Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
File:                     YsD62Il-olgvlTB3ng5o6gjM5kM.mft (raw, json)
Hash identifier:          vqU4bXTlDwfRW9WLd3ekVxEBXzyfI2CAMAsTTcMYu1Y=
Subject key identifier:   E4:2A:32:C0:B5:24:8B:D3:30:DB:BB:2D:C0:81:85:9B:85:2F:4E:94
Authority key identifier: 62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
Certificate issuer:       /CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Certificate serial:       019358780AE05F1ED9BFFB5D2603FDDF4EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
Manifest number:          0456
Signing time:             Sat 23 Nov 2024 10:01:22 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:22 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:22 +0000
Files and hashes:         1: YsD62Il-olgvlTB3ng5o6gjM5kM.crl (hash: 5f0wrSHXceo2lzVda2vlqnRlv+Nl8XcrBWq4blXpFKg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:0a:e0:5f:1e:d9:bf:fb:5d:26:03:fd:df:4e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62c0fad8897ea2582f9530779e0e68ea08cce643
        Validity
            Not Before: Nov 23 10:01:22 2024 GMT
            Not After : Nov 24 10:01:22 2024 GMT
        Subject: CN=e42a32c0b5248bd330dbbb2dc081859b852f4e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b9:e1:84:48:83:b7:2b:cf:e5:25:f7:81:93:
                    4e:80:16:93:a3:aa:45:4b:6c:0f:4e:8f:ce:c1:5a:
                    5f:9b:89:16:96:60:c5:c5:fd:68:48:67:27:ac:7a:
                    64:d9:e1:e5:64:0f:39:40:c5:a4:f7:72:2d:c5:07:
                    00:9d:00:54:37:83:63:2d:a2:8b:c9:a9:da:df:0a:
                    fb:a2:0b:e5:b1:f5:1c:96:33:80:14:6e:3b:78:1f:
                    db:fe:2e:12:87:15:28:e1:60:fc:6e:cb:58:9c:0e:
                    61:07:c9:70:96:5a:7c:8c:a0:2a:01:90:30:36:8f:
                    c6:4e:09:8c:c1:c1:a2:50:74:7d:6e:a6:eb:49:0d:
                    2a:33:8b:d7:5f:79:33:78:5f:1c:67:d5:87:67:46:
                    3c:d3:69:31:54:af:8a:e9:a8:e0:da:28:49:64:84:
                    f2:39:82:67:65:d9:2d:44:c1:20:9b:42:3b:00:d8:
                    45:fd:af:38:55:d8:4b:38:77:33:01:af:45:dd:ad:
                    16:73:3f:35:7d:f0:0d:6f:ed:c7:70:64:f3:dd:93:
                    04:f9:6e:a5:68:7b:1f:f6:91:e4:a0:a7:73:cc:de:
                    72:50:b6:63:46:49:2f:21:47:b4:17:26:ba:e2:fb:
                    3c:ff:01:e0:f5:b4:64:e5:a4:d3:2b:d7:f7:b1:d3:
                    81:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2A:32:C0:B5:24:8B:D3:30:DB:BB:2D:C0:81:85:9B:85:2F:4E:94
            X509v3 Authority Key Identifier:
                keyid:62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b7:38:db:76:fb:bf:ba:d8:3c:45:8b:40:59:aa:2d:b1:d9:
         5e:af:ed:c0:5e:93:d8:a3:c5:20:47:9a:fc:ba:0f:74:99:30:
         6b:3c:49:7d:30:6b:03:df:87:2d:8d:48:67:d3:03:a9:40:ae:
         bb:44:fe:67:8e:b9:59:50:d7:81:c2:4c:53:d2:d5:9f:87:07:
         61:94:51:80:61:64:cb:43:0a:7f:87:3a:33:1f:ee:57:c0:40:
         c7:50:1c:03:87:6b:10:9c:fb:27:76:bf:62:f6:12:46:ba:73:
         24:44:07:f0:da:30:a8:77:eb:3b:ae:b9:ac:de:ed:b8:4b:73:
         6f:af:15:83:90:2e:1e:7f:de:11:85:10:38:9e:33:50:98:81:
         2c:d6:03:bd:d4:7c:e5:49:65:3a:3f:96:6a:5a:4b:8b:64:20:
         ac:26:ff:88:7c:a5:05:6c:2a:0e:4f:c6:04:74:20:06:99:42:
         40:63:63:17:34:7e:33:9c:e6:db:a3:eb:b6:ed:4f:cc:e4:7a:
         e0:6b:bf:21:a6:b4:70:2e:d4:21:7b:c1:a9:8a:df:a0:88:03:
         48:4e:48:d3:d0:80:07:47:6f:a3:05:1a:b8:52:f4:75:fa:64:
         4a:57:e8:77:1d:94:40:20:43:d0:f9:f2:12:f1:f7:bc:49:ad:
         0c:7f:17:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----