Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File:                     U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier:          NGfuTMNTqPxwCtYj4PTrDHOhXWoUiYdazDqqZwAviHU=
Subject key identifier:   9C:4A:10:53:68:59:60:9C:36:65:F4:8D:D3:39:B3:FC:83:0C:A7:E2
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer:       /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial:       019365FE7818299EEBECC9894EACAFFF1895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number:          137F
Signing time:             Tue 26 Nov 2024 01:03:15 +0000
Manifest this update:     Tue 26 Nov 2024 01:03:15 +0000
Manifest next update:     Wed 27 Nov 2024 01:03:15 +0000
Files and hashes:         1: CZyIBB_sMdRtdDbsy4-MvLAw1OE.roa (hash: tDBMPImX9KcWuPG7MObee5DVuOvuiQWeAn/bqOSe6As=)
                          2: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: h2cKSaLb9tRrvKTpBSS8PRB6Ef9vlWgCYzd9F3loaGo=)
                          3: fHWNHAXNZAZXVt-ZFMB3ENVnY9Y.roa (hash: bndX1rUjPM1IInEuSXfoZ0MT9WVnUeyYHmYWrDfUD14=)
                          4: m0mxL_jlvXSiQsscQ_yVMuFDwEE.roa (hash: wiMYUdHwQFM1leb/GcI3OPBou+8q7tUXsUfpSnvhpYk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fe:78:18:29:9e:eb:ec:c9:89:4e:ac:af:ff:18:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
        Validity
            Not Before: Nov 26 01:03:15 2024 GMT
            Not After : Nov 27 01:03:15 2024 GMT
        Subject: CN=9c4a10536859609c3665f48dd339b3fc830ca7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:16:12:8f:63:1f:97:14:52:49:7b:fe:bf:90:
                    73:30:31:a9:61:32:65:e9:c1:4e:f9:e8:5d:d4:8a:
                    c4:47:bc:74:76:40:3d:48:bb:0b:1c:5c:db:35:90:
                    a6:59:c3:72:d8:04:18:bb:76:2c:e2:af:63:8a:83:
                    62:43:ee:9c:35:6b:81:7e:bc:e6:4c:b7:51:ab:8f:
                    ff:ed:a9:78:2d:2f:22:04:e1:29:d3:6d:b0:85:fe:
                    83:3b:4e:85:99:b5:81:f9:bb:f0:54:e9:f7:0c:90:
                    3c:aa:64:c1:c4:b2:31:63:5d:a6:00:1c:2d:2b:99:
                    07:89:21:bc:9e:36:59:ca:d4:70:28:57:0c:08:12:
                    73:62:43:5f:5f:1f:42:ac:75:42:63:a5:b9:04:3a:
                    d6:18:2e:b4:c3:61:65:40:21:e1:22:cb:e5:d9:80:
                    18:da:b8:7c:6e:8b:e5:fe:5b:4e:70:ae:6b:9c:04:
                    51:a5:e1:28:b0:b9:c4:3a:5c:83:50:d1:86:fe:c2:
                    12:db:05:df:f3:0a:84:70:35:93:1e:e4:1a:ca:4f:
                    4c:05:aa:41:df:d3:32:12:d0:40:42:41:39:4a:04:
                    42:00:03:8a:02:8c:82:34:75:49:2f:b8:ad:19:96:
                    81:7c:c5:89:17:f2:94:c3:c7:8f:80:84:21:08:25:
                    8a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4A:10:53:68:59:60:9C:36:65:F4:8D:D3:39:B3:FC:83:0C:A7:E2
            X509v3 Authority Key Identifier:
                keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6b:8e:48:cc:ad:cd:2c:4c:2f:d7:70:7a:f5:ab:30:e2:e3:
         c0:da:9b:5b:c6:1f:48:62:f8:27:48:79:1a:ed:06:7e:89:1c:
         b8:29:71:f6:ba:34:22:a8:38:c9:86:29:c6:48:5c:a6:42:e1:
         aa:27:1b:dd:da:06:ba:f6:d9:a2:c5:fe:84:87:af:39:88:ea:
         ff:43:07:9e:13:22:e4:1a:83:d3:70:de:5f:61:6d:f7:c4:f3:
         b1:3d:70:48:0f:26:d6:d4:c2:58:f4:e1:96:7d:f2:f1:70:19:
         de:37:22:55:8f:d3:ce:e3:af:29:fe:60:9c:a2:a9:c3:6d:d5:
         73:2c:3a:1a:9b:d9:5d:e9:b4:3b:16:62:52:49:39:3e:32:07:
         88:46:00:2e:05:d7:03:e0:a0:bb:33:57:10:6e:eb:e1:5d:be:
         ab:11:bd:94:39:aa:a7:cf:7a:e1:a7:b6:41:73:49:e6:9a:95:
         f7:bf:66:7f:69:62:09:02:23:f6:ee:4d:25:b4:42:e6:83:64:
         53:49:10:48:72:07:b7:af:17:e5:f6:c5:9a:05:9d:05:0e:d8:
         f4:3a:ff:f9:66:71:f5:23:c1:20:5e:63:4b:47:52:df:b0:de:
         e8:d7:d6:56:5e:95:97:6c:26:ab:3e:ec:57:d5:09:08:a6:24:
         c3:30:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----