Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
File:                     aHcm04_PKn-7t7_CjWP-NXntIR0.mft (raw, json)
Hash identifier:          kFktHIU5YhSoA7F6uRUiwLHdOBxtu8xklKs4DRxeqsM=
Subject key identifier:   DF:AA:14:B7:E4:16:FB:91:F0:FC:55:1B:B5:3B:2E:B1:B6:B7:62:BF
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Certificate issuer:       /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial:       019360D5997C1C5F305743A08CD592480505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
Manifest number:          0EA8
Signing time:             Mon 25 Nov 2024 01:00:31 +0000
Manifest this update:     Mon 25 Nov 2024 01:00:31 +0000
Manifest next update:     Tue 26 Nov 2024 01:00:31 +0000
Files and hashes:         1: 6HJrB7Y0SkZfX623WS-7YabsKZk.roa (hash: VPStwrVDj/kFOECMivR/2K5xJRvViLnvgsJXPF9mchs=)
                          2: QaPuRMvXJV--Fw9AVsI5ZPkc8hY.roa (hash: TYXifRDvYSCNyCSvzG/CTgQtlnVhQgEvsEV2BNAGxx0=)
                          3: aHcm04_PKn-7t7_CjWP-NXntIR0.crl (hash: wWZoCXQmfqDZASLE83WjPiyOIu/N+uetCVUw/T13leg=)
                          4: iaCAd2vAvedXHDGP1lUH_E_KM8A.roa (hash: dyOOxLshxZ5tzdjQv2bDDgrD+ZI8YY4RTwLw+T09ohs=)
                          5: w6DeLFJdEk1mZKidt4FQMQDxlTI.roa (hash: k009oTB069ImDw02164BGVARnKaYelZo+nyAt+vgSgU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:d5:99:7c:1c:5f:30:57:43:a0:8c:d5:92:48:05:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
        Validity
            Not Before: Nov 25 01:00:31 2024 GMT
            Not After : Nov 26 01:00:31 2024 GMT
        Subject: CN=dfaa14b7e416fb91f0fc551bb53b2eb1b6b762bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:10:f4:fa:80:22:43:8a:e4:71:10:46:cf:
                    c0:5b:0e:4f:32:86:09:98:74:98:26:d2:15:1f:eb:
                    da:a1:cc:3c:0f:0f:7e:0e:fe:42:e6:a4:a9:52:23:
                    8c:e2:4d:92:26:96:ae:79:98:36:7d:53:6a:2e:30:
                    fd:74:e3:5f:ce:8a:55:2b:ca:ca:d2:c6:2a:3e:d3:
                    2f:f0:8e:60:6a:47:c1:b8:87:e3:7e:f0:bd:dd:5c:
                    38:b7:b0:89:04:d2:f8:13:da:8d:2b:d0:d2:f6:45:
                    12:02:ce:21:c6:9e:94:cc:57:81:02:57:38:a2:93:
                    f5:07:22:83:8e:46:67:9b:53:9c:5c:1d:b8:80:b3:
                    06:d2:a7:d4:12:f4:42:68:67:cf:76:d6:0a:68:bd:
                    a1:08:ed:d7:e2:24:65:bd:06:d9:0d:00:0e:ef:b1:
                    00:f5:0e:34:c0:51:b7:c5:f0:15:08:3c:7d:f2:98:
                    9f:81:5f:c3:f0:02:6f:2e:e7:85:1d:ac:70:fc:d5:
                    b7:38:4f:20:51:a0:0e:5f:2d:d2:7d:6d:8b:5a:ca:
                    2b:ec:33:5e:86:2f:e1:bb:73:33:fc:6d:c7:2a:62:
                    e2:48:1c:49:7b:bb:97:cc:8f:6b:ac:49:a6:56:52:
                    64:b8:dd:ad:4f:50:ea:f7:40:1f:a7:5c:e4:00:6e:
                    40:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AA:14:B7:E4:16:FB:91:F0:FC:55:1B:B5:3B:2E:B1:B6:B7:62:BF
            X509v3 Authority Key Identifier:
                keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ab:34:9b:54:7a:03:31:db:60:ed:bf:42:06:15:ce:87:5b:
         fe:f3:02:b5:7c:e8:4a:82:3f:f4:95:a0:7d:76:fa:02:81:a5:
         2c:d4:03:34:17:54:7b:26:60:f7:ed:6e:3d:f0:a5:8b:30:de:
         f2:43:03:1c:ff:7b:e2:8f:4c:ce:68:0d:48:84:5d:fb:6a:b2:
         16:8c:88:9d:b5:5f:e2:aa:da:36:22:82:bf:ea:48:50:bf:7d:
         dd:65:da:48:52:8e:0c:55:e0:a4:92:ca:61:66:a4:55:7b:02:
         59:3f:54:c5:fe:46:91:37:9d:a8:e8:05:2f:d4:b6:65:ad:8a:
         09:8b:36:72:83:39:9a:66:68:85:b7:ad:14:4f:a4:49:06:fa:
         9a:48:6d:b1:23:2e:63:db:7d:ab:b3:73:f6:86:ce:91:52:8d:
         c2:25:9d:2c:00:13:ff:3b:f5:46:bb:02:7c:4e:4e:37:f2:47:
         f8:92:2e:72:6e:5d:88:1e:0a:73:e3:89:dd:51:e0:0a:6a:29:
         aa:5f:23:42:92:17:6f:bd:a2:21:2e:71:04:10:80:63:39:f8:
         be:21:0d:3a:1d:79:10:f6:64:0b:ff:b4:53:6a:ce:a1:23:00:
         04:e4:2d:4f:61:e0:a5:f7:0a:bc:27:14:9b:2a:09:cb:ed:07:
         57:26:07:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----