Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File:                     yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier:          OxRcTAmbocuq+RwAuKu14gzbZbbb9EwPBzAm9KNfqh8=
Subject key identifier:   54:C7:FC:CD:71:E4:B3:13:5B:C0:18:E5:8C:82:70:7A:29:45:E3:7E
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer:       /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial:       01935A670B6ABBCF132C208149B586877A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number:          107D
Signing time:             Sat 23 Nov 2024 19:02:02 +0000
Manifest this update:     Sat 23 Nov 2024 19:02:02 +0000
Manifest next update:     Sun 24 Nov 2024 19:02:02 +0000
Files and hashes:         1: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: 5LltpizxVLvQdvGO6Gbqz021cBfbP7zIMZY2wNyjuG4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:67:0b:6a:bb:cf:13:2c:20:81:49:b5:86:87:7a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
        Validity
            Not Before: Nov 23 19:02:02 2024 GMT
            Not After : Nov 24 19:02:02 2024 GMT
        Subject: CN=54c7fccd71e4b3135bc018e58c82707a2945e37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:f9:a3:23:e3:c4:87:4c:03:93:a9:f7:ad:
                    72:51:c0:81:de:63:c9:17:81:26:33:7d:f2:14:5d:
                    a9:82:70:01:e5:ea:fe:e3:44:65:69:b0:00:c1:bf:
                    7d:47:b0:8b:f8:46:45:6c:72:1e:df:80:1e:c1:e9:
                    50:de:7a:a9:b7:db:d2:4d:fb:c5:6f:d2:49:00:d6:
                    4b:d6:98:12:2b:f7:04:0d:d5:4c:23:7b:b7:a3:02:
                    10:1c:3b:08:a7:75:65:62:96:5d:bc:e8:49:ae:34:
                    87:bf:29:82:9d:56:29:a6:bb:f7:48:bf:03:58:8c:
                    ab:05:02:d3:34:44:b1:bb:db:25:d1:06:ed:42:79:
                    4f:a4:18:6d:3f:2c:0d:2e:cc:91:f1:b1:38:2d:7b:
                    ee:ce:fb:d4:61:e1:ac:2d:e2:61:1b:d3:ae:9d:69:
                    63:23:b7:f9:d5:f5:85:c3:92:b8:bd:df:23:f5:53:
                    a7:e5:0a:59:f5:d5:d4:7f:31:08:c4:fd:4f:2f:27:
                    dc:a3:e0:03:46:76:3c:0c:eb:dc:70:d9:56:11:7c:
                    48:c9:fe:30:e4:f2:b7:ea:b6:f6:ee:12:f6:53:82:
                    8f:ef:92:f3:5e:8f:32:68:73:d4:ec:e0:de:dd:2e:
                    bd:09:c9:66:e0:ab:89:91:c2:69:7e:c6:46:c3:7e:
                    58:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C7:FC:CD:71:E4:B3:13:5B:C0:18:E5:8C:82:70:7A:29:45:E3:7E
            X509v3 Authority Key Identifier:
                keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:0c:23:0e:18:e3:d2:d0:f3:b3:06:14:08:20:0f:45:4d:b6:
         9a:30:52:5f:ee:83:e2:6f:86:fe:aa:04:2e:91:5d:2e:0e:d5:
         a6:eb:a0:a0:2b:88:ba:55:66:32:ef:df:ac:f4:5c:f3:fc:5d:
         0c:04:77:c5:77:66:0b:8d:4d:a4:3e:36:20:fc:f2:48:13:7b:
         a0:3b:68:e3:ff:42:d9:46:f9:14:da:1b:18:dd:91:cb:ae:8c:
         5f:f8:39:d1:3b:a4:74:15:a1:24:74:1c:81:5d:d9:86:0f:21:
         55:55:3c:f2:98:5d:67:81:fb:f5:1b:af:c7:46:6f:46:c1:48:
         da:07:15:b0:69:bc:8f:51:60:40:98:d1:5a:62:30:22:27:e0:
         08:22:c9:38:be:03:67:d3:e6:54:af:66:f7:cd:3b:4c:75:2b:
         5f:9c:ae:3d:1b:f3:2b:ce:18:25:24:95:62:d8:48:8d:31:e0:
         45:53:7d:63:93:92:63:ab:d3:52:46:39:89:7c:d4:bb:09:7a:
         a7:b2:42:98:28:f9:b4:23:59:9e:ec:03:c4:fd:e9:e3:ab:97:
         d9:82:7c:ee:01:e9:7b:19:fa:c2:3c:ef:ae:cf:64:34:0c:7b:
         a7:ad:88:dd:46:9f:4c:bc:f0:42:42:e8:e7:c2:0b:85:cb:a5:
         48:f8:50:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----