Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
File:                     CuenjWwPepgBOXu51SmocVlcgEc.mft (raw, json)
Hash identifier:          FyEjddckVDQizCWM3J4DAiB4sDhpLiMxNJZIOm9jrog=
Subject key identifier:   41:1C:75:AA:19:75:83:46:85:E5:9A:37:5E:32:73:C7:22:8C:D8:D2
Authority key identifier: 0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47
Certificate issuer:       /CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
Certificate serial:       019356F70A8E5FB90F29189F2398DCD7F9B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
Manifest number:          04F6
Signing time:             Sat 23 Nov 2024 03:00:50 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:50 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:50 +0000
Files and hashes:         1: CuenjWwPepgBOXu51SmocVlcgEc.crl (hash: 0eCozoynQZFA3aUfBBvIH28W7FjcpdO4TXD+DC0xlVM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:0a:8e:5f:b9:0f:29:18:9f:23:98:dc:d7:f9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
        Validity
            Not Before: Nov 23 03:00:50 2024 GMT
            Not After : Nov 24 03:00:50 2024 GMT
        Subject: CN=411c75aa1975834685e59a375e3273c7228cd8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:69:bb:c1:02:0e:0d:f1:c8:49:43:86:ea:
                    c2:26:51:81:91:a3:99:7f:ed:44:8e:32:72:68:a1:
                    2a:29:12:61:a9:0c:6b:a6:0e:40:e0:81:34:af:2e:
                    a8:12:60:62:cc:56:ad:48:8d:91:e4:15:5d:8b:87:
                    0e:73:bd:a0:db:29:95:ff:ad:6a:a8:10:e7:71:b6:
                    1b:3c:ee:7d:51:22:32:6a:4d:ed:56:8f:59:20:79:
                    0f:5f:cf:3d:01:dd:33:11:f4:e0:11:a3:e8:6b:51:
                    5f:aa:4f:d1:04:62:62:ba:01:76:73:f4:5e:7a:1f:
                    63:48:51:14:26:0b:ae:84:57:04:80:6e:f0:0c:be:
                    84:59:97:95:2d:91:72:37:d3:34:15:8e:39:9e:51:
                    ff:48:48:7b:9d:54:f2:6c:73:60:12:04:15:52:27:
                    8c:17:7a:14:6d:d7:16:a6:59:c1:af:86:47:83:f5:
                    1e:3a:71:fd:cc:2c:59:46:d8:07:f6:0c:31:d7:64:
                    d4:81:b9:78:98:3f:ea:0b:df:13:2c:b9:4a:40:fa:
                    71:9c:47:4a:e2:92:a9:64:f1:a3:8e:c8:57:08:ea:
                    65:a1:26:2a:8e:de:f4:93:00:4d:a6:d2:e5:67:cc:
                    66:f9:03:60:e4:ca:76:17:ac:c6:51:fa:3d:f7:13:
                    d1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1C:75:AA:19:75:83:46:85:E5:9A:37:5E:32:73:C7:22:8C:D8:D2
            X509v3 Authority Key Identifier:
                keyid:0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7d:6d:4b:3b:49:aa:5c:7c:37:dd:2d:73:62:17:74:ad:4b:
         6c:4d:72:c8:10:e1:9c:6e:bf:57:a6:ce:46:8a:08:6f:94:4a:
         6d:ca:05:7a:cf:e6:22:ed:a4:f1:6f:3f:a3:26:d5:37:dc:11:
         83:66:17:37:e9:a6:04:74:41:4f:07:fd:e2:45:fb:7b:ec:64:
         5a:a5:98:96:e0:1f:ae:04:1b:29:83:d1:1e:fe:6d:bb:77:a3:
         dd:1e:5e:b8:d9:4a:27:c4:03:25:3d:15:fd:9c:ee:b8:41:4c:
         77:9f:b5:1b:b0:2c:37:b6:b6:87:07:8c:54:e5:72:71:58:56:
         11:88:75:48:5e:83:ed:e0:8d:c5:a9:b7:d2:bf:b0:74:d5:c9:
         ad:69:ca:c7:58:84:a9:df:7f:1d:82:25:e8:e6:ef:4b:b7:12:
         7e:cc:ff:ce:5c:ce:c3:38:8d:09:07:4a:ba:43:49:be:a0:23:
         1f:54:f1:77:41:60:60:99:2f:a4:2f:9a:db:bc:29:df:d3:4e:
         bb:f4:02:d9:cb:a7:e8:02:5c:d8:2a:0c:83:21:c8:72:6d:5a:
         25:93:56:b0:b5:91:a4:ef:23:d8:61:96:bf:96:18:51:90:e3:
         ce:45:be:f7:04:57:50:2e:e4:6b:35:c9:7f:1d:b8:08:85:28:
         52:29:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----