Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
File:                     4KWDmEmtO4v_oBSbsOEeZhycPX8.mft (raw, json)
Hash identifier:          mSPvCgJ5SvvkzeJ26ozmubEWi1VvFEcHjcK7XTiEkNk=
Subject key identifier:   1E:E0:ED:0C:2B:0C:15:F3:77:87:BC:43:1E:CE:24:60:0D:80:55:E0
Authority key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
Certificate issuer:       /CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Certificate serial:       019406B3CF3AEE0B737F91271C34CE84D5BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
Manifest number:          13C8
Signing time:             Fri 27 Dec 2024 06:00:34 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:34 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:34 +0000
Files and hashes:         1: 4KWDmEmtO4v_oBSbsOEeZhycPX8.crl (hash: A6LNVjnFW9ztWfYzUZkVIxanKTtL7PX3DNB1CfkFppw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b3:cf:3a:ee:0b:73:7f:91:27:1c:34:ce:84:d5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
        Validity
            Not Before: Dec 27 06:00:34 2024 GMT
            Not After : Dec 28 06:00:34 2024 GMT
        Subject: CN=1ee0ed0c2b0c15f37787bc431ece24600d8055e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:de:15:f8:cd:46:18:9c:56:6e:99:88:ea:
                    a0:82:0e:a6:2f:47:2a:71:63:6e:00:62:62:38:45:
                    ed:e3:d0:a6:c8:d2:33:98:b2:8d:c8:00:4e:01:4c:
                    08:91:38:0d:ba:91:f6:93:c0:1b:06:ff:9e:5c:13:
                    26:de:2f:9c:e1:ae:5e:7e:a0:7b:2b:03:1c:1c:cd:
                    8f:36:fe:ec:26:74:79:81:4e:a2:59:c6:bc:53:30:
                    c4:5f:c4:68:92:f4:c3:26:cb:44:26:45:13:49:71:
                    66:d2:66:e2:9c:4c:8e:52:55:a7:e3:51:88:ee:08:
                    fe:f6:86:5e:a5:99:48:7b:0e:d9:20:b1:10:fc:0f:
                    d5:67:de:45:1d:98:07:2f:b4:52:28:d1:32:66:04:
                    f7:b9:f4:aa:f2:84:e8:4b:7e:3f:67:47:2d:36:32:
                    f9:b2:6e:12:7e:65:cc:e1:d4:94:52:b2:c3:87:7d:
                    21:33:ba:f2:8f:27:d8:0f:34:22:e8:e9:a3:d3:74:
                    02:5e:f0:4a:68:e0:22:79:c1:6b:c7:91:06:e0:bb:
                    5f:0d:e7:41:e8:e2:36:d3:11:25:ce:4f:68:38:cb:
                    62:d8:44:26:c5:d0:b3:7d:ff:4c:dc:c9:97:6b:ac:
                    6f:9f:fe:65:45:44:1c:f4:d2:1b:6e:a1:a4:69:67:
                    50:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E0:ED:0C:2B:0C:15:F3:77:87:BC:43:1E:CE:24:60:0D:80:55:E0
            X509v3 Authority Key Identifier:
                keyid:E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:85:c7:30:e4:27:7d:c7:55:54:6d:59:8d:10:1d:3b:e7:cf:
         05:71:c3:85:c7:1c:8f:c3:25:71:af:92:71:bc:a3:a0:b1:38:
         3f:58:bf:5d:a8:7c:b5:f0:3a:74:a3:93:05:d8:e7:e0:0b:b4:
         8d:5f:e8:15:73:35:65:78:73:74:19:52:47:a1:63:ff:62:ca:
         76:d7:e6:af:f4:33:c9:f4:55:ba:05:e9:f7:11:3c:f5:c0:69:
         90:86:68:09:c4:58:d5:f2:1d:64:f9:63:9f:c2:f4:1a:7d:11:
         55:3d:eb:6d:3e:67:9f:68:4f:56:e0:6e:47:2e:a6:a6:d1:d3:
         46:0e:51:7c:c5:68:5c:e8:e2:06:da:a5:27:68:02:eb:e6:53:
         06:ac:82:8e:34:f9:0f:91:94:06:59:63:ba:5d:b9:46:4f:2b:
         97:e6:65:d5:9a:a8:bc:ac:12:87:ea:e1:4d:e2:1b:d5:c7:2a:
         40:70:0c:ea:b5:fc:af:75:39:35:05:3b:a0:ad:c6:0b:29:1f:
         91:07:6f:6d:97:a9:20:c0:ad:28:c8:02:01:1d:ae:10:ab:96:
         ee:ba:3e:62:bb:d2:88:3f:0a:1a:a5:72:61:1f:e5:b7:13:3f:
         89:01:54:af:79:33:50:31:3a:d8:2a:7c:66:45:df:90:76:f4:
         00:85:e7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----