Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
File:                     RNC2iz7BebNdz_XEZdwtBGGZJ24.mft (raw, json)
Hash identifier:          aC+JaxeYzXxWjorjjfUvQ5YillQrTPGTQY6OtJGFj88=
Subject key identifier:   E2:B0:3B:D2:CE:72:0A:8D:9E:74:D6:D9:55:77:20:10:67:DA:3D:B6
Authority key identifier: 44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
Certificate issuer:       /CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Certificate serial:       0193572D7CDB7F32BBA59CF2FE33ACCF40A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 04:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:18 +0000
Files and hashes:         1: RNC2iz7BebNdz_XEZdwtBGGZJ24.crl (hash: JfzuGRu7okstWhydtBQWF9s4VqqlUFLmZ5NEUbSoxEE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:7c:db:7f:32:bb:a5:9c:f2:fe:33:ac:cf:40:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
        Validity
            Not Before: Nov 23 04:00:18 2024 GMT
            Not After : Nov 24 04:00:18 2024 GMT
        Subject: CN=e2b03bd2ce720a8d9e74d6d95577201067da3db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:b0:dd:1c:57:75:87:ed:3d:e4:a1:00:0c:
                    c6:bf:66:96:7f:2d:0d:89:a0:8b:fa:c9:a2:a9:d4:
                    09:56:1a:f4:29:cc:ef:1c:ab:74:77:63:96:42:3e:
                    80:fe:82:f5:1c:bd:cd:0d:95:a2:43:c3:97:e6:69:
                    fe:da:79:c7:78:03:9c:f5:34:21:86:4f:ca:66:0f:
                    52:24:8f:6c:2c:7c:d5:27:91:5c:30:e0:e2:99:bd:
                    1a:38:6a:1c:59:97:64:94:c5:ea:e5:43:79:d9:3c:
                    33:09:6b:3d:5f:6c:98:ad:fa:01:be:1a:b4:09:4d:
                    c1:5f:a0:58:cb:b6:94:3d:aa:d2:4a:0b:e2:0a:af:
                    dd:7c:e4:3e:a2:2a:f7:ed:95:9c:17:27:c3:e4:cb:
                    eb:01:c7:5b:6d:62:40:ee:28:76:a8:af:fc:35:63:
                    7c:d8:57:2e:7a:c7:1b:9a:16:85:dc:69:01:3a:2f:
                    f6:33:fd:f3:90:3f:62:bc:5a:02:bc:ce:78:47:bb:
                    54:b5:a6:e3:1f:53:40:28:9b:c8:f3:fd:71:ca:ac:
                    84:b1:01:1a:6a:90:1b:2a:76:0d:d8:64:f7:29:04:
                    ac:5e:e2:a7:b1:49:32:a3:ad:6c:14:ef:78:5b:3a:
                    04:46:77:5e:f0:3a:11:fc:46:8c:80:35:5d:c9:e3:
                    49:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B0:3B:D2:CE:72:0A:8D:9E:74:D6:D9:55:77:20:10:67:DA:3D:B6
            X509v3 Authority Key Identifier:
                keyid:44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:1f:d9:00:ea:2b:97:6d:a4:53:12:9d:e5:3e:db:fa:31:0f:
         6a:21:e8:39:47:92:4b:e2:3d:27:fb:49:e1:b4:6e:a7:3d:3c:
         9c:e7:da:46:22:c9:ae:e1:ba:69:16:c7:88:36:8b:cb:b2:0a:
         81:32:4e:ee:32:f9:83:16:12:73:c2:49:50:dd:0d:a1:0a:31:
         6d:fe:67:f1:68:12:9d:33:0b:93:fd:89:ac:d3:be:70:ea:58:
         21:fc:51:0f:b5:31:eb:b7:04:07:e4:cd:e6:a7:5e:f8:18:72:
         4f:c8:01:4f:a8:d4:e3:28:8a:50:e4:d5:73:fe:16:64:a8:13:
         33:69:6a:2c:60:94:b5:fb:b0:91:53:98:3b:8f:81:20:ac:aa:
         7e:03:ba:a5:cd:dd:88:94:c3:db:c2:ac:0e:75:dc:d4:91:37:
         a7:6b:66:d2:f5:77:6e:f3:df:c4:be:ce:9f:c1:99:05:18:28:
         32:ba:8d:ec:77:c5:1b:74:3d:c5:4f:6d:38:88:3e:07:a5:04:
         a3:42:0f:a0:c3:da:56:06:bc:27:ed:f6:36:a2:df:c0:0c:93:
         04:11:94:ff:b5:aa:b1:2d:bf:26:42:e6:3d:ce:f2:d3:9f:75:
         28:5b:58:fd:88:8b:de:97:f5:65:0e:15:13:d2:a0:22:d1:e2:
         6b:26:40:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----