Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.mft
File:                     _yS3L1-QQNTSJoj16lEfYV8VAEw.mft (raw, json)
Hash identifier:          186/Zh2B0PvAXrulqK6Q/y0/YSKol2vwCvBgr5ypQow=
Subject key identifier:   81:37:F4:80:71:A7:31:22:6E:26:49:C5:B9:66:E3:09:0A:13:58:00
Authority key identifier: FF:24:B7:2F:5F:90:40:D4:D2:26:88:F5:EA:51:1F:61:5F:15:00:4C
Certificate issuer:       /CN=ff24b72f5f9040d4d22688f5ea511f615f15004c
Certificate serial:       0193553FAE611E7908D643B9B3B3F566F6D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_yS3L1-QQNTSJoj16lEfYV8VAEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 19:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:56 +0000
Files and hashes:         1: F2WEHd37tJPKXfKnNbCgfAL8xBk.roa (hash: Y++OIw5H6psqrbf44uHtn8kjnZcMNTHmN3OMMaBUxpo=)
                          2: _yS3L1-QQNTSJoj16lEfYV8VAEw.crl (hash: EMIr51LO0WNYj2VemtHEcUVlmzRtRVf9WL4wfYEBIfE=)
                          3: xGMiPELHN0xps6jTX2uaCpUA-Uk.roa (hash: nFXiZ/NZNvOmrGYayRVbxhA1gDDAZRPYjlCQaExjR0w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_yS3L1-QQNTSJoj16lEfYV8VAEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:ae:61:1e:79:08:d6:43:b9:b3:b3:f5:66:f6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff24b72f5f9040d4d22688f5ea511f615f15004c
        Validity
            Not Before: Nov 22 19:00:56 2024 GMT
            Not After : Nov 23 19:00:56 2024 GMT
        Subject: CN=8137f48071a731226e2649c5b966e3090a135800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:02:21:3a:09:c1:e9:14:57:c0:e7:9f:18:a0:
                    40:ec:90:df:5c:80:d5:74:a3:e2:c9:76:cf:2c:cc:
                    c7:10:ec:60:91:ca:c2:b6:4c:09:ea:44:52:30:3c:
                    39:70:5a:71:a6:c8:b8:12:c2:a7:7f:c5:f7:61:ad:
                    68:bd:5d:c2:cc:17:99:a0:25:98:bb:be:48:4f:c9:
                    e0:0d:ef:91:90:4b:98:64:ae:5f:d8:c5:09:37:ab:
                    12:82:82:c9:68:a0:32:6b:09:cf:a5:da:48:66:1d:
                    1b:27:e1:5f:33:9a:f8:9e:5a:85:ee:a7:82:00:f9:
                    84:bf:b4:1f:bb:a2:17:1b:d1:59:b9:c6:98:d4:18:
                    cc:b3:16:14:95:0d:66:f9:cb:36:2a:52:ea:25:62:
                    aa:19:2f:bb:8f:c2:f3:b8:16:4a:1c:0d:78:c0:60:
                    45:9c:1e:b2:67:5e:23:28:b4:6b:42:48:5e:1e:ea:
                    9c:99:f5:35:eb:b6:a3:f7:82:c3:74:f7:1c:46:bd:
                    38:43:67:aa:51:d8:c8:79:9e:b1:b6:42:b5:72:ee:
                    a4:62:fa:4f:2a:e5:95:9f:4a:6e:a6:1a:46:ba:04:
                    97:b1:86:fb:88:e9:27:a6:e6:d4:cf:9f:37:36:c4:
                    0d:fc:5c:81:17:42:fc:30:2d:ba:76:d0:69:c6:d2:
                    11:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:37:F4:80:71:A7:31:22:6E:26:49:C5:B9:66:E3:09:0A:13:58:00
            X509v3 Authority Key Identifier:
                keyid:FF:24:B7:2F:5F:90:40:D4:D2:26:88:F5:EA:51:1F:61:5F:15:00:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yS3L1-QQNTSJoj16lEfYV8VAEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f6:92:12:5a:23:6a:e6:2f:46:02:6e:b0:81:a5:05:e2:4c:
         05:54:b3:e5:d6:47:8f:55:76:69:35:73:37:a2:93:9d:0a:f9:
         77:dd:c1:12:77:ce:f1:28:53:c3:25:c3:1e:30:63:d3:56:d7:
         4e:93:bd:7f:fa:c3:c0:7f:de:15:12:19:a9:b0:41:b8:1e:29:
         48:da:5d:a9:85:55:57:9f:da:be:c0:2c:1a:1d:64:d4:ea:2a:
         4d:2f:76:ee:12:3d:fb:19:45:a6:43:6f:cb:65:d1:1d:fd:9a:
         1d:23:9a:75:ca:8e:7f:69:a9:09:87:50:25:34:ec:7b:ff:8c:
         2d:48:f0:69:a1:ad:d7:9b:2a:3e:65:39:be:bc:97:60:3e:09:
         6b:7d:88:c4:c7:10:39:2e:78:28:11:b4:f7:ca:6a:2b:ec:ae:
         f1:c2:34:b1:9d:ea:23:ae:41:00:44:54:08:05:91:f7:f6:79:
         48:2a:e4:e3:75:a6:c3:fb:df:98:69:94:d4:1e:09:e0:4e:85:
         5d:d3:61:b5:20:f9:f6:30:7d:30:20:1f:96:76:6e:5d:94:fc:
         2f:76:37:24:98:a6:b9:5f:d6:0b:70:6f:16:56:94:b3:c6:a7:
         c5:3e:78:6d:16:3e:90:12:ef:1b:02:32:b6:21:cc:27:ef:c6:
         ac:46:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----