Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
File:                     7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft (raw, json)
Hash identifier:          THv81OM8KeixtM5tT7LPEnJ/4eZpM6QCIyXRbej+IyM=
Subject key identifier:   70:0F:46:E7:03:2B:99:53:BD:BD:62:B1:AB:0F:F7:87:C3:A0:DA:5B
Authority key identifier: ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57
Certificate issuer:       /CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
Certificate serial:       01936A7DD5807F1263DCAFADDD1C574BA1F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
Manifest number:          130B
Signing time:             Tue 26 Nov 2024 22:00:51 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:51 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:51 +0000
Files and hashes:         1: 7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl (hash: gWkEYmMejeI6MsT3oHS+mcArHadiXmKt9FtpD+JI+9s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:d5:80:7f:12:63:dc:af:ad:dd:1c:57:4b:a1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
        Validity
            Not Before: Nov 26 22:00:51 2024 GMT
            Not After : Nov 27 22:00:51 2024 GMT
        Subject: CN=700f46e7032b9953bdbd62b1ab0ff787c3a0da5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f6:e8:eb:79:a4:79:44:0b:c2:cb:e1:92:01:
                    e7:19:bb:2a:17:c8:74:78:6d:1f:e9:b1:14:29:70:
                    df:6f:b8:53:80:12:b7:48:0a:e2:cc:b2:fa:b6:63:
                    98:e2:09:b5:60:42:e0:2e:a0:75:b1:9e:51:73:2e:
                    ee:a5:bd:5f:4a:a9:e3:55:97:1f:46:e1:e6:30:08:
                    45:aa:42:da:9b:15:bc:9c:77:c7:95:d0:c1:cb:96:
                    05:e0:ad:0e:3e:8a:cd:68:88:8f:bc:f6:6b:87:3a:
                    b9:36:1f:7a:bf:9f:8e:e4:ac:52:02:04:5d:ce:4f:
                    f1:94:eb:4e:e9:8c:7f:9b:61:7a:11:36:d4:a4:6c:
                    16:8d:8f:d1:b8:0d:2d:e5:b4:d9:fc:68:a6:cd:7c:
                    7c:0e:32:35:8a:60:5e:32:37:7a:35:cb:15:c3:5c:
                    bd:45:96:04:aa:10:49:39:a9:7f:73:00:9d:54:83:
                    68:c8:72:e6:9a:0b:6c:0e:b6:8d:29:87:0c:ae:af:
                    1e:f4:ba:1e:f9:b9:a9:ec:84:92:94:55:32:1f:f2:
                    99:2f:df:f1:19:ec:3c:7c:47:f6:45:33:bc:ce:4d:
                    b0:84:08:ef:d3:bb:d9:62:34:10:ec:0e:eb:6f:00:
                    51:fe:42:10:2b:99:99:12:56:55:fc:6b:48:b6:11:
                    57:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0F:46:E7:03:2B:99:53:BD:BD:62:B1:AB:0F:F7:87:C3:A0:DA:5B
            X509v3 Authority Key Identifier:
                keyid:ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:34:73:3a:86:20:df:db:ba:b7:9c:2c:a8:87:8a:0a:ca:9c:
         1d:8b:f2:5a:87:d4:59:83:31:40:87:51:50:a1:6f:c1:d1:f1:
         28:5f:10:db:c0:99:3f:92:81:65:68:2d:31:8f:61:3e:42:8e:
         ad:f7:65:96:b3:74:f8:7e:12:e4:d5:47:cf:31:aa:d4:5e:68:
         ac:2c:57:1a:a0:4d:66:3a:df:16:e8:58:aa:5b:32:ac:16:fd:
         ca:4e:76:73:ff:c2:cd:41:4d:76:37:65:47:3c:d0:49:a7:71:
         9f:4a:fc:17:b7:92:d8:37:58:97:fb:8b:2b:21:f5:7d:3c:8c:
         88:02:8a:40:4e:70:c8:89:78:98:e9:00:55:d8:2f:d8:4c:e4:
         ee:66:58:90:ac:78:a5:e3:24:5a:ed:3d:e3:7d:28:e8:af:f8:
         3c:69:90:9a:e2:36:f7:3b:f6:50:39:7d:27:0d:96:ae:0b:e3:
         11:8c:f4:1f:6d:bc:80:7d:38:2d:ff:c2:51:ff:40:ea:6d:c9:
         c8:3d:3f:6e:aa:49:43:d9:0e:61:fe:b6:b3:a1:7a:29:f8:59:
         19:67:84:0b:d3:30:52:eb:a9:82:ff:40:e8:e3:db:35:b8:30:
         ab:75:0e:80:69:5c:76:7a:dc:cd:ef:d7:e8:0a:2d:f7:0e:0d:
         d8:6c:d2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----