Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
File:                     CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft (raw, json)
Hash identifier:          H9QtAF+u1G0vBI2jKY3z1RurklnRT96sc6HitcFz1Dg=
Subject key identifier:   34:C6:D1:DA:52:68:4C:47:81:0C:CE:B4:83:B9:7D:7C:5B:9C:FA:E1
Authority key identifier: 08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
Certificate issuer:       /CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Certificate serial:       019369DA8E1A389487ADE54BF3D47B1244FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
Manifest number:          018A
Signing time:             Tue 26 Nov 2024 19:02:31 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:31 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:31 +0000
Files and hashes:         1: CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl (hash: XYh5NZBdY28WqOi73EB/aOwzY7LMFP/j/8P8YqknH2U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:8e:1a:38:94:87:ad:e5:4b:f3:d4:7b:12:44:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
        Validity
            Not Before: Nov 26 19:02:31 2024 GMT
            Not After : Nov 27 19:02:31 2024 GMT
        Subject: CN=34c6d1da52684c47810cceb483b97d7c5b9cfae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c9:35:79:0b:8b:ab:47:d9:61:67:b8:01:a5:
                    c2:f6:cc:c7:32:16:e8:6b:c1:0b:1f:5d:45:8c:10:
                    dc:1c:81:9d:5b:40:5d:77:51:05:67:0e:ea:7d:b6:
                    b4:1f:44:d5:50:b9:1f:9f:3a:11:3f:a4:71:d0:60:
                    bd:67:26:1c:32:de:2a:a8:a5:34:2d:a8:20:53:65:
                    b4:6c:dc:2d:b7:56:ad:be:c7:68:51:6b:14:ff:7d:
                    29:43:22:42:1f:9d:2e:a0:e5:e7:0d:0f:93:30:7d:
                    4d:c8:9d:a8:6d:43:cd:de:7c:a6:26:28:4b:9c:4c:
                    8a:34:06:d0:4c:b3:89:78:76:59:b3:e9:41:aa:20:
                    11:db:8f:d0:96:17:69:2b:0e:7e:f9:50:31:6d:68:
                    1d:d8:a8:36:06:76:01:8a:c0:ab:bd:bb:11:d1:db:
                    21:5f:0c:8b:72:44:53:f6:3c:20:94:ab:19:0b:ff:
                    c2:03:58:3c:c6:fa:ef:bd:f6:3b:02:57:3c:d7:e8:
                    ad:7f:9e:fd:52:b4:7c:f1:b5:d8:8c:bd:7b:a9:80:
                    6e:ae:20:01:b4:9d:e9:88:dc:ff:f3:04:fe:0e:3e:
                    b8:71:d0:b2:6f:4e:61:27:4b:1d:e5:ba:7b:67:04:
                    dc:9c:c4:cc:9a:e4:35:71:d2:ea:8d:86:ec:bc:c0:
                    9e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C6:D1:DA:52:68:4C:47:81:0C:CE:B4:83:B9:7D:7C:5B:9C:FA:E1
            X509v3 Authority Key Identifier:
                keyid:08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d3:83:ba:b7:ac:cb:bf:70:8b:75:b0:62:f7:a6:e7:7d:8b:
         84:61:26:9e:af:a0:99:b6:fa:e1:e1:0e:ac:70:cd:47:e3:05:
         e6:26:b1:8d:11:8b:51:e9:bd:07:9a:c6:37:d1:22:e1:b8:e3:
         4c:67:4c:a4:62:6a:ab:85:b5:4b:31:af:bd:7f:93:13:77:56:
         bf:ff:38:a5:4d:b1:fd:4f:5d:e3:4c:9f:0c:50:ff:df:7e:0d:
         b4:15:90:26:ed:b9:bf:7b:d6:89:36:cf:dd:87:7e:81:04:7d:
         6c:1e:89:9a:3f:64:f2:22:c3:68:12:45:de:84:31:93:ca:52:
         45:a2:25:60:ce:47:5b:d8:b8:39:2d:94:bf:cb:5e:a2:f1:f2:
         94:a0:5d:a0:b4:ec:54:18:5a:f2:21:3e:f5:4f:4e:cb:5a:4e:
         c3:0f:4a:f3:f5:f4:0d:64:15:53:6a:12:bd:80:eb:9d:d8:b1:
         0c:24:06:c6:7a:75:d4:2c:c0:dd:a9:bc:41:d5:5e:c8:b1:52:
         96:ae:f3:e4:ac:25:b0:8b:82:12:e9:09:fe:db:e9:b0:ed:17:
         4d:d6:0a:85:bc:fb:1e:c2:ef:dc:6b:e9:b5:1c:cf:48:38:d3:
         69:e1:58:43:6e:71:32:b5:34:f7:3f:27:ec:71:04:86:f1:94:
         c0:02:cc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----