Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
File:                     uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft (raw, json)
Hash identifier:          JflEzzlx4Jlsn6/oTuuksCHZANadt6fFulLJgOLn+Do=
Subject key identifier:   FE:E5:EE:55:C1:50:DA:FA:54:68:85:9A:A1:C9:82:12:B8:6B:31:2D
Authority key identifier: B8:8F:F8:6C:47:17:E0:E3:66:F2:90:CD:0D:62:8A:FC:46:A3:8F:0D
Certificate issuer:       /CN=b88ff86c4717e0e366f290cd0d628afc46a38f0d
Certificate serial:       01935A6785A06A17223F6C5F95AD783BDC2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
Manifest number:          0CD9
Signing time:             Sat 23 Nov 2024 19:02:34 +0000
Manifest this update:     Sat 23 Nov 2024 19:02:34 +0000
Manifest next update:     Sun 24 Nov 2024 19:02:34 +0000
Files and hashes:         1: uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl (hash: WvyIxokqdm+otxICku3HrJzpd+JYBQIz7o4vRced5rc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:67:85:a0:6a:17:22:3f:6c:5f:95:ad:78:3b:dc:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b88ff86c4717e0e366f290cd0d628afc46a38f0d
        Validity
            Not Before: Nov 23 19:02:34 2024 GMT
            Not After : Nov 24 19:02:34 2024 GMT
        Subject: CN=fee5ee55c150dafa5468859aa1c98212b86b312d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:51:26:8b:db:26:b2:40:5b:0e:a0:49:3b:0a:
                    c8:55:7f:1b:47:36:ca:7d:24:ab:41:98:f3:af:4e:
                    a6:70:0b:16:6c:59:3e:f3:de:42:88:f0:89:c7:4f:
                    1a:5c:f2:05:b2:03:67:75:1e:7c:d3:7f:f4:7f:fd:
                    ec:fa:ed:f0:38:0d:e3:1c:83:00:b7:5c:9c:71:26:
                    f5:d2:01:d0:d5:55:8b:52:8a:54:63:92:7d:b4:65:
                    1c:b8:9f:ca:ac:67:4d:f0:fc:ec:ab:3c:36:a0:4c:
                    4d:e9:d3:7d:d5:80:89:c5:0d:8d:82:d9:cd:a0:50:
                    1c:4e:62:38:8e:a3:11:a6:6e:64:3a:69:bd:18:25:
                    b7:79:8d:f5:41:5f:0a:a9:3b:f1:7b:cf:ff:98:7f:
                    fa:7c:e3:ea:7d:3f:eb:3e:b2:b9:81:03:a7:2f:71:
                    e9:ae:61:bd:2b:37:49:85:d4:19:d4:98:66:f9:d8:
                    e8:e9:af:04:24:2c:9b:52:2e:02:09:06:37:b5:09:
                    82:f1:4b:83:66:04:b5:55:a3:81:a4:17:0d:59:fd:
                    a1:39:b2:c1:e6:c5:7c:07:dd:a8:f8:15:c9:b3:08:
                    86:be:72:fa:24:05:ef:06:59:9b:c9:f1:e8:e3:6a:
                    d1:63:c9:70:8d:da:61:f9:74:f9:d6:d5:9c:7c:80:
                    98:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E5:EE:55:C1:50:DA:FA:54:68:85:9A:A1:C9:82:12:B8:6B:31:2D
            X509v3 Authority Key Identifier:
                keyid:B8:8F:F8:6C:47:17:E0:E3:66:F2:90:CD:0D:62:8A:FC:46:A3:8F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b6:e9:9a:53:59:03:e0:1c:2b:6c:a6:fe:74:68:99:93:ce:
         b3:9a:19:07:a0:40:d7:10:b4:e3:c7:05:f0:f1:e4:bd:5d:4f:
         08:d1:cb:ec:79:61:87:59:d5:92:09:9b:28:39:b3:9d:77:12:
         35:e7:d4:21:22:b8:fb:dd:d0:0b:1c:1f:f7:11:20:58:10:86:
         47:46:33:7f:aa:0c:a8:6f:1b:7b:25:9d:f4:1c:93:7e:84:2e:
         7c:ff:bb:2f:ee:a6:69:1a:02:76:f5:90:28:6a:a8:4c:c8:38:
         42:98:9f:d2:3e:9c:96:42:4d:65:f7:38:35:99:59:f0:64:7c:
         55:c8:88:27:1c:3b:24:72:7a:50:ba:4d:8c:df:77:c6:04:69:
         ba:9a:cb:3d:01:e3:c4:c7:8c:1e:8e:7a:83:bb:de:77:bf:be:
         c8:45:84:af:ec:69:b1:79:a5:e9:37:9f:eb:df:42:f5:50:60:
         de:b1:96:e1:f9:ba:0e:98:38:63:ec:4f:c8:1a:a1:00:c3:ea:
         c7:2d:dd:be:d2:87:63:b3:fc:1b:b7:0d:c1:7a:d3:8c:c5:f9:
         f6:3b:7c:23:4a:97:ce:76:e2:30:ae:bd:2d:2b:6c:24:b0:ce:
         46:f6:48:be:04:fb:20:f4:66:c8:68:d5:26:6e:ea:0a:61:3e:
         b6:ef:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----