Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
File:                     c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json)
Hash identifier:          TNmF61eG4fSSS3oAxRyJcb/0JkIyIJo5m6BetEFT/8g=
Subject key identifier:   04:53:57:99:9D:12:8C:E4:52:D6:54:74:B1:93:7F:D6:E2:47:B3:D6
Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
Certificate issuer:       /CN=737787cf2a870d91b11369f9d74591957602814e
Certificate serial:       019356894D7504D72ED25EA7E442544692D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
Manifest number:          0637
Signing time:             Sat 23 Nov 2024 01:00:59 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:59 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:59 +0000
Files and hashes:         1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: Hngk+aVb8zJU1mDfN71iJu55SNds09bxQpQ+B9JwwmQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:4d:75:04:d7:2e:d2:5e:a7:e4:42:54:46:92:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=737787cf2a870d91b11369f9d74591957602814e
        Validity
            Not Before: Nov 23 01:00:59 2024 GMT
            Not After : Nov 24 01:00:59 2024 GMT
        Subject: CN=045357999d128ce452d65474b1937fd6e247b3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:a3:3b:82:a1:9d:d0:00:99:a2:11:63:4b:
                    b5:6d:e9:ee:68:64:18:83:8f:a1:ad:29:7b:f2:e6:
                    87:ed:b4:48:c4:5a:10:7e:a2:27:b1:fa:c7:13:09:
                    27:8e:a9:13:d9:18:2b:ae:f2:93:df:20:58:e7:ce:
                    ee:e9:39:f1:d8:db:56:8e:57:01:41:f2:6b:63:4f:
                    22:d2:d8:d4:9d:9d:f8:a8:6f:48:91:f4:90:44:6d:
                    da:a6:d0:32:a8:24:09:d6:94:a7:fe:94:84:4c:48:
                    d6:81:5e:4c:02:83:28:be:24:99:3d:3d:5d:f1:96:
                    6f:28:c2:f3:fd:4e:23:ae:3b:c0:72:96:07:a5:52:
                    9d:d8:72:e3:5d:e6:e1:c4:14:71:0b:cb:5d:8a:26:
                    b9:e4:2f:85:f5:b2:fa:fc:04:52:58:04:8b:64:9f:
                    a8:00:0c:45:fd:c0:2e:4c:85:f3:bf:81:92:9b:18:
                    35:5d:cd:3d:d5:47:5c:27:12:0f:77:ba:8c:0d:3b:
                    62:35:b7:c0:fd:f0:dc:91:e5:18:20:d5:4a:e1:f8:
                    43:a4:ba:1a:6a:21:a4:38:22:9c:24:c2:e9:da:3f:
                    85:9e:6d:a2:3e:c6:1e:da:9f:de:01:3b:dc:80:07:
                    a0:54:b3:7d:fb:0d:f6:37:ae:b5:6a:df:cb:ad:a5:
                    51:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:53:57:99:9D:12:8C:E4:52:D6:54:74:B1:93:7F:D6:E2:47:B3:D6
            X509v3 Authority Key Identifier:
                keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:71:ec:04:56:96:b5:7c:19:3f:0f:8c:ea:e6:ce:63:18:ad:
         ce:2a:2b:65:a6:fd:de:47:99:65:e8:f6:63:ac:dc:74:4c:ff:
         62:d6:7c:45:0b:5c:40:82:46:d1:6c:18:68:29:21:af:f8:65:
         93:c2:8d:ab:61:4a:0e:84:a6:3b:26:7c:53:d8:f1:6c:68:09:
         91:c9:c1:b0:01:1c:54:4b:7e:49:f4:84:1a:a2:14:d8:ec:34:
         5f:57:3b:50:47:53:c2:05:e3:3c:41:32:db:a2:4a:86:d9:8c:
         3b:e2:9f:0a:37:96:83:5c:ba:c4:58:85:a2:ed:fc:03:97:23:
         45:dc:ae:14:7d:a8:12:65:a8:cb:b9:dc:ad:9a:a9:f8:76:18:
         7c:04:3a:56:b9:86:c7:f9:c4:f1:81:08:3e:22:b2:d7:bf:56:
         d7:95:2a:13:ed:ea:09:82:bc:5e:cc:7c:9a:de:ed:cb:c7:fb:
         7d:04:a5:e5:6d:c3:53:b5:4c:c2:bb:74:e0:37:0d:24:27:17:
         7c:b7:37:29:b9:d3:ec:4b:a2:96:c4:ff:fa:89:ae:eb:80:f4:
         ff:de:47:3b:1a:b2:c3:2e:17:a7:9a:f2:7b:52:cb:eb:f5:bb:
         31:31:66:73:42:19:26:9d:30:cf:88:fa:4d:ae:d7:da:97:00:
         f8:1e:5b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----