Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File:                     CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier:          NoWcCcRicniWC9u1cWFcTPpA1VZCLnIu4kdORHDCiUY=
Subject key identifier:   70:4D:C6:50:B2:88:E6:08:33:77:60:87:88:04:3B:7A:91:FA:5D:59
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer:       /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial:       019336227A4D4F1F319DA22B0403AE25785E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number:          1362
Signing time:             Sat 16 Nov 2024 18:00:49 +0000
Manifest this update:     Sat 16 Nov 2024 18:00:49 +0000
Manifest next update:     Sun 17 Nov 2024 18:00:49 +0000
Files and hashes:         1: 1-t_f3zq83mTDYljiIjLDgCjWfIU.roa (hash: L1sflEACERYqktzUVTdZCvjtSLNk6lBpifL3uBl7bbs=)
                          2: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: A8zJCxyvIw/f5H2CKGMlpPDjgu7sO9trmkmkiiJnP1Q=)
                          3: rElWlT8sjWlXnnzvZNqIuABvLdA.roa (hash: /EPPOCWPThckca/V+3doeHwSFT6d4B3Cl6ojGlgep3k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 Nov 2024 18:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:36:22:7a:4d:4f:1f:31:9d:a2:2b:04:03:ae:25:78:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
        Validity
            Not Before: Nov 16 18:00:49 2024 GMT
            Not After : Nov 17 18:00:49 2024 GMT
        Subject: CN=704dc650b288e6083377608788043b7a91fa5d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:db:d0:47:70:6b:31:3e:be:d1:68:c5:40:18:
                    1d:e3:b1:15:c2:f2:84:1c:3d:39:fd:83:5d:24:20:
                    4d:3e:c7:82:dc:28:74:13:a3:91:27:64:da:29:1d:
                    a7:67:db:1c:57:e3:37:ae:9a:63:81:c6:7b:40:66:
                    c7:38:31:9c:c6:00:97:f6:16:b0:75:40:9a:db:6e:
                    7a:57:ce:e2:f1:2f:71:19:d1:e2:b5:15:60:e4:9b:
                    a0:16:f3:a5:41:99:77:5a:22:fb:37:96:9c:c8:80:
                    2e:7b:07:93:77:a9:79:b2:b7:f3:1f:92:fb:26:c9:
                    e8:5e:0f:58:a4:52:94:17:20:6f:cd:c7:af:88:b9:
                    49:6c:85:fc:82:77:e8:05:0b:11:eb:dc:4d:5d:82:
                    b9:46:77:85:da:0e:9d:bd:01:3e:a5:6b:0c:b4:af:
                    4e:a8:a7:0a:ae:20:50:c3:0a:6d:bb:06:ac:24:ed:
                    ee:3d:2d:b9:3f:24:b6:44:19:da:ca:26:30:52:59:
                    3a:00:a4:d6:92:31:f2:49:f4:7b:a2:b1:0c:aa:a5:
                    1b:18:d9:ab:cb:77:95:43:52:7a:64:78:62:52:e1:
                    ce:a4:62:d3:a3:a3:bb:85:86:67:88:28:e5:91:fa:
                    73:61:7d:7e:fe:77:53:17:d1:7a:04:8c:f0:62:ca:
                    d6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4D:C6:50:B2:88:E6:08:33:77:60:87:88:04:3B:7A:91:FA:5D:59
            X509v3 Authority Key Identifier:
                keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:0a:a4:62:ff:8a:06:b0:a4:05:21:2d:92:51:88:00:f4:32:
         34:d5:a0:1b:bf:ae:a2:7a:15:3a:8d:c3:e9:37:51:16:7b:9d:
         61:0d:c1:24:e5:df:05:bf:d9:5a:52:3e:46:6f:86:a3:a5:ea:
         dd:d4:05:ab:ab:2a:6d:7e:ed:66:c9:65:f2:7e:43:eb:80:00:
         4d:77:d3:7d:f2:ae:26:17:15:85:aa:ae:3c:65:02:a8:e0:a0:
         cb:5e:48:5a:3a:c9:c9:19:67:48:4f:6d:db:37:1c:3c:96:97:
         21:6c:a5:fa:2e:c7:b4:64:58:15:bb:38:0d:3b:19:e2:64:6a:
         12:11:a6:c0:f3:58:dc:6c:ce:e2:30:ee:74:8e:07:84:b1:5e:
         1b:dd:b7:ed:99:b2:a3:75:d0:45:c3:a6:d0:68:0e:c8:8d:b9:
         07:5b:5e:a5:3c:65:96:b4:b5:5d:3c:2e:64:eb:87:4a:5d:6a:
         73:78:6d:fb:50:36:94:ec:25:32:7e:08:58:ce:17:04:b9:fd:
         57:e5:f3:fd:38:7b:e3:bf:a7:a7:73:33:ce:29:0f:96:f8:12:
         ef:bd:51:43:63:09:e4:33:2d:21:60:4e:d3:68:92:c9:11:60:
         63:e6:9f:04:9c:f2:9a:27:61:04:fa:d4:85:aa:a4:94:dc:81:
         f1:e3:4c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----