Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
File:                     Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft (raw, json)
Hash identifier:          wfx/2x1jyfDfbL6W1VYcEFeZSX79Vk8hk3cBK8YZyrk=
Subject key identifier:   81:DB:5F:B4:AA:5C:68:3E:EE:5F:F7:B0:D1:4B:70:A6:8B:7A:0B:59
Authority key identifier: 16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
Certificate issuer:       /CN=1627b80681f5b48e126898295983e0df29971b98
Certificate serial:       019356F73AAB3FCFFB83FFEA60A9784D97CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
Manifest number:          0D6B
Signing time:             Sat 23 Nov 2024 03:01:03 +0000
Manifest this update:     Sat 23 Nov 2024 03:01:03 +0000
Manifest next update:     Sun 24 Nov 2024 03:01:03 +0000
Files and hashes:         1: Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl (hash: PEUG96zUEw29qwDZERiV+q2lTVvTtLOK6oYTSgGDLO8=)
                          2: MnoBa_w-qVyFn7m-dSU1hXf8x1A.roa (hash: TUPqqkGrqP3Kldv/T7TrmH1znAZOr9hDKyDXE+bSBpo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:3a:ab:3f:cf:fb:83:ff:ea:60:a9:78:4d:97:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627b80681f5b48e126898295983e0df29971b98
        Validity
            Not Before: Nov 23 03:01:03 2024 GMT
            Not After : Nov 24 03:01:03 2024 GMT
        Subject: CN=81db5fb4aa5c683eee5ff7b0d14b70a68b7a0b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:81:ae:f4:70:2c:ce:75:c5:7a:90:2f:e6:0e:
                    56:b3:f7:45:3d:77:e0:4f:c3:57:3d:dd:d5:5f:cb:
                    6a:ad:c6:16:d1:03:6f:ab:b6:84:40:39:12:15:da:
                    03:23:74:32:ed:50:ed:8a:92:1b:35:f3:f4:19:da:
                    37:1d:78:19:a7:11:43:a4:89:be:ca:fa:f5:a9:b4:
                    8a:c5:95:ae:e4:b8:27:a8:59:f2:c6:a5:17:c1:95:
                    77:1d:6b:2f:30:a5:cd:b7:cb:d1:44:54:1b:83:b8:
                    d4:30:9b:28:2e:f8:12:03:ff:fd:ef:3d:04:0d:b4:
                    34:9e:72:f8:45:9e:37:b7:c9:5b:e4:be:f2:36:b5:
                    05:26:74:15:82:c2:82:0b:b8:71:98:69:6f:3a:3a:
                    de:97:02:9b:41:e6:3d:e4:c8:c2:02:68:eb:04:76:
                    43:1b:cd:80:bf:90:ed:ae:aa:7f:03:5e:9e:89:00:
                    2a:97:55:f3:fb:b2:aa:e8:bc:b0:98:6a:2f:3a:4b:
                    3a:1b:bb:5e:8d:cc:d8:a8:e2:44:99:b3:f9:21:72:
                    2d:fc:0f:da:1b:e5:84:f4:88:86:2a:b4:2a:9c:42:
                    5a:c5:4b:6c:50:e4:3b:da:47:3d:e9:2f:70:60:1b:
                    a8:da:f5:3a:de:09:e7:b0:15:16:ad:e2:d8:33:5d:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DB:5F:B4:AA:5C:68:3E:EE:5F:F7:B0:D1:4B:70:A6:8B:7A:0B:59
            X509v3 Authority Key Identifier:
                keyid:16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:07:85:4e:e4:a2:df:c6:70:22:d0:80:c2:1b:a3:c0:a6:20:
         61:48:da:0d:d1:9c:35:94:54:49:86:56:f1:54:c8:77:96:36:
         81:7f:2e:92:78:22:2a:03:48:c1:8c:05:33:31:32:58:32:1d:
         75:43:f4:80:a1:56:df:5b:d1:e0:0c:2f:e4:ac:f1:76:28:c1:
         a0:06:5e:aa:d3:11:69:ce:7a:0d:44:bf:a6:17:6f:9e:30:80:
         6d:33:0d:da:74:5c:62:83:68:75:56:6e:15:88:fb:b6:77:69:
         a6:3c:f7:dd:f5:ca:85:85:db:9b:12:e9:f6:5b:e3:1a:32:11:
         c5:b8:68:b4:2e:80:36:6b:26:e8:4f:1f:04:25:47:7c:26:39:
         7b:4b:36:bb:f4:c5:da:61:dd:f6:f9:09:63:32:61:16:05:fc:
         82:9a:3c:55:cd:14:04:d5:10:f6:46:ad:d8:0d:99:dc:b6:b0:
         0c:83:06:f5:f5:d0:70:ca:b6:b3:bd:67:f7:1b:73:44:71:48:
         80:c5:f8:ba:3b:89:93:b0:7f:b3:20:6a:5d:38:0c:88:ff:19:
         43:95:52:b1:8d:ae:2d:73:65:57:a2:a6:00:b0:0a:e4:84:ce:
         29:8c:f0:1b:d3:07:17:4d:d8:aa:f6:4b:13:1e:40:06:aa:2f:
         86:62:f6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----