Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
File:                     1MOxLI1jUZDskoQ3u9bLDow4-ak.mft (raw, json)
Hash identifier:          dFmp4U1g7L7ZZw69FjwYHT4LZnevpN0QlDl3mTw5HvU=
Subject key identifier:   27:6E:A9:C5:62:76:87:EB:5F:0C:7E:1A:E9:FD:09:B1:BF:91:59:5B
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Certificate issuer:       /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial:       019369A198207F7DBF283766215A55FE632E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
Manifest number:          1384
Signing time:             Tue 26 Nov 2024 18:00:18 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:18 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:18 +0000
Files and hashes:         1: 1MOxLI1jUZDskoQ3u9bLDow4-ak.crl (hash: mFN9XnaR5RE3g0bO+s4fqwdSYHR41fqf3DDxib05mJs=)
                          2: 744PtHeMt6obNjJ87Mg83y715TQ.roa (hash: 0Wapvdx0+CP1a0J3J3B9CtNGb5Qa3L8rWxZMJpnIPwo=)
                          3: VqgwkXKFPnVWkZEjMkpM5WZ12Ks.roa (hash: Elst5qMRWoriOkZnclValnK06w1IYFPkM09T7JHHVDE=)
                          4: bRy_y4u7rlnhoGm9VC8Fdudkcd0.roa (hash: qWyNI1ahxA4+uuNxMD78i+DJXvLTiAfnrycR1n7Jens=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:98:20:7f:7d:bf:28:37:66:21:5a:55:fe:63:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
        Validity
            Not Before: Nov 26 18:00:18 2024 GMT
            Not After : Nov 27 18:00:18 2024 GMT
        Subject: CN=276ea9c5627687eb5f0c7e1ae9fd09b1bf91595b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:23:d9:34:50:50:ce:a9:90:59:bc:79:a5:
                    99:02:3b:96:1a:a3:01:4a:9b:d1:2e:10:ec:67:30:
                    a5:09:6c:6b:89:d1:1d:b6:b9:f8:e0:b6:b8:21:b9:
                    73:c5:02:49:42:8d:09:e9:d6:d4:57:f6:c7:1b:25:
                    f3:23:16:32:62:eb:6c:93:d6:b0:50:07:69:d3:b0:
                    ac:7c:c8:11:ff:b8:db:3a:64:a8:a9:20:96:b6:6e:
                    59:f4:3c:27:fc:cd:da:5c:5e:c8:e4:57:a8:ea:9e:
                    8c:e2:e3:06:24:1e:78:fc:9f:cd:15:fe:97:0c:04:
                    ba:da:02:5b:2a:36:47:a5:ea:a8:b9:d0:03:52:3d:
                    75:7b:2c:e6:7f:39:e2:25:8c:76:61:74:40:1e:aa:
                    33:44:cb:87:94:54:49:b8:31:0a:30:f0:5e:df:0a:
                    bf:0a:e2:b3:09:27:c2:6a:c1:b9:47:d1:a3:b4:f0:
                    ef:14:3a:7b:d6:15:29:4f:c8:c2:e2:50:47:00:19:
                    dd:cf:c0:b5:60:28:d7:d2:82:76:62:26:12:6b:ad:
                    42:a5:58:0a:25:b0:9b:9a:ce:fb:6a:29:2f:4c:97:
                    b5:09:3e:98:d0:b0:15:3f:8a:27:94:d5:9d:1f:15:
                    46:ef:83:74:5c:59:61:38:1b:29:08:63:d8:47:72:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6E:A9:C5:62:76:87:EB:5F:0C:7E:1A:E9:FD:09:B1:BF:91:59:5B
            X509v3 Authority Key Identifier:
                keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f6:09:14:31:42:da:72:7a:23:62:78:b6:cc:aa:d5:be:59:
         87:6e:67:f0:21:0f:44:f5:6a:88:63:bc:f1:74:e6:29:d2:36:
         67:16:32:43:3a:00:47:33:b1:ff:67:94:0c:67:d1:a9:2e:b0:
         54:2f:8b:2d:7b:c4:88:ce:8c:39:31:a4:4b:03:de:b3:bc:21:
         fd:4a:41:2d:89:73:8e:0c:d8:df:6e:a1:6d:9a:d5:41:d3:6b:
         06:19:88:86:bd:53:12:fc:0c:e2:07:eb:af:09:db:8b:92:26:
         1d:9b:fa:93:75:c9:53:2a:82:3f:e9:5a:6e:9e:77:83:c4:98:
         75:57:b7:4c:74:c6:97:37:82:b8:30:c1:d6:ee:a5:55:08:2a:
         f0:0c:e2:d7:79:36:d7:93:51:33:73:06:62:8a:9b:0b:5b:78:
         de:13:79:26:cf:1e:d0:46:7e:21:9a:86:8a:e3:c6:26:a9:21:
         eb:41:1f:f2:68:de:3a:d2:6b:6d:62:37:39:19:65:d8:0b:7f:
         6e:50:76:1a:1d:9f:3a:50:60:a5:1b:5f:f0:9e:3c:ef:12:3b:
         1e:16:20:45:71:e1:90:74:cf:0c:8f:ce:ca:3d:1f:f2:c6:31:
         96:71:cc:3e:0d:89:f1:b9:40:d4:75:31:06:34:c2:aa:f1:a1:
         e8:40:12:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----