Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
File:                     jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json)
Hash identifier:          wSU8qmGisNQuCNx5CoMdFXnEHluzVbjtGvTqkLj/X28=
Subject key identifier:   A8:B9:BD:20:92:04:C9:37:AF:94:50:58:84:C0:0D:27:55:FD:E6:54
Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
Certificate issuer:       /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Certificate serial:       01936A4651229080E3DE2A365EB4CCB4F731
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
Manifest number:          06FE
Signing time:             Tue 26 Nov 2024 21:00:13 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:13 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:13 +0000
Files and hashes:         1: YgsfBcZ5juN_9kjdn9zXMzd3Je4.roa (hash: XyR7IGzyeYy7FE/K7LfsXKb3JW6Hi8maCPxW7pi1040=)
                          2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: dvr15OoMu7YTfnGqeb3DZTDPpKcHu3fETiqMmhQ/xWc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:51:22:90:80:e3:de:2a:36:5e:b4:cc:b4:f7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
        Validity
            Not Before: Nov 26 21:00:13 2024 GMT
            Not After : Nov 27 21:00:13 2024 GMT
        Subject: CN=a8b9bd209204c937af94505884c00d2755fde654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:0e:44:3f:7b:a4:75:e9:5e:79:a5:f4:8d:
                    fd:ca:f7:c5:d9:59:5b:4c:56:00:12:c2:bd:9b:ba:
                    a5:bd:22:a7:8f:33:ce:6d:3b:78:6b:7f:17:8d:14:
                    02:8c:af:b7:b6:5d:d9:c8:9d:77:7f:48:60:60:60:
                    33:12:c5:63:c7:5f:4b:39:67:86:a3:f1:98:86:4f:
                    77:1a:90:68:3b:96:82:e4:ce:cd:ee:84:b3:ee:d1:
                    09:c7:0b:06:bc:c4:9c:5d:0d:d2:48:91:80:5c:ab:
                    99:6d:6f:dd:3b:51:26:d7:aa:dd:97:ae:df:74:65:
                    3f:d8:97:eb:14:fb:84:a6:e3:89:2f:fe:0f:c5:f7:
                    fa:9e:93:2e:eb:68:62:a6:89:05:1f:5d:96:53:cc:
                    41:77:a5:f4:dc:2e:41:ab:1d:6d:93:be:d1:92:54:
                    a8:af:89:04:ba:17:bf:a0:d9:0a:3d:e2:06:79:a2:
                    10:91:4a:6b:36:46:58:9c:f8:09:bd:b7:8c:46:08:
                    fb:1a:10:19:7a:48:9c:00:14:39:02:c6:85:f9:73:
                    33:93:fa:17:d0:8c:3d:af:8e:5a:7a:a6:10:a7:cf:
                    9d:0d:08:ec:e8:b4:6a:64:09:23:98:14:72:da:57:
                    14:c1:2b:50:0e:0f:3e:89:18:62:d1:87:2a:3c:ec:
                    ce:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B9:BD:20:92:04:C9:37:AF:94:50:58:84:C0:0D:27:55:FD:E6:54
            X509v3 Authority Key Identifier:
                keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9b:2c:52:bf:1f:e8:0d:b6:0f:74:cb:88:a3:dd:e4:63:f7:
         63:e6:18:2d:69:65:14:b2:00:07:17:d8:62:62:e7:12:75:c9:
         21:60:93:74:aa:b5:d1:d3:70:0b:ef:12:4f:f6:ed:40:66:da:
         5b:56:fe:2e:fe:32:c4:93:8f:f5:27:71:02:61:47:01:a5:86:
         58:2b:8c:b8:84:7f:44:4e:b5:ec:d2:b3:3e:2e:14:5a:ff:c2:
         6d:28:51:ee:c7:a4:f3:e3:ce:41:2b:b0:26:6a:3a:92:8a:c1:
         12:4f:3a:60:53:8f:c1:cf:6c:b1:a3:e4:1e:63:0a:9a:cb:44:
         4a:07:7e:f8:88:e2:53:c2:9c:d9:37:87:83:6f:ee:69:39:0b:
         91:5b:01:e1:2c:f4:7a:3a:e4:71:f7:4d:42:49:6c:74:9c:2a:
         ee:d5:e1:ea:a0:36:2d:aa:cd:c4:13:11:3c:ed:48:cb:fb:af:
         0f:b6:76:3f:db:7f:53:cb:36:5e:d6:d2:e4:ab:0c:95:68:35:
         7c:89:bc:a6:4c:8e:ff:7e:fe:fb:7d:b1:9e:00:03:70:8e:73:
         56:13:3a:ab:b1:7e:a0:a2:11:43:61:3c:73:6f:6a:e5:51:c4:
         16:55:50:35:a5:68:c2:f6:40:3a:04:b8:54:46:b8:26:a1:4e:
         3c:29:dc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----