Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
File:                     STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json)
Hash identifier:          c+9anjF+tLM2uan3rf6zBdf1k0Jpu+TeYUhUdfoZ3pA=
Subject key identifier:   F7:2A:96:6A:E6:60:60:DD:2F:F3:C9:8C:42:7A:9C:F7:E4:C0:36:9A
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Certificate issuer:       /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial:       01936B2256E468F974A015AC27C6B8D710C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
Manifest number:          01A3
Signing time:             Wed 27 Nov 2024 01:00:32 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:32 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:32 +0000
Files and hashes:         1: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: aIB/qsfCeSYFQxp6RWZbvdx5TmLo7C+6VY0rzHIQvG8=)
                          2: bqv81Z6aYKh0zzA4GhRhylg7Jp4.roa (hash: 4cg/Wxf8YzsPlcBwfLohrnwsFCUuEXlkNM4Gzwt2Rck=)
                          3: j2Eqt8ARSWSyNSxKA2fB-X-f6G8.roa (hash: jgJSchCo9vZEUv+n3iEGT+F7xWxg5WKakc3vP0E/3s8=)
                          4: mJ3w70Wb6JRXwJdh4KmN_JllgD4.roa (hash: 3SacxOjABQ3Di6bPxUxv2gX2wjibvUVaMu89+WAnXCk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:56:e4:68:f9:74:a0:15:ac:27:c6:b8:d7:10:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
        Validity
            Not Before: Nov 27 01:00:32 2024 GMT
            Not After : Nov 28 01:00:32 2024 GMT
        Subject: CN=f72a966ae66060dd2ff3c98c427a9cf7e4c0369a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:3c:e1:75:2a:3f:97:ae:30:05:a1:b7:61:
                    da:8b:3b:a2:39:dd:20:30:ba:59:27:66:94:d1:94:
                    2e:8d:22:5e:16:bb:66:7b:2e:98:89:bb:8e:c8:c9:
                    0e:64:5c:8f:0a:45:79:a9:61:d8:a5:66:8c:91:ba:
                    c8:04:e1:13:ec:dc:b6:f3:b8:4d:06:f8:af:da:24:
                    40:2c:2a:6f:d1:dd:bf:f5:59:a9:da:81:9d:cc:a6:
                    de:34:37:67:70:98:27:d3:27:7f:4c:98:86:86:2e:
                    99:df:69:f9:22:71:a7:88:78:e2:e8:8a:b0:61:82:
                    90:18:a8:c5:0b:59:89:99:c1:d3:df:40:c0:e9:be:
                    95:40:a0:7f:06:56:4c:32:e4:77:37:64:92:9b:8b:
                    e9:05:16:30:6b:24:30:94:26:b2:ad:69:45:5e:18:
                    2c:3b:3d:78:34:2b:6d:75:b1:2d:1e:77:3b:7f:f0:
                    19:d0:24:9d:7d:18:39:78:00:8e:73:82:55:9f:e6:
                    8a:d5:d2:5d:88:5d:3f:4e:85:69:56:40:16:79:f5:
                    48:7c:b0:66:b7:c3:1a:5c:6c:15:1f:de:e7:c5:09:
                    49:fc:f1:36:59:c2:fb:de:38:97:17:86:91:33:8f:
                    35:9b:d6:c6:db:23:9c:25:26:a5:2b:63:e4:f7:cb:
                    87:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2A:96:6A:E6:60:60:DD:2F:F3:C9:8C:42:7A:9C:F7:E4:C0:36:9A
            X509v3 Authority Key Identifier:
                keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:93:f1:a2:53:84:46:6f:c4:2f:27:f6:58:a2:b0:56:c0:9d:
         21:3a:b0:66:1d:93:43:10:c2:69:03:68:b9:57:25:10:f6:c8:
         0b:33:7f:c2:55:b5:5f:d4:e9:ed:23:a7:38:74:68:66:72:0d:
         bf:01:49:f2:a3:75:37:84:dc:6d:1e:51:33:dc:2c:20:cf:e0:
         62:a8:fe:c0:63:8e:f6:81:f4:59:52:06:8a:76:9a:e4:ba:a6:
         df:ae:60:13:1b:47:ba:a7:17:da:47:57:eb:dc:77:66:7a:26:
         a4:b5:67:c7:ac:c6:ff:56:d2:2b:ce:ac:04:49:b1:04:56:55:
         1e:c5:35:8c:10:55:29:42:16:11:a5:bc:d1:66:ad:56:e1:c9:
         a0:0a:bf:11:d3:62:76:1a:04:56:a4:77:45:6f:8e:54:31:e4:
         61:a3:47:5e:34:c1:aa:2c:cb:37:a8:c0:c9:86:db:95:49:7b:
         70:8d:d7:4a:ef:9a:44:53:e9:d8:37:68:7b:ab:9b:a4:3c:f1:
         c6:6f:81:92:94:2b:f6:7b:6b:8d:e4:c1:96:a1:d2:ae:dd:ee:
         73:ac:6b:63:1c:35:d5:3d:f8:16:80:37:ce:65:2b:ae:71:aa:
         ad:8a:57:a0:ec:46:9f:3e:fa:f6:46:05:4d:5b:5b:59:e6:5e:
         53:d9:2c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----