Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File:                     1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier:          bgl/NFUYk+oNH6BsuUweEofY0md6eo6KfD1KmhMp0QI=
Subject key identifier:   41:91:59:59:DA:6C:34:8B:F9:F7:D1:CB:C4:51:36:F3:CE:B5:75:4A
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer:       /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial:       01936AEB9A9BD49178D716880CC21458C5F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number:          042A
Signing time:             Wed 27 Nov 2024 00:00:45 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:45 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:45 +0000
Files and hashes:         1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: 5gIi+Z3JqsMjQPyUkwoac4INvA49AKBDhayKYSkKWXY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:9a:9b:d4:91:78:d7:16:88:0c:c2:14:58:c5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
        Validity
            Not Before: Nov 27 00:00:45 2024 GMT
            Not After : Nov 28 00:00:45 2024 GMT
        Subject: CN=41915959da6c348bf9f7d1cbc45136f3ceb5754a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:95:6b:92:27:74:97:06:a1:10:53:46:b4:
                    c8:94:03:50:23:cd:a0:86:86:7f:5e:6f:a6:48:8c:
                    b9:cf:a3:25:c5:64:9f:13:d9:24:5f:c5:23:09:df:
                    d2:9d:09:5c:3c:2f:e1:0a:17:5c:3f:03:95:82:e8:
                    46:43:b9:b4:2d:09:e8:55:00:cd:46:cd:68:f2:61:
                    42:8e:3c:5e:bf:e5:c6:fb:86:72:e1:81:69:94:22:
                    51:82:f8:ad:f6:1b:71:b5:e4:d8:b3:49:62:d5:8f:
                    ac:97:36:2a:75:a9:b3:73:91:2f:b8:96:cd:77:80:
                    93:f0:12:29:10:91:f6:eb:d4:c4:1b:7e:9f:50:14:
                    0a:d5:69:23:59:f0:21:0c:91:12:44:40:3e:14:3d:
                    5f:97:11:92:f9:5e:0c:16:d1:3f:b3:96:3d:f1:3a:
                    44:a0:1c:9e:a8:54:d2:46:74:ca:02:52:11:55:d0:
                    0b:fd:47:db:83:1a:58:d6:a1:06:41:66:91:91:ee:
                    b8:a0:df:b2:f5:a4:82:b1:50:de:5e:12:a7:21:b1:
                    1c:d0:43:fe:c4:2c:8a:78:c3:33:68:f5:3c:a0:59:
                    99:ae:6d:20:fa:1c:8a:44:be:28:ed:a2:ec:88:99:
                    1a:9c:62:97:e5:98:8b:be:01:a5:92:6c:9b:e2:7d:
                    b3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:91:59:59:DA:6C:34:8B:F9:F7:D1:CB:C4:51:36:F3:CE:B5:75:4A
            X509v3 Authority Key Identifier:
                keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c7:f5:92:8a:7c:72:b3:20:91:32:ce:89:a0:0e:ec:1f:d8:
         d1:a2:9c:62:e6:be:7f:f4:0d:ab:29:10:7e:49:c2:8f:8c:f4:
         c8:36:0c:89:94:70:29:be:bf:d5:46:a9:47:e4:10:be:b1:e2:
         16:9f:65:6a:60:d6:7a:47:be:68:3e:47:f6:0e:d2:d3:bc:84:
         9e:ad:aa:9b:d3:b2:70:e4:b4:c0:6e:65:04:1d:cc:43:f0:a8:
         59:00:f2:f6:26:f7:6d:19:31:3d:c6:29:71:5b:2c:0e:40:f6:
         ff:eb:5f:1c:54:4b:5a:fb:59:2a:bb:83:d0:7a:a6:f5:c4:ff:
         bd:20:a5:7e:92:c8:43:2a:e0:e2:33:8e:c7:ee:e1:45:1d:ea:
         b5:88:bd:16:ae:18:02:8e:7d:61:00:99:0f:85:c5:f7:77:40:
         cc:42:8b:ed:7d:9f:5d:29:e8:fa:99:c4:df:39:d3:b1:a4:f9:
         bd:1a:d2:cd:15:ec:8f:81:c6:c9:85:88:e4:a0:df:64:b9:6e:
         d5:1a:03:eb:af:6e:ac:a4:ad:83:76:8d:fa:8b:46:24:72:66:
         75:11:45:9f:3a:c0:fe:ca:00:bd:3d:6b:96:8b:c7:35:51:68:
         5f:9f:e2:1d:19:d4:94:77:bf:34:06:a2:cf:02:d8:b9:cc:48:
         a5:68:9d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----