Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
File:                     z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json)
Hash identifier:          wGIGWEXbBTDK2+fokmdb8/3KkX1vKlu2PpK5f1HOaLU=
Subject key identifier:   85:A4:AA:67:78:5D:08:21:76:FB:9B:FB:DC:3E:B6:01:C1:04:38:E7
Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
Certificate issuer:       /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Certificate serial:       019369DA245DE7F0F35A4CB33667B91227B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
Manifest number:          06E1
Signing time:             Tue 26 Nov 2024 19:02:03 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:03 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:03 +0000
Files and hashes:         1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: USbReFAzM1BseilRyW7jswn/nPMUCsPC1IK8fh/9K+s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:24:5d:e7:f0:f3:5a:4c:b3:36:67:b9:12:27:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
        Validity
            Not Before: Nov 26 19:02:03 2024 GMT
            Not After : Nov 27 19:02:03 2024 GMT
        Subject: CN=85a4aa67785d082176fb9bfbdc3eb601c10438e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:77:df:64:b5:79:ae:d3:c0:bf:15:94:b0:
                    5d:38:dd:42:2c:04:cd:83:f8:dd:b5:12:5e:a3:d5:
                    40:50:97:12:15:eb:2b:61:d7:f7:3a:f7:f6:c4:e0:
                    87:f7:23:ee:03:a7:f8:9c:cf:8c:58:cc:06:38:e1:
                    23:cc:cf:3f:8b:9d:ab:0d:3f:97:03:00:f1:42:19:
                    b1:47:4d:d2:a9:34:f7:8c:af:5c:da:f7:da:7f:38:
                    2e:71:63:42:fc:d9:b3:5c:28:a4:36:74:8b:e5:e3:
                    3c:cb:b7:ea:35:54:70:20:b2:2a:5f:e3:26:6a:49:
                    d7:a7:20:4f:69:58:54:cd:6f:5b:8d:d5:63:f1:57:
                    65:bf:37:82:ee:fe:1a:1b:6c:d3:81:7b:c8:2d:04:
                    f7:83:5f:2d:94:38:7e:fb:7c:45:d3:14:42:b8:1a:
                    2c:78:08:fd:60:41:39:3c:91:0b:4b:f0:44:f6:58:
                    12:00:f4:e1:c0:1d:20:cd:0b:e0:06:30:2f:16:3d:
                    4c:a0:9e:a6:cb:84:f4:a8:7e:1c:5d:7b:8d:bc:a1:
                    67:9d:5b:5c:af:b0:11:87:d4:c3:a7:05:42:1b:c8:
                    aa:ac:bc:fc:6a:7c:af:77:17:99:71:43:63:3f:66:
                    68:ab:1b:71:b2:94:c4:66:3d:55:36:e6:52:42:2e:
                    bc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A4:AA:67:78:5D:08:21:76:FB:9B:FB:DC:3E:B6:01:C1:04:38:E7
            X509v3 Authority Key Identifier:
                keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f5:1f:18:5c:56:a1:8a:42:bd:f2:39:10:98:7c:b3:c8:97:
         5b:86:e0:41:76:cd:83:fa:13:f6:eb:f9:95:7c:7d:8f:05:13:
         c6:db:9b:20:fc:7b:df:4d:0c:b6:4a:8d:18:85:8e:c3:2a:9f:
         ce:bd:ec:78:bc:b6:c1:40:2f:2a:54:fa:7a:c2:e1:29:bf:fe:
         80:00:bf:0f:39:df:c6:92:81:2e:78:7d:9d:24:3e:15:8d:21:
         5d:17:17:99:88:04:44:ff:b9:fe:57:75:2f:e6:a9:09:39:58:
         cd:c2:b4:70:91:de:aa:15:e6:0d:d4:20:8c:b0:bb:de:89:b1:
         1d:49:ad:22:db:68:59:99:9d:c0:67:9f:48:aa:7a:a6:1c:5f:
         f5:35:0b:34:6c:00:ab:f5:a4:ee:03:1a:fe:d6:1c:cb:62:69:
         58:e8:b2:21:b8:59:72:ac:c9:a9:35:f4:db:77:5c:cd:9a:4e:
         f9:3b:97:63:80:46:21:c0:80:04:fe:45:3d:17:6c:6c:ab:38:
         3d:cf:07:6c:d7:e2:98:22:6e:ef:ff:81:4c:3d:ec:4a:73:98:
         9b:ec:66:46:da:0a:16:92:47:23:92:13:0d:5a:4d:76:d2:f8:
         48:6f:ea:b1:a9:5b:a4:f2:d1:c0:a3:91:3a:b1:d7:bd:e6:e7:
         c1:a2:31:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----