Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File:                     8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier:          I1vj5NKkffVMJT9a4ivbtwa6i/WOW4Eo0u2cMbZa4XE=
Subject key identifier:   30:FA:FA:D5:0C:56:AA:7A:BF:4D:C5:0E:F1:B2:EA:0A:65:F6:07:50
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer:       /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial:       0192339290FDFC8653CADE9E276FD8FF933A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number:          0D3F
Signing time:             Fri 27 Sep 2024 13:01:36 +0000
Manifest this update:     Fri 27 Sep 2024 13:01:36 +0000
Manifest next update:     Sat 28 Sep 2024 13:01:36 +0000
Files and hashes:         1: 0DWumSc41uHeKdXzYh-sOl267yw.roa (hash: GYToE5Vz7bXaGJOPt2n/HAQb+OU/GCaN/fmO627emTU=)
                          2: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: 67wu65S59CxfuZudCWViVICHSf2tCdEWmsYJn+ZX4p0=)
                          3: DGrPzK-HJkGz0A36SRn-ZYDJTSo.roa (hash: KOQRjipHI4F+tCk+YYIa8KCwejV7MTYs2DTnyt/4WBQ=)
                          4: UJSMkoWYvzNtc7DAmkorRCNf8e0.roa (hash: 0+2Fwk7A6fQnGTiI5NMb17r0w30UT4i8xsmgh7RHtao=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:33:92:90:fd:fc:86:53:ca:de:9e:27:6f:d8:ff:93:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
        Validity
            Not Before: Sep 27 13:01:36 2024 GMT
            Not After : Sep 28 13:01:36 2024 GMT
        Subject: CN=30fafad50c56aa7abf4dc50ef1b2ea0a65f60750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:ff:d0:2e:9f:fc:d3:01:d3:8f:c2:79:f3:
                    18:d0:ff:b3:28:8d:4b:aa:73:04:17:85:89:62:be:
                    dc:3f:35:35:3d:80:11:fe:29:87:82:bb:0b:43:87:
                    39:28:9f:43:2d:ad:bb:cc:5b:89:0a:51:d8:20:8c:
                    aa:1d:28:2e:9b:58:bb:92:45:24:55:02:e3:23:d0:
                    eb:76:29:61:1b:19:a5:e8:fe:a3:60:97:9b:c9:c5:
                    90:12:83:ef:e2:65:b2:bf:87:dd:f4:3f:22:dd:86:
                    c7:1e:0d:ed:51:78:18:3c:4f:c9:07:05:70:42:dc:
                    01:e0:1e:6a:58:9d:a8:4f:8a:ee:5d:6d:bf:dc:34:
                    61:00:a5:1f:cc:23:af:98:51:4f:b0:0a:3f:b4:4b:
                    1d:f0:50:6a:9a:47:2b:a6:1f:83:f7:21:30:a8:04:
                    01:1c:fc:3b:a5:24:1a:34:47:a9:98:34:d0:1a:ed:
                    45:ce:64:64:25:6a:d5:14:ac:6c:3c:6f:df:e7:3f:
                    65:50:79:8c:42:24:37:bd:7b:63:c9:8e:d8:c7:4b:
                    6e:0f:46:c9:50:15:54:b5:17:04:56:b7:f2:14:1e:
                    5d:cf:01:12:47:d7:9f:cb:21:d3:13:12:b3:9e:53:
                    7f:ce:e0:cc:01:2b:ec:5f:66:62:90:14:ef:b9:36:
                    86:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FA:FA:D5:0C:56:AA:7A:BF:4D:C5:0E:F1:B2:EA:0A:65:F6:07:50
            X509v3 Authority Key Identifier:
                keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:76:23:ab:7c:e2:4d:ee:6d:b4:98:4c:58:77:07:09:60:6d:
         b9:98:a8:dc:25:c0:23:f6:0f:71:15:81:3d:fe:3f:f0:3e:cd:
         31:8c:e2:8e:92:40:ae:bc:bc:de:4d:98:7d:c6:92:8b:c2:b0:
         aa:1e:28:2b:31:d7:a2:f4:ca:a2:26:e1:18:95:40:cd:99:a5:
         f7:59:dd:9a:43:5d:14:38:92:a1:6e:72:02:5c:10:fd:e7:ff:
         f5:15:5b:24:91:49:9c:74:37:46:0f:43:b5:b4:96:7e:20:80:
         41:fb:eb:cb:1e:2c:05:ca:2e:e6:55:2f:30:54:35:f6:c0:b6:
         e3:64:8a:6d:ea:61:5a:5a:bd:98:90:f9:f8:f2:28:5c:69:d0:
         75:ff:5f:59:38:c7:ff:37:e0:b2:80:8c:bf:4b:f0:a4:d9:fc:
         89:b0:f3:b7:f7:df:e2:d1:c2:97:b8:47:cf:ed:84:eb:8b:16:
         26:76:7e:43:5b:e9:54:8d:d6:62:41:de:30:e5:41:05:a6:b0:
         7f:a3:0a:de:67:13:d9:e7:f9:70:85:4d:26:53:d2:c5:cd:45:
         59:c7:b9:3e:9b:d7:a0:f5:a2:43:ee:e4:93:9e:5d:74:32:0b:
         12:f9:7a:ae:1b:de:19:7a:35:64:93:6a:8b:97:d2:f2:07:79:
         b3:b5:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----