Manifest

$ rpki-client -vvf rpki.co/repo/Misaka/0/399B4D0E257093D6021FB2BBDC2E862C8B4A78DE.mft
File:                     399B4D0E257093D6021FB2BBDC2E862C8B4A78DE.mft (raw, json)
Hash identifier:          HBvrQrQUAwlF99EmHNE1YS77il3H6kD+eSqgYXeYK8g=
Subject key identifier:   BA:4E:18:F5:14:5F:DE:39:45:FA:2D:84:45:AD:82:F1:25:A3:F0:C7
Authority key identifier: 39:9B:4D:0E:25:70:93:D6:02:1F:B2:BB:DC:2E:86:2C:8B:4A:78:DE
Certificate issuer:       /CN=399b4d0e257093d6021fb2bbdc2e862c8b4a78de
Certificate serial:       1A13AF31BFBE11D13C269D943824D385B2DB1834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OZtNDiVwk9YCH7K73C6GLItKeN4.cer
Subject info access:      rsync://rpki.co/repo/Misaka/0/399B4D0E257093D6021FB2BBDC2E862C8B4A78DE.mft
Manifest number:          0213
Signing time:             Fri 14 Jun 2024 08:46:09 +0000
Manifest this update:     Fri 14 Jun 2024 08:41:09 +0000
Manifest next update:     Sat 15 Jun 2024 10:59:09 +0000
Files and hashes:         1: 399B4D0E257093D6021FB2BBDC2E862C8B4A78DE.crl (hash: 7b764ur6CnFI3qs08s4kyc0PhoBKlZ3BblwucrRzOPI=)
                          2: AS203979.asa (hash: IJmViCRqL5lmDPxifuzz3oaeGnFqkvuAff22uGINsUs=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/Misaka/0/399B4D0E257093D6021FB2BBDC2E862C8B4A78DE.crl
                          rsync://rpki.co/repo/Misaka/0/399B4D0E257093D6021FB2BBDC2E862C8B4A78DE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OZtNDiVwk9YCH7K73C6GLItKeN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Jun 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:13:af:31:bf:be:11:d1:3c:26:9d:94:38:24:d3:85:b2:db:18:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399b4d0e257093d6021fb2bbdc2e862c8b4a78de
        Validity
            Not Before: Jun 14 08:41:09 2024 GMT
            Not After : Jun 15 10:59:09 2024 GMT
        Subject: CN=BA4E18F5145FDE3945FA2D8445AD82F125A3F0C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:fc:97:6d:8e:22:3c:16:49:5e:13:b1:e8:
                    b5:12:e8:15:bc:47:cb:f7:ef:a7:c3:de:a3:b4:f1:
                    1a:43:f6:53:e4:4f:35:7e:75:95:6c:72:49:e1:74:
                    e2:75:68:ab:6c:4b:1f:88:fc:b1:c0:0d:93:64:f8:
                    41:b2:00:e1:3d:4d:fa:28:bc:6c:54:2a:5c:48:3b:
                    68:69:26:16:63:2e:cc:84:e9:2f:e8:d4:2e:f4:1f:
                    5d:bd:1d:3d:5a:dc:c8:d8:a4:36:5e:fa:40:ab:4d:
                    8c:7e:d1:25:9b:d5:54:67:ab:42:56:0b:cb:82:e3:
                    06:33:43:14:a8:5e:c9:e7:ee:3b:b1:35:76:12:7c:
                    81:a3:67:7c:3a:17:38:b8:93:bf:ba:18:37:2e:d7:
                    9d:f8:cd:ae:76:0d:35:c3:8c:df:95:21:2e:ba:1d:
                    86:f9:87:6c:5c:f5:64:2a:d8:af:67:eb:d7:c1:c4:
                    77:d3:b5:15:88:a2:36:5c:8b:2d:e4:11:9b:ce:df:
                    02:72:da:b9:05:2f:a6:b0:d4:f1:bb:e2:8d:dd:f5:
                    f6:76:1b:2e:c2:b9:01:4d:8d:9d:bd:19:f3:dd:a0:
                    45:af:0a:38:c0:77:d6:7f:22:cd:13:0a:96:88:a9:
                    0b:fd:ec:a5:4f:24:eb:56:00:2e:01:13:72:ab:c0:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4E:18:F5:14:5F:DE:39:45:FA:2D:84:45:AD:82:F1:25:A3:F0:C7
            X509v3 Authority Key Identifier:
                keyid:39:9B:4D:0E:25:70:93:D6:02:1F:B2:BB:DC:2E:86:2C:8B:4A:78:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Misaka/0/399B4D0E257093D6021FB2BBDC2E862C8B4A78DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZtNDiVwk9YCH7K73C6GLItKeN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Misaka/0/399B4D0E257093D6021FB2BBDC2E862C8B4A78DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:1c:91:d4:a0:87:f2:58:f5:4c:26:39:d7:82:03:83:bf:75:
         b9:9c:88:b9:23:89:dc:7e:b9:22:3f:c8:40:7b:c3:5e:13:02:
         4c:dc:91:c2:4e:5c:14:f3:09:a4:bb:db:1f:d0:1d:5b:2a:3e:
         ff:9b:11:c1:27:db:ed:65:00:bd:67:ec:8a:be:00:3e:28:eb:
         f1:d2:02:f7:6d:cf:5e:07:34:04:51:4c:0c:91:be:30:b8:8f:
         71:36:3a:52:72:7f:76:04:f2:db:e2:c2:97:be:15:3a:04:53:
         53:67:1b:87:85:c9:f2:5c:89:96:74:dd:a2:1c:71:ea:a0:c9:
         7f:ff:59:49:fe:23:2f:d9:61:58:f3:84:c2:d5:5a:9e:5e:15:
         15:7b:ae:f9:f3:c1:ec:74:9c:24:ae:6c:ae:5c:ef:46:57:e0:
         cf:94:b9:31:ad:91:65:21:dd:9f:11:46:05:c1:de:ff:13:e0:
         04:d5:97:ef:f4:c0:4e:55:77:22:7d:48:cc:df:ae:53:6c:99:
         7a:04:c4:f6:91:5d:c3:f2:fa:73:fa:b6:53:46:a8:b1:9c:cf:
         74:ee:12:dc:8b:48:a4:70:cb:56:bf:fc:bc:02:fd:a3:1d:3a:
         45:6d:4c:e6:d5:fa:4d:76:1d:46:3d:72:07:5a:72:9e:55:bc:
         3c:c5:93:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----