Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
File:                     d_bMQsdY59p8S_q8ISEtHSghYDE.mft (raw, json)
Hash identifier:          18GpuQxHshwu7GVFC8y5PBpwNNnmZvu2Jkz06L3kXfQ=
Subject key identifier:   62:50:64:F0:8D:AA:03:D0:EB:3B:75:A3:32:41:B8:A9:16:DE:9B:58
Authority key identifier: 77:F6:CC:42:C7:58:E7:DA:7C:4B:FA:BC:21:21:2D:1D:28:21:60:31
Certificate issuer:       /CN=77f6cc42c758e7da7c4bfabc21212d1d28216031
Certificate serial:       01936669E095785190367E890EAD93C580B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
Manifest number:          0342
Signing time:             Tue 26 Nov 2024 03:00:35 +0000
Manifest this update:     Tue 26 Nov 2024 03:00:35 +0000
Manifest next update:     Wed 27 Nov 2024 03:00:35 +0000
Files and hashes:         1: d_bMQsdY59p8S_q8ISEtHSghYDE.crl (hash: XtWnt/o1+zooL+2ZIRfJoDOEF5OF4EGjVd9RtfDDLro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:69:e0:95:78:51:90:36:7e:89:0e:ad:93:c5:80:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f6cc42c758e7da7c4bfabc21212d1d28216031
        Validity
            Not Before: Nov 26 03:00:35 2024 GMT
            Not After : Nov 27 03:00:35 2024 GMT
        Subject: CN=625064f08daa03d0eb3b75a33241b8a916de9b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:b1:d6:ab:22:fa:27:d8:19:31:bf:c7:7b:
                    be:28:19:f0:2b:d4:a0:05:ec:ec:e3:43:0e:2f:ef:
                    46:4d:c0:9b:9f:1c:a4:37:87:00:86:63:ed:4b:3f:
                    41:c8:5a:3e:f0:3c:a1:8d:c5:cf:fc:1e:b5:30:d5:
                    e7:62:03:42:51:67:45:af:ce:4d:fb:55:bd:ec:d4:
                    9c:52:02:d8:46:9a:da:04:d5:f4:61:9a:8c:35:9d:
                    88:89:b3:03:56:f5:ff:d6:24:b4:c1:48:8a:e0:81:
                    f7:5d:ea:52:15:f6:96:1a:56:2f:30:4d:b0:b6:98:
                    c0:9d:43:66:7a:1d:a0:72:5b:b2:eb:3a:02:c6:ae:
                    f4:11:dd:b4:7a:14:02:d9:42:94:36:5d:1f:0e:97:
                    3a:0b:72:68:ff:33:9a:79:3a:2f:a7:11:0b:de:fb:
                    cb:d7:d6:19:c1:b9:d5:57:19:23:19:a4:cd:88:17:
                    34:90:4f:f7:8d:e2:10:cf:f0:d8:6b:53:7e:01:c8:
                    82:ae:2b:6f:37:2c:bf:91:90:6f:10:ea:90:c4:10:
                    12:ec:41:50:8d:89:8f:51:5f:8b:43:96:f3:bc:d8:
                    13:38:1b:f2:cd:4c:1d:3b:57:32:55:c0:54:cf:cf:
                    e5:e2:b3:85:c5:71:be:fe:f5:4a:b4:3e:56:ea:13:
                    c3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:50:64:F0:8D:AA:03:D0:EB:3B:75:A3:32:41:B8:A9:16:DE:9B:58
            X509v3 Authority Key Identifier:
                keyid:77:F6:CC:42:C7:58:E7:DA:7C:4B:FA:BC:21:21:2D:1D:28:21:60:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:21:45:88:3b:81:29:bd:25:f7:30:58:ab:9a:26:6d:f0:db:
         7e:fc:2c:56:8d:4c:8e:fd:6a:92:24:c3:a4:a4:e4:b4:64:45:
         4c:3f:fb:37:b9:0a:95:14:04:0c:83:00:f4:a9:4d:00:3c:91:
         61:af:3c:32:e4:f9:fd:ee:05:80:71:26:59:eb:6b:0d:07:98:
         f4:81:03:e3:51:16:03:93:ae:19:cf:16:b6:ef:f3:88:58:a1:
         39:c0:56:54:4c:15:9e:93:af:fd:b9:29:20:02:1d:99:11:06:
         84:5b:69:fa:dd:20:ab:c1:f7:7a:7c:d9:b7:52:a2:24:7d:3d:
         8f:6e:9d:2f:8f:3f:bb:4b:cb:f4:f1:97:09:ec:c2:f5:67:df:
         6a:33:d7:2b:90:59:25:37:81:24:7e:80:52:41:4c:6f:01:fc:
         03:ab:b2:f5:7a:e2:d8:a9:f9:cd:13:99:ea:15:0d:56:55:14:
         3e:64:7b:50:7d:18:ba:26:18:1d:3f:6c:2f:87:6f:fa:e7:68:
         82:f3:fa:19:eb:28:cc:23:de:87:d4:41:b2:bc:44:b1:be:d2:
         c0:ae:46:6e:0a:d0:39:06:0f:cf:c6:a9:81:de:29:b4:9e:99:
         ee:6b:b0:57:90:96:4a:cc:e9:c7:8a:f8:91:a0:75:23:d5:a9:
         90:c6:9b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----