Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
File:                     YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft (raw, json)
Hash identifier:          dSjOkxAtZdGAOF9HnTq48pxp2L2JUUPG9GDtTexpVtQ=
Subject key identifier:   F7:75:5E:4B:09:10:AD:F8:ED:90:2D:C7:34:F4:43:57:23:18:E6:C9
Authority key identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
Certificate issuer:       /CN=60024324c31a2817923e0f6c53790426e142c24c
Certificate serial:       019358785FD9C165D84C4CCB184D2DA4E218
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
Manifest number:          0E24
Signing time:             Sat 23 Nov 2024 10:01:44 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:44 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:44 +0000
Files and hashes:         1: YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl (hash: CSoFtzBU5lFx1vRTc9HBfgudSrb8krYb8L8xLZaXcSI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:5f:d9:c1:65:d8:4c:4c:cb:18:4d:2d:a4:e2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60024324c31a2817923e0f6c53790426e142c24c
        Validity
            Not Before: Nov 23 10:01:44 2024 GMT
            Not After : Nov 24 10:01:44 2024 GMT
        Subject: CN=f7755e4b0910adf8ed902dc734f443572318e6c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c5:6e:90:95:40:fb:2e:07:2f:4e:4a:15:49:
                    9e:96:22:6a:0f:29:40:85:ad:e5:ab:4a:a4:50:55:
                    3b:4c:1c:4f:c7:c3:05:66:70:e8:2c:7f:04:9f:81:
                    0c:1a:52:37:19:f8:bd:df:df:d5:10:50:23:97:a0:
                    c5:79:ae:20:df:9e:31:88:96:4f:ad:c5:98:63:53:
                    88:9d:92:5d:b9:cf:91:bb:ce:e0:9b:13:bf:cf:c9:
                    5c:60:88:ad:91:5f:1d:87:09:c2:f9:04:6e:4f:b0:
                    55:3b:97:39:be:e1:b6:39:55:10:aa:58:ef:24:42:
                    85:c5:dd:8c:09:15:c3:b7:41:82:fb:63:1c:65:3a:
                    8b:02:81:72:12:63:4e:4e:1a:9d:d1:a7:79:c2:ec:
                    25:a3:eb:f0:e4:83:b5:ed:cc:04:c0:cd:a3:8b:c1:
                    7e:6f:6d:e8:64:1a:d6:1d:dc:df:13:56:67:29:11:
                    6e:db:6c:64:a4:85:3c:13:7e:fc:01:eb:d9:88:2b:
                    36:4f:9e:45:fc:0b:8d:98:fd:0f:0b:08:9b:4a:3f:
                    d5:ec:9b:97:6e:c5:31:b7:2b:47:23:6d:0e:6e:41:
                    85:e1:8d:bb:12:2d:76:f7:ec:5e:74:65:5f:15:52:
                    05:f1:72:52:ba:f0:8a:5c:9a:0d:e2:b3:38:33:7f:
                    7b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:75:5E:4B:09:10:AD:F8:ED:90:2D:C7:34:F4:43:57:23:18:E6:C9
            X509v3 Authority Key Identifier:
                keyid:60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8e:4f:29:3f:62:ba:0e:f5:d0:00:ad:b0:ab:7b:1d:84:52:
         37:f1:63:aa:db:47:f1:04:be:07:16:f3:70:71:a3:9c:31:1d:
         81:e1:34:e3:47:4a:e3:5e:d9:84:67:68:a2:4b:54:f9:7b:44:
         5e:fb:14:55:e2:3b:d5:7a:7a:8f:79:df:bf:dd:78:62:fe:c6:
         98:0b:98:2d:ad:44:9b:e3:25:0f:c1:fe:5e:e6:07:ab:69:d9:
         6a:f6:f2:22:6d:3c:37:e7:2e:6e:3b:81:72:ed:fe:28:15:2e:
         16:48:59:7a:eb:cf:6f:d5:04:99:82:4f:80:47:1a:2f:a8:1d:
         9a:2f:cf:94:e7:a3:c5:de:60:83:d6:9f:86:92:80:3f:43:9e:
         7f:04:25:cf:d8:12:31:c5:44:98:88:31:95:bd:28:a8:da:f5:
         c8:28:39:a0:c2:3f:aa:88:aa:53:36:00:07:7d:b1:47:92:95:
         f7:31:0f:a6:32:04:de:47:ad:85:8b:c9:65:66:21:4a:62:b5:
         90:54:a3:03:03:f4:79:16:cb:e7:02:f2:78:73:fc:df:9c:72:
         4e:cf:b4:ea:66:46:e8:7b:58:81:a8:8c:93:77:85:90:e8:d0:
         b5:dc:73:f6:cf:59:37:26:66:a4:ae:d3:76:9b:9c:3e:b1:e4:
         e9:38:6c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----