef:1a:4e:18:9c:dd:bc:16:86:73:b3:92:4c:
                    de:bf:a9:06:f1:05:ac:a6:e6:a5:c3:6f:02:f2:81:
                    b3:a4:3f:e2:c7:01:42:01:35:e2:10:0c:d1:a8:9e:
                    11:48:4a:05:b6:45:c0:90:7e:5e:20:ca:5c:bc:54:
                    52:94:26:10:b2:1d:de:cd:98:12:20:a9:87:0f:67:
                    78:a9:24:01:ae:28:8f:5f:1c:91:a8:9a:87:dd:e2:
                    e5:83:df:ee:ac:c6:9a:79:42:be:3b:59:4e:b7:52:
                    b9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:55:A9:B3:0C:59:B3:ED:E5:E4:20:71:37:AE:63:C7:E8:12:24:6A
            X509v3 Authority Key Identifier:
                keyid:BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:2c:c0:f9:44:f7:30:aa:22:1d:59:f9:85:66:12:1e:9a:64:
         4a:5b:73:cc:8c:6c:5f:a7:15:82:52:00:55:4c:35:8d:31:fe:
         30:c6:0a:3f:eb:58:42:fc:77:36:29:a0:db:ca:72:12:46:a4:
         43:4c:bc:69:47:0f:93:a8:2c:9a:0a:61:7c:89:be:98:7d:a0:
         b5:87:5a:6e:cd:7a:d5:3c:53:74:51:66:95:c2:09:91:a6:42:
         5c:7d:61:c3:c7:7b:af:ef:d6:75:85:69:40:ce:c7:0f:6e:d5:
         af:67:3a:a0:df:8e:a4:43:b0:d0:36:52:2b:7b:c7:6c:94:60:
         a3:3f:1c:18:30:a9:41:2e:6a:60:1a:fb:93:81:ae:89:e8:c1:
         d2:24:02:33:09:c5:c3:f0:6b:e4:22:4a:78:72:0a:c7:ea:68:
         d0:43:53:e9:d9:f7:12:32:f9:af:99:10:60:75:e2:86:00:f4:
         86:16:e3:97:67:58:71:40:cc:6d:b4:a0:f6:c0:83:d2:4b:9f:
         41:ba:1e:ff:17:4a:6b:0b:ca:29:83:2f:9c:5b:f0:c0:00:2c:
         7b:17:b9:bb:1d:9b:6c:74:94:34:61:a7:38:5a:fa:ed:6b:29:
         63:38:55:61:1e:81:dd:60:92:b3:bc:a2:dc:e7:13:92:a7:d0:
         6e:ed:75:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----