Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
File:                     pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json)
Hash identifier:          66pX8L4/NF9niz62PNvkx1avC7b8QrNt2c8pRNtFhfM=
Subject key identifier:   A6:17:02:1B:3A:14:06:64:77:E1:5D:FD:0A:4F:9B:6C:24:41:0F:A3
Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Certificate issuer:       /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Certificate serial:       019369DA1815975B3AC3BC53D2953A51A027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
Manifest number:          058D
Signing time:             Tue 26 Nov 2024 19:02:00 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:00 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:00 +0000
Files and hashes:         1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: 2ZNaBv6MCszX7G/z0lBHJwakvwHe6lUO0so3UorwB5k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:18:15:97:5b:3a:c3:bc:53:d2:95:3a:51:a0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
        Validity
            Not Before: Nov 26 19:02:00 2024 GMT
            Not After : Nov 27 19:02:00 2024 GMT
        Subject: CN=a617021b3a14066477e15dfd0a4f9b6c24410fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:bf:4d:5c:cf:52:46:89:ac:10:64:d4:a2:
                    1c:86:76:4e:d4:ed:c7:d8:ac:9f:18:df:79:0a:e6:
                    70:40:7a:d0:29:ed:90:48:fe:5d:59:c0:e6:5c:92:
                    0e:56:b8:f0:66:d2:36:de:0d:cb:b8:d0:f4:e6:3b:
                    35:25:ea:f4:7e:fc:98:fd:41:95:78:f0:23:d0:aa:
                    78:d7:69:c5:3e:a4:ee:21:1e:dc:46:91:1b:ce:90:
                    8a:30:8b:c7:cc:4b:3e:ce:79:70:03:b0:58:32:7f:
                    3a:04:34:2c:ac:a7:2b:49:e5:cf:b1:aa:d2:61:86:
                    09:7a:79:02:8f:78:4e:1c:84:0e:99:d5:a8:ae:d7:
                    49:b6:ca:7b:91:fc:4f:35:0f:b4:7f:29:d5:ee:86:
                    8a:03:74:3b:71:e8:ea:5e:06:e5:28:2b:ec:49:40:
                    c8:b1:05:83:af:07:ab:d4:f7:46:ff:85:bd:e8:e5:
                    81:e7:d0:e9:a1:cc:fd:70:c9:6b:82:1b:f2:b0:2e:
                    ba:e8:69:69:94:49:c7:fe:d8:13:80:70:39:4e:43:
                    52:4d:6e:af:4d:a4:c6:14:60:e8:96:27:27:25:1f:
                    15:07:42:87:d8:42:bc:97:49:cf:42:c3:a0:af:2b:
                    b3:06:4f:e4:eb:f4:b1:2d:3d:fa:cb:0e:5c:7f:4b:
                    1e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:17:02:1B:3A:14:06:64:77:E1:5D:FD:0A:4F:9B:6C:24:41:0F:A3
            X509v3 Authority Key Identifier:
                keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:67:ae:f3:67:66:4d:51:a0:99:df:a2:cf:a0:f2:1c:c8:f1:
         9c:03:f9:22:51:53:63:3c:eb:f2:44:94:35:6d:00:7e:5b:61:
         b5:c6:f1:5e:d2:d4:58:7f:3b:87:dd:d8:d8:03:12:fa:3f:fc:
         89:af:6e:11:18:e7:75:ae:f1:cb:d9:5e:cb:02:97:ed:bd:65:
         26:d3:67:06:cd:c3:3c:7e:3a:39:19:b5:13:b1:6f:7a:83:ad:
         ed:b8:22:70:2c:51:31:24:ea:3c:a6:53:f1:96:02:63:a7:9e:
         d9:a1:c4:e1:8c:1d:a3:9f:ef:ed:4d:b5:4c:4d:4c:15:53:2c:
         95:a0:62:dd:ae:d9:5d:f6:28:dd:36:d3:7e:55:e9:cd:64:fa:
         08:bc:86:1f:cb:31:30:92:5b:3f:22:43:ab:24:a7:db:0b:9d:
         66:1a:69:b3:d1:01:a0:85:85:86:f6:5c:c1:c2:ca:c0:e8:94:
         a8:4a:bc:d2:3d:a2:9b:0f:ed:86:83:da:91:32:74:68:43:66:
         84:b0:28:31:f0:4c:8e:99:17:31:8d:be:e6:4e:4c:f1:04:f9:
         89:33:15:55:d8:d7:2d:67:e5:30:9c:7d:f5:47:45:e5:c9:8d:
         4c:b0:26:b7:c7:ad:4a:57:ab:7b:12:ef:e2:d8:14:d6:18:b2:
         c6:14:16:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----