Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
File:                     oLNzv45HcndefI_F-9Mpze5Eoyw.mft (raw, json)
Hash identifier:          g0Xk2LbC/ZUQh76LT+t2O82HQZVqeNWR0ViEsTCSM0I=
Subject key identifier:   79:C8:3F:72:23:C2:D9:E1:E1:94:B9:25:4E:81:F2:EE:C7:4D:76:69
Authority key identifier: A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
Certificate issuer:       /CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Certificate serial:       01936A7D644E1731167D8B701BB122CB8F75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 22:00:22 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:22 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:22 +0000
Files and hashes:         1: oLNzv45HcndefI_F-9Mpze5Eoyw.crl (hash: 3ewtDF/NVaci7lEfDaSgtGcPEqkiDYtTrv1if8+yJKM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:64:4e:17:31:16:7d:8b:70:1b:b1:22:cb:8f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
        Validity
            Not Before: Nov 26 22:00:22 2024 GMT
            Not After : Nov 27 22:00:22 2024 GMT
        Subject: CN=79c83f7223c2d9e1e194b9254e81f2eec74d7669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a9:25:b2:b2:4e:cf:6e:70:73:01:60:41:d6:
                    d8:cb:93:20:a1:de:49:78:8f:b8:07:28:bd:59:14:
                    75:e8:a3:62:56:aa:d2:ab:3d:32:b7:76:8d:bc:94:
                    b2:ee:e2:06:2e:8a:0b:cd:12:18:f4:b9:bd:76:8b:
                    71:b8:9c:d3:68:41:ea:5d:51:bb:ba:7c:b8:54:86:
                    27:de:3e:26:97:23:eb:a0:44:ce:2a:31:8b:9f:a0:
                    04:67:04:6b:d8:03:fa:62:1f:5c:d1:70:f6:06:f6:
                    d4:43:8e:4c:50:7e:ae:71:27:22:d0:03:a1:b7:2e:
                    3b:24:9a:ee:71:f0:ae:e4:d5:87:74:e3:5a:85:7e:
                    65:6d:19:7b:76:fc:aa:5e:3c:7f:39:b3:56:a6:2a:
                    cf:73:4c:68:58:17:c6:55:22:29:a4:6b:86:8e:2b:
                    70:2b:7e:53:4f:76:0f:e7:3f:0d:45:e6:aa:7e:99:
                    c7:de:86:ff:50:1e:a4:c1:67:85:72:69:33:9e:80:
                    61:ef:2e:7a:e9:b5:75:4d:b0:09:87:3b:11:ed:4e:
                    1b:89:1e:73:43:43:3c:d6:6b:f4:78:0d:54:eb:19:
                    d8:b3:8f:eb:b9:35:52:1c:18:c7:ec:eb:c7:15:73:
                    b7:28:69:e7:eb:5b:2f:5c:be:75:fe:a1:ed:d6:40:
                    ba:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C8:3F:72:23:C2:D9:E1:E1:94:B9:25:4E:81:F2:EE:C7:4D:76:69
            X509v3 Authority Key Identifier:
                keyid:A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ec:60:92:ad:0f:1a:cd:73:0d:df:b0:61:c9:9f:4b:f4:c2:
         f2:a1:48:0f:39:2c:be:b4:87:c3:e0:0b:0e:98:13:0d:9a:4c:
         12:1a:2b:49:e8:db:a3:71:85:78:0b:b1:95:c4:61:23:ae:61:
         22:8c:2b:ba:ed:14:8d:54:4d:7b:ff:20:c9:38:a9:d4:b8:d3:
         55:9e:5e:da:ab:bf:7f:04:cb:b3:0e:e3:52:55:39:53:5e:46:
         e0:cb:3c:27:c5:f9:f2:38:cc:e7:e3:00:dd:ab:8d:22:ae:16:
         94:e6:15:52:c6:f8:41:b2:d3:87:4b:4a:bc:5e:81:b1:31:b7:
         9a:27:cb:d4:94:f2:0e:d6:82:ec:93:b7:5c:54:02:32:d0:b1:
         f9:bf:57:27:f9:eb:73:38:b7:a3:da:39:a0:2f:2a:71:e8:e7:
         c9:b0:4c:b5:ff:e8:19:dc:33:3d:c4:a0:54:74:66:79:1d:98:
         6c:52:a1:59:30:56:45:58:8a:b5:1a:e0:9c:84:83:13:d0:1d:
         55:c6:61:55:ef:cb:00:69:10:36:29:87:59:9d:b0:9d:dd:82:
         1f:43:05:56:8f:6a:3c:46:db:ec:04:6e:a6:26:f8:6a:8c:9f:
         ea:77:be:b8:8b:90:9c:8c:55:66:3c:d6:d3:b3:b0:a9:93:46:
         83:6b:56:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----