Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
File:                     G-u7vrbpIjF2ylod8UmJhgF-jig.mft (raw, json)
Hash identifier:          QDONzMXWGN/tazkjb0CpO47+M/IJU/IZOuNV0zTLvBE=
Subject key identifier:   15:D0:5A:17:07:44:9A:48:C2:0A:BC:CA:63:7A:F4:B4:AC:23:B0:08
Authority key identifier: 1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
Certificate issuer:       /CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Certificate serial:       01940647898FA2A83F8D26879C6315E85879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
Manifest number:          12AC
Signing time:             Fri 27 Dec 2024 04:02:19 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:19 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:19 +0000
Files and hashes:         1: G-u7vrbpIjF2ylod8UmJhgF-jig.crl (hash: qI/Vsyd8pQMG4ydJVhXdKRbgTnvtYGTYOToBH3HVDyQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:89:8f:a2:a8:3f:8d:26:87:9c:63:15:e8:58:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
        Validity
            Not Before: Dec 27 04:02:19 2024 GMT
            Not After : Dec 28 04:02:19 2024 GMT
        Subject: CN=15d05a1707449a48c20abcca637af4b4ac23b008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6b:ba:12:74:d8:58:c1:ba:b7:cc:42:22:d5:
                    66:60:70:17:f1:21:6a:cb:2c:f8:85:13:28:e9:77:
                    b2:f8:86:19:0f:c0:5e:ee:d3:f2:1b:36:73:1e:5f:
                    99:95:0e:ef:43:0a:3f:c9:38:ad:c8:d5:fa:27:b2:
                    0a:0b:b1:f2:80:ec:2d:9f:bc:04:79:bb:4b:ae:2f:
                    6d:66:11:13:d9:40:a9:15:54:ce:7e:17:67:6e:f8:
                    6e:a2:bd:2d:7f:3d:9b:c4:ed:e3:33:a7:b8:95:2c:
                    3e:c6:1e:62:52:32:35:f1:c7:38:17:32:fb:65:45:
                    11:dc:af:52:8e:d4:ba:3d:34:2e:0a:06:0b:47:a7:
                    84:7b:6b:bb:6e:03:67:7c:fd:f8:87:d1:6a:72:26:
                    81:52:e9:7f:1d:7d:b0:d3:00:34:7a:8e:1d:a3:9b:
                    92:d0:e8:c7:4e:1a:d3:8c:93:c3:c5:99:10:cb:5d:
                    f1:ce:29:00:d9:65:fc:76:0e:65:3f:89:bb:bd:7f:
                    81:42:46:2d:f5:07:3f:85:82:35:a3:2d:3c:1d:0d:
                    5f:47:59:37:a0:4d:46:f2:b7:98:1c:2f:14:46:16:
                    d3:4a:db:08:0e:51:92:8b:8a:e5:bf:0b:98:8f:80:
                    67:3b:fe:7b:82:f0:bb:9f:da:48:be:e4:26:f5:db:
                    c6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D0:5A:17:07:44:9A:48:C2:0A:BC:CA:63:7A:F4:B4:AC:23:B0:08
            X509v3 Authority Key Identifier:
                keyid:1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:50:26:73:4a:f2:d9:73:1c:1a:41:d0:24:72:e2:98:7e:0e:
         52:6c:3f:aa:36:37:02:c7:3a:b9:3a:ec:0d:2b:34:93:a0:85:
         f1:ce:09:32:20:5e:08:98:65:93:32:51:c8:9f:49:8c:1b:fd:
         94:dd:65:d3:4c:52:32:75:23:99:a4:9b:db:59:95:64:22:c5:
         41:dc:ca:59:3d:5b:9c:fb:10:13:7b:d9:55:46:5a:e8:69:6d:
         0e:09:e9:ba:fa:0e:1e:ed:e2:97:27:81:7a:29:bd:df:31:8c:
         31:41:ae:f0:a5:98:69:b4:66:3f:9c:95:df:3f:39:90:9c:dd:
         9f:c5:94:47:92:32:16:6a:52:02:54:c4:0d:1a:39:9f:88:35:
         64:0c:6d:a5:d9:57:2a:a0:1d:c0:da:7d:f5:18:b5:2c:ee:0b:
         7c:ac:ed:1f:39:fa:43:8a:b3:c6:91:6b:1a:3c:52:64:62:ff:
         bf:7c:bc:a7:d3:43:0d:7d:e8:47:2b:72:0e:51:31:71:d1:5b:
         04:eb:92:89:52:8c:10:c1:0b:ce:5a:53:21:58:66:5a:b0:f0:
         22:d0:66:df:d2:72:33:14:58:89:bf:f0:cb:9d:e7:b6:8c:e6:
         1b:f3:c2:1f:f4:e4:68:0c:b4:9e:7d:07:57:b3:e1:0c:00:8c:
         d1:7e:4f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----