Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
File:                     zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json)
Hash identifier:          K9Z+anEeDZPDXqWTlmRKc3s4+BjHHcYmaazx2x+tGLQ=
Subject key identifier:   32:53:3C:AE:CA:F0:47:C8:C6:2C:40:B5:2C:C7:DF:29:17:45:C2:34
Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
Certificate issuer:       /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Certificate serial:       01936A7D7D2B11407CAA5BDADCB67DB4E08D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
Manifest number:          1119
Signing time:             Tue 26 Nov 2024 22:00:29 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:29 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:29 +0000
Files and hashes:         1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: 2T8L/KhROTBFoxuBvX+vfvbbAaSrNM5R4WGI7ui6znU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:7d:2b:11:40:7c:aa:5b:da:dc:b6:7d:b4:e0:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
        Validity
            Not Before: Nov 26 22:00:29 2024 GMT
            Not After : Nov 27 22:00:29 2024 GMT
        Subject: CN=32533caecaf047c8c62c40b52cc7df291745c234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:35:8a:0a:95:ee:d7:16:53:9c:c4:11:9b:9f:
                    a7:63:ea:3e:6c:51:26:3d:31:d2:81:a1:ac:a0:56:
                    bc:26:64:43:1e:71:d7:18:8b:43:85:76:e7:03:66:
                    b5:59:71:3c:8f:11:bd:76:dd:52:b1:12:b2:61:bf:
                    59:96:fe:bb:a8:65:96:44:a5:69:33:f4:36:bb:81:
                    50:0c:8c:f8:ce:49:1b:fe:fe:6d:f6:a8:55:6f:cc:
                    a3:b2:4e:28:f0:01:e2:5f:a9:e6:43:26:a9:90:a6:
                    8b:a3:9e:f4:cb:c1:5e:f0:42:72:68:ab:f8:15:0d:
                    f2:21:5f:0d:c6:d5:83:21:08:a5:46:3d:46:a7:fb:
                    92:d9:eb:21:02:e4:41:d2:97:34:3d:ae:3e:0e:4c:
                    1d:26:1b:49:86:57:15:4d:a7:36:12:be:d1:26:49:
                    b3:68:02:3a:79:bc:7a:4c:d4:00:bc:41:cf:de:0f:
                    7c:f8:12:74:0f:23:bf:73:2e:4a:41:ad:3b:f1:b8:
                    36:c4:ed:c4:61:4e:c1:64:90:44:1d:46:3c:7b:a4:
                    74:d2:a2:cf:a5:bb:cc:34:39:3d:9f:54:d4:54:c1:
                    05:1f:70:b7:e8:74:a7:63:cb:80:db:d0:f0:17:fc:
                    51:c9:ba:ea:74:c6:81:93:e0:8e:ea:9c:41:c0:2a:
                    15:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:53:3C:AE:CA:F0:47:C8:C6:2C:40:B5:2C:C7:DF:29:17:45:C2:34
            X509v3 Authority Key Identifier:
                keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:6a:69:94:e9:fd:28:e1:72:02:5f:ec:58:3d:de:3a:7d:b1:
         4f:23:ed:12:5d:eb:05:c4:0c:1e:59:f0:8d:2c:67:73:dd:57:
         9a:d3:2f:03:8f:2a:22:9e:32:12:be:23:39:ef:82:6e:94:dd:
         52:54:76:92:59:bf:9b:38:b3:6f:21:33:c7:e8:37:b1:38:67:
         64:a2:e5:57:de:b4:c5:9a:36:2f:a4:a5:6f:e1:f0:be:bb:e1:
         d8:4d:d8:98:55:56:ad:99:32:fe:d0:b8:b6:f6:14:02:69:89:
         84:d2:0d:1a:47:3d:7a:88:2f:12:5d:40:06:4f:2d:60:8f:82:
         c4:c3:37:73:97:a5:f6:37:22:6b:59:55:1b:f1:1c:55:a3:6c:
         05:cf:31:a1:a4:c5:b4:3e:e4:59:c4:bb:ff:c6:91:ce:d2:12:
         1d:4c:93:4f:cc:ff:20:be:23:3c:1f:b9:a5:a5:4b:80:dc:0d:
         9f:97:ab:8b:fe:f7:86:fc:c4:63:06:0f:3c:87:b5:5b:ad:b2:
         a8:7d:2f:22:46:8b:ac:91:97:83:73:f3:f1:b6:c5:c9:0c:8b:
         f3:72:bb:6c:c7:81:53:de:c6:88:dd:af:8e:41:0b:f9:90:e4:
         25:82:4a:49:dd:51:fa:65:14:24:e2:93:e0:52:3e:cc:b9:af:
         6d:8a:44:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----