Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
File:                     n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json)
Hash identifier:          x/Jx3/Ubir2K7e/bGZkmGW+qu50O6J4nWm6jPlVhY+E=
Subject key identifier:   A8:CE:EB:32:42:FF:E4:62:CD:D5:4E:88:2C:D2:41:46:14:F6:FB:D9
Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
Certificate issuer:       /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Certificate serial:       019369D9F5094CF15C9D3AAE813E0A6EA296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
Manifest number:          02FA
Signing time:             Tue 26 Nov 2024 19:01:51 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:51 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:51 +0000
Files and hashes:         1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: B/Qzc41C/+img38lpZEXEwiAQvkiR1pWgrKyu4xtxMQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:f5:09:4c:f1:5c:9d:3a:ae:81:3e:0a:6e:a2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
        Validity
            Not Before: Nov 26 19:01:51 2024 GMT
            Not After : Nov 27 19:01:51 2024 GMT
        Subject: CN=a8ceeb3242ffe462cdd54e882cd2414614f6fbd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:4f:97:d3:e5:b8:3b:65:a6:3d:4d:a7:24:
                    31:6e:2b:00:c8:14:88:3c:58:f3:64:dd:4c:de:23:
                    d5:fb:0a:75:3a:db:ba:8c:d1:9d:77:76:ed:9f:87:
                    75:38:71:a7:cb:b4:9c:4f:ab:12:05:ab:c9:ba:76:
                    22:ae:bb:70:b7:31:55:0d:67:db:4a:0b:da:7a:f7:
                    9e:47:91:e0:fd:40:8b:b3:fc:99:47:e3:f9:60:2a:
                    ac:ed:40:86:5c:11:16:cc:43:46:8a:6d:37:04:63:
                    74:16:93:d5:04:d4:3f:d6:eb:06:17:f3:55:fa:15:
                    43:5e:9a:7b:73:a4:70:c2:8f:94:43:10:02:ba:ad:
                    e8:c0:e0:4b:dc:ab:09:d7:d3:82:74:bc:ef:aa:fb:
                    e3:15:95:a3:9d:b8:4f:11:55:70:63:60:f8:c2:68:
                    a7:d5:b0:b2:89:c8:9a:95:f2:0e:84:9c:dd:5e:a0:
                    8c:b2:33:e1:9c:8c:40:c0:82:7d:f2:a8:0e:fb:60:
                    73:6e:44:c8:d5:aa:6d:04:f6:d1:10:d9:e3:8f:82:
                    8a:6f:37:52:10:31:c2:c2:10:7c:c5:18:02:1e:44:
                    67:be:ae:2b:6f:d8:d8:f2:03:9b:89:e0:e9:a9:33:
                    e0:1f:be:2c:fd:14:e1:43:81:65:e6:bb:47:29:e8:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CE:EB:32:42:FF:E4:62:CD:D5:4E:88:2C:D2:41:46:14:F6:FB:D9
            X509v3 Authority Key Identifier:
                keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f7:68:a4:f7:68:59:db:3a:bd:13:7b:0b:80:1b:08:19:8f:
         58:ad:c1:55:58:a4:c8:b2:70:21:64:7a:e4:90:59:e6:cb:76:
         36:1d:a2:ab:56:d2:13:fb:6c:7b:1b:e8:16:a2:8f:b1:2d:99:
         8d:7c:db:87:c7:2a:79:21:06:66:4b:04:ba:47:50:18:1a:b9:
         c5:21:51:c0:90:2e:93:d3:70:92:e8:c2:ed:f0:53:c1:73:ae:
         af:44:9e:3a:bf:ca:a9:27:4c:a4:e2:44:e4:33:ca:31:2a:ff:
         64:81:8d:1d:39:08:a1:48:b1:90:03:96:95:31:ec:f6:60:39:
         bb:f9:09:2e:53:45:97:7e:46:65:7b:f7:db:b8:ec:f1:d0:bd:
         ce:43:f2:e9:16:5a:14:59:e5:91:ef:3e:7f:a7:d2:d0:f5:74:
         6f:f8:68:9c:44:31:27:e8:46:59:43:22:de:55:de:62:eb:e4:
         18:f6:62:85:eb:ea:ed:35:bb:95:a4:5d:a1:6e:71:e1:1a:b0:
         95:71:3e:2c:2b:60:44:e2:40:8c:e4:be:c8:c5:95:d8:7a:10:
         c0:c0:0c:bc:08:70:35:4d:94:fc:6b:31:9c:4b:c6:ad:c2:0d:
         84:d2:d5:fb:c0:d7:a1:ee:5d:4b:3b:6c:59:aa:02:e3:7a:91:
         25:38:71:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----