Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
File:                     JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json)
Hash identifier:          2H1nNLhyEAO0pbqhVHGCIp8CD3a/YFH+ESch+lA4rfU=
Subject key identifier:   F1:21:D3:FD:81:83:5E:17:D5:3E:B7:68:FF:FD:19:FF:7F:0F:27:D6
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Certificate issuer:       /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial:       019369D9D975E24A33F70E82F4450463148B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
Manifest number:          0EA7
Signing time:             Tue 26 Nov 2024 19:01:44 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:44 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:44 +0000
Files and hashes:         1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: zYAqMvgDPRJvw01NdmuHAHpxKF/6Be7RI/WMnQIh6B0=)
                          2: cTN1Y09PtkgkqehmSl_CFfQ7UHQ.roa (hash: ABM56JYlqXXcVK8hHnUO9LjCVD+aT/7wBVQRM8XyDFc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:d9:75:e2:4a:33:f7:0e:82:f4:45:04:63:14:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
        Validity
            Not Before: Nov 26 19:01:44 2024 GMT
            Not After : Nov 27 19:01:44 2024 GMT
        Subject: CN=f121d3fd81835e17d53eb768fffd19ff7f0f27d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d5:85:b9:e3:27:2b:c3:82:86:d4:dc:09:80:
                    ef:c5:98:31:28:51:18:4d:ca:49:2a:99:c5:12:db:
                    eb:c0:15:44:15:ba:b9:21:a1:3f:3e:c9:d3:62:21:
                    b2:d9:4d:3e:01:2e:6d:04:ee:f3:2b:ec:5b:9c:cc:
                    96:76:7b:be:a3:7f:54:b6:90:f4:9f:ab:0e:a4:11:
                    ca:6c:7a:8b:ed:68:61:3f:66:2f:3a:8f:ea:11:22:
                    3a:4d:cd:46:9a:25:b2:78:08:cb:c6:b9:b4:b6:67:
                    37:15:0d:46:43:e8:7a:2e:1f:a0:4a:c6:64:d2:33:
                    4a:17:32:f9:8f:56:b9:8c:11:e9:c2:8b:bd:45:e0:
                    ae:0c:ae:4f:58:e3:68:0b:5e:de:82:8e:d3:6d:6c:
                    3a:ed:a7:c9:69:b8:5d:a8:70:06:46:e8:21:0a:70:
                    1e:89:7f:c7:ef:ad:54:5e:52:02:61:ec:0b:44:3a:
                    d5:da:98:92:45:d9:5e:b8:8a:4f:ad:5d:15:c3:9a:
                    9e:93:52:a5:24:69:ba:95:21:e2:de:0d:1f:94:7d:
                    09:e8:e6:f1:d1:67:93:53:d5:6c:df:1c:fd:f1:6b:
                    91:11:99:2b:f1:67:70:78:9a:de:67:d8:ec:38:07:
                    12:63:83:fd:cf:ea:99:42:95:68:bf:b3:7a:45:26:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:21:D3:FD:81:83:5E:17:D5:3E:B7:68:FF:FD:19:FF:7F:0F:27:D6
            X509v3 Authority Key Identifier:
                keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:96:7b:23:fb:e7:3e:13:03:30:6c:d7:8d:3f:84:00:72:ff:
         5c:3c:2b:34:54:ab:5b:03:e1:ab:63:bc:c3:4a:f4:a5:64:35:
         da:2a:32:05:48:cc:ef:31:7f:84:b7:ee:6b:52:4c:0d:b8:7d:
         13:89:b6:c7:e3:5b:9c:d3:0e:5b:05:ee:ce:65:73:45:38:ff:
         ae:24:5f:0f:5e:83:32:91:23:b2:fe:c8:f9:94:4b:fa:f5:6f:
         71:59:11:05:92:f3:d5:2c:e4:40:44:19:b3:93:0a:d9:f2:15:
         48:1f:70:c4:37:27:80:af:8f:fb:ea:1a:08:b6:61:2e:0b:3b:
         b2:2f:7d:e8:32:cd:0d:09:f4:80:41:c0:a1:ee:7e:d8:85:c4:
         82:06:d5:71:6d:a0:a8:c9:7e:d3:77:1e:f8:49:c8:a6:3e:6a:
         8c:64:bd:20:25:a6:ca:aa:d3:7c:ef:1d:89:b9:8a:4d:89:d4:
         6a:57:f6:dc:5d:d2:2b:a6:55:1f:b9:f8:21:f8:eb:cf:22:55:
         73:71:3f:e2:db:58:bc:b2:1f:7f:a8:7e:e9:03:bb:50:e0:02:
         0d:54:67:68:ee:70:46:30:54:54:2b:0d:51:7d:f1:1b:e7:bf:
         3e:b2:35:7c:37:d1:9a:03:e7:be:b2:b2:49:5a:06:22:ac:20:
         a3:fb:cd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----