Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File:                     k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier:          PJMozeQoMzDD7qbCfJzsDrk/0z0MMlPj8C0bqmAsIhM=
Subject key identifier:   A9:4E:7D:6C:D1:94:0A:7F:BE:97:C6:79:5A:C6:39:F1:CB:C4:35:B3
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer:       /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial:       019357D2A243E1697F51EB92BDA0BD31B598
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 07:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:41 +0000
Files and hashes:         1: FFw_5Dlhm9jjfyxy1g_vXoShNRE.roa (hash: mtIeTmRlOUdPExIGmeOufw90bYGUuIazXwq569QNFe0=)
                          2: KfM4cZuaqKPM_aLCyTRU27gzc1I.roa (hash: A7XwVk9/fxy3KeKkpEJZZTbQEVqQQ7Jhr/fQTzkJUW4=)
                          3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: i5XMUhFX5qCYqOSoO9mHbZ3JugO/BsP0o8re+a+LUCc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:a2:43:e1:69:7f:51:eb:92:bd:a0:bd:31:b5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
        Validity
            Not Before: Nov 23 07:00:41 2024 GMT
            Not After : Nov 24 07:00:41 2024 GMT
        Subject: CN=a94e7d6cd1940a7fbe97c6795ac639f1cbc435b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:fa:89:00:5d:73:bc:02:bb:97:64:79:16:
                    4c:b3:a8:30:9f:a0:fa:2d:83:83:4c:74:c4:e9:9a:
                    eb:2d:14:bb:e7:4c:ff:c0:79:ee:67:4b:67:62:e9:
                    3c:f2:a8:e7:97:27:22:a2:65:38:5e:c9:ef:e8:07:
                    9e:98:6e:a9:94:b0:c0:39:05:ff:8f:05:a6:7b:a7:
                    da:a8:75:e9:21:4e:9d:d8:d9:a8:a2:1e:09:5c:60:
                    00:be:58:46:b1:fc:57:0f:f3:7c:a5:3f:76:34:21:
                    01:05:d5:52:c2:d6:00:e9:ff:22:22:d3:93:e4:82:
                    d6:b9:7a:56:81:63:fa:63:90:37:13:49:ff:f5:08:
                    7b:f8:63:50:ca:54:68:ec:c8:b3:e0:0d:af:f3:fc:
                    34:0e:a9:13:bd:00:63:77:e9:b4:52:2d:a4:a1:1d:
                    e3:86:4c:fb:63:6d:05:d2:77:03:dc:f0:26:d7:00:
                    82:2c:80:a1:56:d0:16:d1:3d:d9:ea:6a:9d:6a:08:
                    8c:92:97:4b:37:bf:06:dc:99:db:c2:43:bf:94:72:
                    28:a3:63:93:c5:19:c0:a2:01:98:87:7b:1a:17:1b:
                    05:4b:6d:d9:28:f0:48:26:7b:2d:5e:33:13:05:bc:
                    c6:0b:d8:d3:e6:b3:3b:f7:ae:a5:a9:01:af:90:7c:
                    93:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4E:7D:6C:D1:94:0A:7F:BE:97:C6:79:5A:C6:39:F1:CB:C4:35:B3
            X509v3 Authority Key Identifier:
                keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:9b:72:b7:e9:81:7f:0b:6d:b8:25:a9:87:d1:91:d4:29:ab:
         32:2d:cc:db:d9:2e:84:57:09:19:b9:e3:e4:b6:14:87:8a:7a:
         3e:73:5b:32:13:ef:b1:74:e1:19:00:a1:a8:9a:af:c1:67:d1:
         b7:c2:8b:28:54:06:33:df:03:76:49:84:70:a5:06:69:0b:f2:
         b2:99:ac:d3:6f:0d:f9:7e:7d:cb:75:52:08:8c:f0:b8:f9:f3:
         cc:92:2e:3b:84:49:47:a2:89:5b:e7:c7:af:a0:1a:19:3b:05:
         fd:bf:bc:83:0e:97:a5:48:4d:2e:91:90:ee:d1:5a:e9:6c:8f:
         f3:a9:f4:8b:17:4b:dc:44:dc:7e:f3:d3:c0:78:cb:6e:56:17:
         e1:de:52:68:6d:e8:f4:cd:64:55:d4:25:be:b9:2b:79:15:58:
         22:8f:c6:52:a5:9f:5c:da:4d:63:62:df:64:5a:d6:a7:92:c2:
         50:a6:60:dd:45:23:fb:05:a1:ac:89:3f:fc:f7:cd:97:a9:87:
         68:79:39:e7:87:7b:2f:ac:8d:5a:be:5a:73:b4:0d:a7:bf:92:
         0e:7a:1d:ea:6a:5b:3b:3c:97:db:ea:c0:7e:4d:47:2c:ed:93:
         c9:13:d6:95:f6:da:82:87:12:fa:89:55:bb:52:20:29:29:e5:
         f8:9f:61:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----