Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File:                     pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier:          PiXfZS43U5hcMLYePxTaqBjaHXGx0gbNq9CQU4pXTus=
Subject key identifier:   6E:F3:FC:5F:E3:7F:4A:3B:F8:BA:37:31:98:16:CD:7D:A4:E4:0A:93
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer:       /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial:       019352AE0F0640FF817A9F7413E88D9743BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number:          05E6
Signing time:             Fri 22 Nov 2024 07:02:39 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:39 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:39 +0000
Files and hashes:         1: Lnp4mlPm1Jr9KAx0myuJrx7G98w.roa (hash: rlZ05JqIzHCTcJiZraGM18rvqC5Q1A5N8wwe7jWdl6s=)
                          2: S918gbqqQB6fRC711rAQWQPNIJM.roa (hash: +ixw+AHehEuWyjEgK1GWoKTT7m7PVouSRU1jNxb0uwI=)
                          3: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: JV7rpWLc2LPQwDIBQdBH7jZw/fY21hl5x1Z+QraOVv0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ae:0f:06:40:ff:81:7a:9f:74:13:e8:8d:97:43:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
        Validity
            Not Before: Nov 22 07:02:39 2024 GMT
            Not After : Nov 23 07:02:39 2024 GMT
        Subject: CN=6ef3fc5fe37f4a3bf8ba37319816cd7da4e40a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:4c:32:26:16:f0:92:ca:5a:35:77:d4:dc:
                    a5:cb:31:d5:b5:27:81:a3:f0:2b:14:17:c5:c2:42:
                    f8:b2:ba:6c:3d:e3:52:41:99:eb:31:a9:7b:66:9b:
                    14:70:61:c3:1a:15:d7:0b:b4:80:bb:3a:73:38:e7:
                    4e:a1:f2:07:7a:9d:7b:d9:da:8d:89:43:ca:0a:c8:
                    f8:0e:69:48:0b:c8:8a:b3:f6:4b:1f:1d:fd:06:0b:
                    0d:17:56:74:ef:60:a5:fe:2a:8c:3a:7a:73:4a:0f:
                    fb:bd:86:32:58:9e:96:d0:24:3a:1b:3b:90:98:85:
                    c2:97:a0:ed:61:b6:cf:53:f6:3e:e5:ac:4f:a1:ba:
                    8b:77:28:b1:8e:7a:08:c2:32:a3:60:31:20:f7:44:
                    6d:c5:60:1f:37:e2:82:9a:05:c4:46:82:96:61:73:
                    6b:b8:a6:b8:28:11:d1:94:42:2d:fc:eb:7a:a2:3a:
                    02:e7:a9:7d:b6:8f:84:1f:14:db:25:50:cd:fe:79:
                    4d:9e:ac:77:f5:9e:6b:7e:7c:9e:4a:56:b6:d2:45:
                    78:8b:87:9d:e9:45:53:19:b2:43:62:a4:c1:67:7b:
                    83:3f:68:14:52:aa:aa:5a:24:24:e0:3a:1b:15:59:
                    d4:35:fc:65:65:f8:a8:df:27:6d:2a:2d:94:7b:08:
                    4a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F3:FC:5F:E3:7F:4A:3B:F8:BA:37:31:98:16:CD:7D:A4:E4:0A:93
            X509v3 Authority Key Identifier:
                keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:14:66:9e:8c:45:8c:2c:31:16:f4:a5:2f:70:10:03:aa:98:
         8f:b6:af:af:15:d0:da:b2:18:09:1d:7a:05:4e:cd:9c:a1:37:
         38:06:f1:01:83:36:d5:a4:14:c7:e0:ae:5b:1a:7e:e6:9e:25:
         43:db:1c:02:f2:5d:7e:41:9c:ff:7e:b1:7a:9e:2d:c9:4f:23:
         a7:24:b1:1e:c0:c2:c0:2b:46:2d:59:a2:4a:79:89:2d:b1:8e:
         9d:d0:c6:27:aa:78:ed:1a:1d:57:16:87:29:6a:50:1d:ba:d0:
         51:51:9e:ae:df:5f:a8:66:90:a9:c2:1d:36:e9:0b:c9:72:f5:
         ed:b8:2a:24:7c:7a:fd:fc:99:15:69:e3:52:dd:ba:98:a9:1d:
         e4:55:f4:59:bf:b5:00:0a:1b:09:3b:c8:32:4c:fe:ed:51:df:
         17:84:5e:30:18:84:60:82:b8:b8:56:60:fa:17:b1:aa:11:8c:
         ca:b1:da:de:6a:8c:a5:29:fe:8c:02:ed:14:48:b4:5b:37:55:
         a2:bd:02:ca:f3:11:3d:df:09:da:96:9a:f9:5a:48:3e:30:d9:
         5e:92:18:d7:d2:67:28:9f:6a:8f:6a:62:9b:2f:b9:5d:ae:e2:
         0f:2c:6f:43:c4:72:87:d2:6e:3d:d8:a6:48:a0:35:25:80:4a:
         dc:a4:7e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----