Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c067fa-40df-4991-96dd-8ad159fc5f57/1/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.mft
File:                     A3RkgDaDsSMWDRuUfBfCv8QO0Kc.mft (raw, json)
Hash identifier:          akfsQ71kTloAWcpFGi4yVXMcBZTCdAFT5m3UQqGEy9Q=
Subject key identifier:   46:DC:08:2F:57:33:8E:1E:14:B0:C9:CD:A1:AA:15:2B:99:75:91:5D
Authority key identifier: 03:74:64:80:36:83:B1:23:16:0D:1B:94:7C:17:C2:BF:C4:0E:D0:A7
Certificate issuer:       /CN=037464803683b123160d1b947c17c2bfc40ed0a7
Certificate serial:       019357D2E42435054D5839CE9566D74325D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c067fa-40df-4991-96dd-8ad159fc5f57/1/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.mft
Manifest number:          0298
Signing time:             Sat 23 Nov 2024 07:00:58 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:58 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:58 +0000
Files and hashes:         1: A3RkgDaDsSMWDRuUfBfCv8QO0Kc.crl (hash: V/VEyrBfj1Ih3sjxgsx3TTga9vDV0Q5PYt3NxZ1MlRQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/c067fa-40df-4991-96dd-8ad159fc5f57/1/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/c067fa-40df-4991-96dd-8ad159fc5f57/1/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:e4:24:35:05:4d:58:39:ce:95:66:d7:43:25:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037464803683b123160d1b947c17c2bfc40ed0a7
        Validity
            Not Before: Nov 23 07:00:58 2024 GMT
            Not After : Nov 24 07:00:58 2024 GMT
        Subject: CN=46dc082f57338e1e14b0c9cda1aa152b9975915d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:08:70:65:f4:64:d0:8a:dd:09:c2:d7:6a:
                    91:00:44:91:3c:74:ac:f2:b4:0c:39:31:4f:bc:95:
                    a4:86:ba:e4:bc:e8:b9:fe:da:29:05:da:4c:68:3c:
                    f4:5d:62:17:3b:22:32:e4:13:46:7e:bb:0c:bb:cb:
                    d0:73:07:63:c6:a2:79:63:29:6b:72:b6:45:65:ea:
                    02:2a:e0:27:46:de:7e:ac:c7:44:5f:36:b6:56:ea:
                    92:47:e7:e1:cc:d0:9c:cb:c1:b9:9c:d6:c8:8e:b8:
                    4a:58:1e:ac:4b:2d:8d:1f:c3:b0:7c:74:25:61:b7:
                    31:36:82:0a:27:d8:73:7c:36:de:0f:f8:f8:1f:47:
                    bb:4a:cd:c7:cf:9f:5f:ba:9a:31:ba:04:9d:bb:6e:
                    51:e8:07:de:71:5b:16:d3:77:eb:1f:05:9b:1f:10:
                    33:9c:8f:c3:3f:1c:04:68:5a:d3:2c:4f:ee:ae:e6:
                    48:cc:9a:68:8e:87:a2:20:47:0f:5d:d3:aa:22:ce:
                    df:bb:e0:8b:79:d8:7c:ce:8f:ac:c0:bb:98:db:fd:
                    27:97:68:8f:dc:1f:3f:8f:88:f9:e3:39:f9:67:b5:
                    cd:f6:a7:10:5e:bb:1b:ed:5b:a9:56:e9:82:db:35:
                    5b:d9:1a:65:3e:ad:50:13:81:50:21:93:74:c0:35:
                    1d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DC:08:2F:57:33:8E:1E:14:B0:C9:CD:A1:AA:15:2B:99:75:91:5D
            X509v3 Authority Key Identifier:
                keyid:03:74:64:80:36:83:B1:23:16:0D:1B:94:7C:17:C2:BF:C4:0E:D0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c067fa-40df-4991-96dd-8ad159fc5f57/1/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c067fa-40df-4991-96dd-8ad159fc5f57/1/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:00:4a:a2:a4:ad:91:c1:59:3b:4e:12:a8:64:29:5a:73:24:
         cb:14:99:0d:84:62:61:f9:26:16:d8:a6:4f:56:4b:e2:8e:f1:
         33:e3:6b:8b:11:97:56:10:27:6a:91:ab:17:0f:8d:89:e9:30:
         68:ed:5a:f8:4f:cf:d1:91:c4:9b:4d:b6:0f:27:3a:ed:74:cf:
         82:8d:0f:67:8a:b4:88:fd:ec:bb:86:b6:90:cf:96:fb:5f:ff:
         33:3b:81:a6:ac:fc:12:e4:00:33:41:eb:1b:30:c7:2e:e4:96:
         6d:43:e8:b8:8a:f5:70:2d:fa:dc:db:8a:07:93:3a:7d:a1:ce:
         10:cb:42:f7:b6:64:4e:6c:4b:5e:fb:4e:a2:e2:bf:e7:1f:cd:
         6c:ee:8f:7a:95:71:c0:45:07:44:9e:ab:aa:89:0b:ea:07:7d:
         21:9a:1f:43:04:e6:4f:c2:31:08:ae:ea:e3:7c:f2:aa:d1:47:
         94:c6:85:ba:77:75:c1:13:0b:fd:01:87:c2:3b:c2:2e:48:e7:
         b5:5f:97:24:53:0b:ee:88:15:31:0e:fd:19:76:39:38:5f:43:
         b5:cd:5e:24:cb:26:5b:4d:e2:3a:73:12:1e:cc:d7:a4:f3:55:
         eb:6b:fd:ed:96:23:d8:50:15:8a:9f:2d:04:a2:9f:77:46:42:
         3a:45:75:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----