Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
File:                     2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft (raw, json)
Hash identifier:          OpmrQMs5e0ApS+2sUV/Rr7Twld92LPAuQLblwEPWj78=
Subject key identifier:   24:37:94:A9:6C:F6:48:EC:96:DF:68:C5:F1:77:E0:6A:A4:A7:FE:F2
Authority key identifier: D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
Certificate issuer:       /CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Certificate serial:       01903517F314BFE011E2B403F2CC64B7FE8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
Manifest number:          026B
Signing time:             Thu 20 Jun 2024 10:01:20 +0000
Manifest this update:     Thu 20 Jun 2024 10:01:20 +0000
Manifest next update:     Fri 21 Jun 2024 10:01:20 +0000
Files and hashes:         1: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl (hash: 66fMxUsaSPnPHdmsYWnqtQeiJZyUiTVZ5evE6XkoCqE=)
                          2: 5hA8kd9A9pN3TQ0nkImH2Aq4oi0.roa (hash: dihsiU13P/DirodUsfGTs4Gndka9S2LI+thqbvpM1qs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 10:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:35:17:f3:14:bf:e0:11:e2:b4:03:f2:cc:64:b7:fe:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87663c5e14f13746c80f60ba363493d9a4934cc
        Validity
            Not Before: Jun 20 10:01:20 2024 GMT
            Not After : Jun 21 10:01:20 2024 GMT
        Subject: CN=243794a96cf648ec96df68c5f177e06aa4a7fef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:58:36:46:2f:a5:e2:17:c2:9b:c0:2f:a6:
                    5c:d0:b8:d7:c5:3f:8e:f9:5a:7f:6e:91:4d:fe:10:
                    7e:10:bb:1a:ac:3c:c9:72:a9:0e:c2:43:5e:e7:4e:
                    4a:31:e5:ff:dd:d3:aa:00:c1:2e:62:74:9f:c6:c4:
                    7f:95:2c:42:04:6b:dc:94:d0:e6:86:e5:34:9e:a4:
                    d8:be:6f:f7:ea:67:ce:2c:4b:fb:29:e5:08:b0:15:
                    5b:45:f3:c8:61:80:69:ac:8d:8a:3f:d7:f3:08:1f:
                    05:1f:30:c9:32:19:f4:9a:e1:28:11:ac:38:c8:69:
                    2b:d9:eb:e9:1d:2b:34:2e:3f:ce:06:ac:54:40:99:
                    2d:d2:f0:bf:bc:0c:a8:6f:9c:e2:a3:4c:50:bd:c8:
                    5f:54:86:b6:79:7c:72:9d:f3:99:15:ce:12:5a:61:
                    0b:d2:e5:bc:31:d1:b9:9e:4c:05:9c:b7:bc:e0:3a:
                    11:51:7d:b2:35:0e:5c:10:7f:68:a7:7c:a9:46:71:
                    a0:57:f6:db:f7:32:5d:8a:7a:c9:fb:d0:c2:70:87:
                    c8:3f:3e:f9:62:05:2e:74:c1:2c:79:29:d5:13:ef:
                    21:27:a2:e8:db:d2:99:43:9e:95:97:b0:22:ab:1d:
                    4e:71:e0:36:bd:37:c4:11:6c:d2:4b:f3:79:8e:13:
                    3b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:37:94:A9:6C:F6:48:EC:96:DF:68:C5:F1:77:E0:6A:A4:A7:FE:F2
            X509v3 Authority Key Identifier:
                keyid:D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b7:06:79:9c:96:28:09:be:32:63:5f:f9:c7:ac:ec:92:c7:
         f5:09:55:a7:ba:72:81:44:5f:30:0f:a9:c1:31:b8:93:e3:f0:
         4c:71:b4:ad:1d:d2:f5:ea:62:d8:63:18:28:46:a5:c4:4a:6f:
         71:9e:b1:2e:f4:46:50:a5:84:29:96:f0:83:0e:42:02:c8:b6:
         5c:08:f1:d4:01:ba:d5:c9:83:8a:b4:39:75:1b:2f:82:21:9f:
         95:e8:7a:51:01:f8:33:47:cd:6f:81:2e:75:1d:c0:42:ce:aa:
         dd:e1:32:f1:4a:24:e4:4a:43:4a:b6:40:dc:5e:7a:15:83:b2:
         56:a3:ea:34:c1:5a:58:8c:d0:00:0f:5e:bb:39:75:a7:73:dd:
         08:6c:18:ae:c1:8d:36:e7:96:ac:42:d2:54:fd:fe:1b:a0:87:
         69:88:99:88:07:d4:96:29:ec:77:2c:9e:77:1b:a2:55:b4:5c:
         92:8a:1b:35:11:17:c6:ad:03:f3:34:68:88:73:97:dd:98:76:
         3e:cf:e4:fa:9e:ef:5f:f8:8d:d4:6b:01:07:3c:9d:b7:ad:dc:
         2d:07:86:a1:13:76:6d:56:f1:fa:10:b1:b0:56:d4:a7:b4:36:
         f3:c5:7f:51:1a:19:6a:72:dd:78:fc:e4:cd:fc:01:8e:f5:bf:
         c5:6e:37:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----