Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
File:                     SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft (raw, json)
Hash identifier:          ArHR+12xh4QTm/lp8H3NcZ+/JZfeCayeCpHtXgAMErk=
Subject key identifier:   D6:DE:68:7A:B1:DA:20:B2:CE:6F:2A:7F:CF:5F:16:D3:3F:7B:25:26
Authority key identifier: 4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
Certificate issuer:       /CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Certificate serial:       019369D8EF35AA4B2F5AC526E82BD7AAE48D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
Manifest number:          0B6E
Signing time:             Tue 26 Nov 2024 19:00:44 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:44 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:44 +0000
Files and hashes:         1: SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl (hash: ubCg+acOP3rMniEUZzn4FTtXfscgwnoY4VOcWhKMUJ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:ef:35:aa:4b:2f:5a:c5:26:e8:2b:d7:aa:e4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
        Validity
            Not Before: Nov 26 19:00:44 2024 GMT
            Not After : Nov 27 19:00:44 2024 GMT
        Subject: CN=d6de687ab1da20b2ce6f2a7fcf5f16d33f7b2526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0d:06:d8:af:9d:b7:b9:e9:4e:d2:b6:50:f4:
                    a0:3b:51:b8:c3:e9:9a:60:6c:ae:f5:1e:35:05:8e:
                    f5:6e:98:e4:ce:2b:b6:d8:42:2d:39:d4:3e:42:1e:
                    02:92:c4:3b:1c:d9:f9:ec:7a:dc:e6:71:73:4e:1a:
                    d0:47:12:d8:0d:10:bb:bf:81:68:31:2a:38:dc:a7:
                    42:34:0e:1b:3c:88:20:43:47:8d:28:e6:c2:a3:96:
                    36:dd:65:d6:ba:55:f1:ff:a3:bd:5c:1d:75:be:b5:
                    0d:fd:69:a2:4c:16:7a:ce:74:3f:2e:a7:70:83:0b:
                    66:4e:11:22:3b:77:0a:06:8c:2a:ed:0f:7e:0d:25:
                    12:89:8c:b3:a1:65:70:ad:56:af:2b:db:8a:dd:55:
                    b1:a5:87:a1:be:0d:6d:6a:51:2a:f6:19:77:cc:7d:
                    1d:4d:e6:fc:a2:48:cb:8a:e1:9b:fe:18:06:f5:f4:
                    80:ca:1f:85:e0:fb:1d:c7:76:78:59:ca:9a:86:40:
                    fb:10:3b:75:b9:73:2b:6a:e2:31:29:d3:01:b0:da:
                    97:f0:7b:5b:91:43:f4:6a:63:17:44:38:ef:4d:51:
                    7d:c3:93:07:22:cf:e7:86:73:5c:65:1a:ab:2a:bf:
                    26:0c:e2:8b:87:43:0e:ca:9a:19:26:a3:73:cc:b9:
                    e6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DE:68:7A:B1:DA:20:B2:CE:6F:2A:7F:CF:5F:16:D3:3F:7B:25:26
            X509v3 Authority Key Identifier:
                keyid:4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:55:30:9a:ed:88:03:14:bc:2d:bd:56:e2:4b:3e:99:35:9a:
         8e:52:9f:e4:2e:48:9e:b5:67:d0:fb:ab:ba:e9:c8:73:3c:3b:
         a2:bc:92:6c:18:1e:71:90:88:2d:41:03:fe:65:cb:90:bf:6c:
         92:29:ff:67:b7:8b:16:9d:33:39:d0:f2:0f:29:77:33:c4:cf:
         6a:29:d1:d3:1a:96:9e:72:bf:4d:4d:7f:d1:ef:03:a0:c5:43:
         32:55:a9:1a:13:c6:a1:9d:24:a4:12:dc:bf:7b:6d:33:c6:76:
         13:ad:aa:63:63:b2:df:0a:77:72:fb:31:d5:ef:f3:02:c7:20:
         f5:73:7f:2a:6c:99:2f:c7:50:61:28:bc:e7:46:18:82:47:06:
         f7:11:a2:b0:7e:be:4e:5d:5f:58:63:85:10:49:5c:bf:f5:8b:
         45:fa:65:ea:a8:19:4c:91:58:45:8f:c7:5e:c4:bf:88:f9:f8:
         e4:12:92:18:af:b7:57:f3:e6:38:f8:cb:aa:e7:68:99:f6:c0:
         31:a3:14:aa:20:80:96:fc:8a:14:88:82:c6:6b:9d:51:b9:71:
         42:d8:a2:dc:7c:72:eb:a9:39:94:72:b3:82:78:b2:bc:e0:fb:
         a6:41:bf:70:1e:fc:de:4f:0c:0e:56:e9:83:77:d7:84:b8:49:
         5c:6e:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----