Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
File:                     nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json)
Hash identifier:          NA0Xz3HWvWTDoL68g4WQdSRuO0DgaVJ5bRecJkFTeBU=
Subject key identifier:   C6:A3:96:F9:72:31:5D:A3:C5:CF:5E:5E:BC:75:C9:85:31:6D:B7:AB
Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
Certificate issuer:       /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Certificate serial:       019356F6AA01860F0A7686676489F0C100A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
Manifest number:          136C
Signing time:             Sat 23 Nov 2024 03:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:26 +0000
Files and hashes:         1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: cI9leMOFx2A8RRl2PLD7EEvGOzyJjbL8r0O2XDBLjhg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:aa:01:86:0f:0a:76:86:67:64:89:f0:c1:00:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
        Validity
            Not Before: Nov 23 03:00:26 2024 GMT
            Not After : Nov 24 03:00:26 2024 GMT
        Subject: CN=c6a396f972315da3c5cf5e5ebc75c985316db7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:80:4b:67:e1:7a:e9:25:8d:7d:04:e2:2b:
                    36:d1:76:80:e9:ac:ed:14:d6:bd:9c:d9:7c:64:14:
                    87:77:06:8b:c6:83:70:cd:19:d4:31:9d:ed:53:96:
                    6b:b1:bb:2b:4d:32:de:1f:3f:a6:a9:01:da:dc:00:
                    e8:91:a9:52:9d:bc:f1:7a:a4:d6:9c:98:9e:09:76:
                    d9:b0:c8:58:78:36:01:e9:97:4c:e8:75:30:12:5b:
                    59:ce:74:21:ff:fe:a1:ac:7f:b4:65:0d:8e:9b:9e:
                    9b:07:e9:2f:2a:91:be:f2:71:2c:2e:e0:46:4d:95:
                    ba:59:db:0a:ff:b8:cb:54:a9:38:80:81:b3:13:3f:
                    bb:d1:ce:82:09:55:5a:de:c7:a4:f6:f4:2d:a1:8c:
                    32:89:f2:20:6c:4b:18:2e:e9:08:aa:90:87:d3:66:
                    79:e9:0e:a2:45:80:c4:9f:42:4f:3f:ab:8c:1f:f4:
                    d0:f9:75:3f:e0:8d:a7:07:ba:a3:27:15:5a:d1:41:
                    9d:36:a6:26:80:4b:eb:e9:57:95:3d:f9:2a:3e:aa:
                    df:e8:e5:c3:51:65:02:d5:4c:ae:53:ad:9d:ab:28:
                    f2:e5:8d:05:7f:81:3a:86:02:d6:f1:d4:9c:ec:17:
                    13:1e:39:5b:c6:cd:a0:97:3f:b5:c9:4d:13:81:7f:
                    e5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A3:96:F9:72:31:5D:A3:C5:CF:5E:5E:BC:75:C9:85:31:6D:B7:AB
            X509v3 Authority Key Identifier:
                keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f8:7f:d0:8a:f5:92:d8:cc:b9:16:1b:f7:85:63:1c:e0:c8:
         e7:20:9f:88:ba:03:08:4a:5a:1b:21:45:a5:78:aa:21:93:3b:
         36:2a:27:a1:03:49:09:5a:d1:1c:73:62:7b:53:be:a1:04:c2:
         d2:8e:ee:7b:50:51:58:47:07:62:1a:98:17:0c:c5:0d:83:d9:
         44:47:28:cf:54:d3:3a:a8:7f:17:6f:ee:c2:d6:0d:89:6b:0d:
         3b:ff:3c:f7:1d:1f:73:5c:16:4b:91:58:c0:b9:99:31:52:25:
         36:2f:e6:cf:e4:f4:26:0e:79:5d:06:4d:cc:fc:e9:97:e1:19:
         67:4b:72:45:f1:e9:32:87:4f:57:6c:e4:b0:2a:c2:1c:ec:6a:
         e5:44:8b:e3:62:41:20:83:c2:7a:24:cb:d1:3d:36:8b:75:01:
         c1:84:53:ad:37:90:df:b0:3d:2d:56:0f:b7:3a:b2:9b:cc:da:
         75:cb:37:25:f9:8e:d0:cc:24:19:1d:3b:86:c9:c4:08:b0:b7:
         ea:7d:6f:77:1e:72:4d:b8:fb:b2:08:ac:7d:c6:b2:95:84:63:
         16:ef:73:98:79:95:8e:ed:8e:4c:26:8b:42:57:77:1c:ad:28:
         1b:fe:e9:49:8a:42:ac:ae:e8:a3:65:dd:7a:04:7c:b2:fd:c9:
         3e:8b:27:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----