Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
File:                     XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json)
Hash identifier:          vh+4fb09WSJ4CoNZY8xWcYHwSvZSOWjj2o5okN25/HA=
Subject key identifier:   FE:BD:1E:E0:0F:2E:DA:1F:AE:90:7E:08:15:99:77:0C:A7:33:D0:59
Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
Certificate issuer:       /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Certificate serial:       019356F6B25BA8AEB22C3AA1CAE62B031ADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
Manifest number:          02C0
Signing time:             Sat 23 Nov 2024 03:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:28 +0000
Files and hashes:         1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: cmM6sg0X6cMBhuBU6UyZMJOrpUyeKjStxb49T38gZyU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:b2:5b:a8:ae:b2:2c:3a:a1:ca:e6:2b:03:1a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
        Validity
            Not Before: Nov 23 03:00:28 2024 GMT
            Not After : Nov 24 03:00:28 2024 GMT
        Subject: CN=febd1ee00f2eda1fae907e081599770ca733d059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:66:e4:2f:95:4f:fd:b3:72:5c:9e:2f:c7:
                    35:97:54:80:91:dd:b8:de:89:58:5e:79:43:b7:23:
                    b9:4b:e4:c8:f9:22:80:c8:e2:ba:2b:82:57:e5:44:
                    a4:1e:89:ff:f2:1c:44:d6:e4:f6:17:0e:ca:2a:48:
                    b6:dc:7d:f2:5a:da:b9:4b:62:f4:4b:65:78:50:c2:
                    ed:bd:13:0e:e1:62:cc:89:dc:1e:0b:0c:ac:f7:38:
                    05:7b:39:6c:f8:5a:42:bc:72:1d:0c:fd:76:6e:7b:
                    15:dd:58:87:43:44:1f:59:60:9b:7e:d5:12:f9:30:
                    1f:7d:44:c4:30:96:33:be:fe:ed:62:cd:ae:ab:b1:
                    1b:f9:01:30:72:28:13:5d:b1:39:65:4e:e1:8d:4d:
                    73:a0:6e:fe:48:a7:67:82:b6:8e:ac:f8:63:65:7b:
                    87:23:f6:15:71:a4:eb:3c:52:ef:5f:6c:30:2c:9b:
                    1a:3e:e7:fb:a3:b8:41:e1:78:2f:97:6c:64:02:5f:
                    e5:91:84:95:9d:f7:31:91:5f:a8:c7:8f:06:93:b3:
                    8c:e9:a3:97:55:0d:c3:88:92:2b:1c:d2:e2:63:c7:
                    db:cc:83:e5:21:51:f9:5b:e6:ba:86:4e:fc:d8:46:
                    39:ee:c6:c4:db:03:0b:cf:1f:3c:16:d1:29:ea:d6:
                    f5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BD:1E:E0:0F:2E:DA:1F:AE:90:7E:08:15:99:77:0C:A7:33:D0:59
            X509v3 Authority Key Identifier:
                keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c5:d6:be:77:e9:03:95:69:7a:76:6d:5f:e8:1a:c7:73:54:
         43:75:26:82:78:78:cf:fe:1b:3c:78:8b:34:aa:ea:53:24:5e:
         d9:7b:14:d3:5b:24:c3:54:b9:af:e4:ce:06:b8:36:26:94:83:
         db:8e:7c:cd:c0:7c:32:d9:c6:b5:a9:48:96:d4:4b:15:dd:c6:
         1e:c1:b6:86:ed:42:08:27:7d:78:1a:7d:cd:5b:34:69:32:b3:
         41:62:2e:c2:9b:a7:9e:2f:83:5c:d8:5c:48:44:ca:f5:32:e7:
         4c:65:b1:35:32:63:cd:f3:e9:e2:4d:b1:33:5d:38:0f:c5:8b:
         65:d6:1b:e7:02:62:1b:8d:53:36:b6:e6:d6:92:61:b5:69:7b:
         51:f1:fa:c6:af:a1:ad:13:5e:fe:5d:56:86:e0:7b:44:80:8d:
         69:cf:0b:a3:7f:6a:9a:d1:82:8d:9f:d3:ef:de:db:d4:ba:49:
         03:9a:26:ca:e0:8d:7d:92:f2:e3:a7:d8:32:a5:7e:8f:0d:65:
         be:80:bd:86:db:72:40:f5:f9:7b:fe:4d:ee:63:d9:02:63:ac:
         bc:2d:d5:99:93:54:d8:5e:b7:2d:8f:ef:b9:2a:99:aa:49:8f:
         f2:d5:f8:03:b3:9e:4c:52:85:ea:17:27:42:f9:bd:4e:ae:8e:
         af:b7:41:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----