Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File:                     Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier:          Jq9LtWhbK68n6kKQ6OsWk6BSef9w5s8rEVu2Nfap+fA=
Subject key identifier:   5A:49:2F:C2:B3:12:44:13:27:F3:D7:84:6C:59:CA:35:D5:72:23:6D
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer:       /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial:       0193549CA10B42E1F3BF3521B5DBDA12E5BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number:          04B8
Signing time:             Fri 22 Nov 2024 16:02:51 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:51 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:51 +0000
Files and hashes:         1: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: Fu5Q03MzQQ7ADyCCncC+4uh8Gr324zolbk2vKZHGkEw=)
                          2: GxKBjFD30qvY4v70Wfak-1MIC8Y.roa (hash: uodzRvB6hfk8yPVql4R6W+zYLvSo08amElKFC5rESpg=)
                          3: UlLbH-09WnLTMQG9KoMCjAfa5nY.roa (hash: KLW1HDd4cOzEoqFswjszeyIsCt3hwPJ7w/qX50vUHwc=)
                          4: jwL0ngc9xWKTxoNLEm28qxl4_QY.roa (hash: cBzsDnojkJVujliTi9yaJb/vDVGe6iY6ke9pCHiVALo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:a1:0b:42:e1:f3:bf:35:21:b5:db:da:12:e5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
        Validity
            Not Before: Nov 22 16:02:51 2024 GMT
            Not After : Nov 23 16:02:51 2024 GMT
        Subject: CN=5a492fc2b312441327f3d7846c59ca35d572236d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:36:9d:ba:97:9a:37:27:11:f2:9a:e7:81:34:
                    53:9d:1b:ce:d5:61:d1:77:08:f5:ad:45:5a:73:82:
                    f5:09:08:de:7e:d8:29:8f:0a:3d:07:62:27:0e:bc:
                    aa:ac:49:d9:3e:88:59:f2:a6:cc:a6:71:26:96:3b:
                    86:53:7d:1c:24:1c:15:7f:44:62:54:ce:6c:ce:1e:
                    79:56:79:7a:b8:6e:bb:ab:88:af:34:f8:d8:da:60:
                    3e:ca:ff:58:af:47:e3:d2:f1:48:9f:dd:27:ef:ed:
                    8d:65:21:d3:e5:6c:df:11:fc:83:1a:3b:91:eb:f3:
                    92:c3:0f:63:07:09:0a:07:3c:f0:08:24:87:08:f8:
                    f2:3f:32:9b:a9:3e:c5:37:74:3a:01:a5:e1:6e:8d:
                    2d:df:4a:27:0d:bd:bf:b1:fc:70:e2:18:a9:71:62:
                    76:c5:89:62:a4:5d:a7:22:e2:6a:05:74:b5:00:99:
                    15:ff:1a:60:d0:5d:c3:5a:5c:c8:4c:d5:c4:27:51:
                    de:e9:9e:b2:ca:a3:46:f5:3f:0f:75:56:f8:0e:f2:
                    70:59:f6:de:7a:49:c4:33:fc:95:2e:ef:b9:4f:70:
                    1d:d3:75:be:7d:db:17:87:da:21:10:18:15:c0:f5:
                    2c:8b:81:c8:3d:aa:c9:f7:80:15:ce:3c:8d:bc:3a:
                    bd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:49:2F:C2:B3:12:44:13:27:F3:D7:84:6C:59:CA:35:D5:72:23:6D
            X509v3 Authority Key Identifier:
                keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:af:c5:b4:dd:b1:41:16:c2:ec:4f:5b:1e:64:b7:33:6e:68:
         88:fe:e2:7d:fa:63:37:60:b0:f8:44:82:36:43:f0:82:4f:be:
         57:f5:c2:57:b4:4c:5b:14:de:a9:38:74:98:2b:5c:70:e9:d7:
         c7:92:0e:61:63:d5:a6:65:b2:93:41:83:99:cc:6a:35:6f:1a:
         f8:94:7b:38:f4:0c:56:14:d2:f8:6d:1e:b3:31:43:2d:0d:1a:
         77:99:4c:b7:76:aa:c6:0d:50:75:9f:db:22:37:d2:f6:a3:bf:
         e8:80:a6:81:8b:7f:c1:ac:8f:26:48:96:9f:b0:af:88:c2:ca:
         94:43:c9:82:dd:f8:bf:7f:92:d4:ee:1f:18:fb:20:0e:27:57:
         10:58:68:aa:f4:8e:e4:ec:de:2c:6e:f3:91:07:ce:aa:eb:f7:
         10:2a:96:a4:7b:98:73:a9:4d:21:0a:ec:be:ab:5c:7c:0d:b0:
         d0:e3:3d:eb:ac:fd:73:1e:94:7e:e7:0e:14:61:4b:75:a3:cd:
         d2:df:b7:e9:85:ac:b6:80:b0:81:19:88:5d:58:ed:ae:30:d0:
         48:2b:21:0d:7f:89:4f:a8:06:24:67:6b:fe:8a:f9:db:aa:33:
         12:cf:72:92:1b:03:39:df:25:2b:f1:1b:6f:90:2c:cb:49:c1:
         51:b8:2b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----