Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
File:                     COfXs7xMB5HAz_4_FVWrdz4-0W4.mft (raw, json)
Hash identifier:          Ap88Btanjwimw47DJ6/P7Jt93fqFnOVM7Rw68WO13b4=
Subject key identifier:   03:89:3B:7B:01:2D:08:81:E3:1E:F1:DF:38:02:6C:6D:FE:67:68:A3
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Certificate issuer:       /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial:       01935275061BEA6BD0409F0C7259BC1479ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
Manifest number:          059A
Signing time:             Fri 22 Nov 2024 06:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:21 +0000
Files and hashes:         1: 1-BXNJQzG92086x0OEmVn_5gMG-Q.roa (hash: 57Lbj2kPHNwCHNGfC6wuCgWGhS0zeRD7zHRDoBvPZwc=)
                          2: COfXs7xMB5HAz_4_FVWrdz4-0W4.crl (hash: OYytZP8ecuIq7DSgJi3hJiIa1gQz9+1u2TWkUusp2Gk=)
                          3: wMg2qN2FdZYLzGFDXed-BH8TEDQ.roa (hash: eNYoeS27t0Lj6lqrc3L8dbOUngN+atuxjX+CFkZZyUw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:75:06:1b:ea:6b:d0:40:9f:0c:72:59:bc:14:79:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
        Validity
            Not Before: Nov 22 06:00:21 2024 GMT
            Not After : Nov 23 06:00:21 2024 GMT
        Subject: CN=03893b7b012d0881e31ef1df38026c6dfe6768a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:10:b4:f6:90:d4:a4:38:c7:81:1b:8e:98:72:
                    88:7f:97:eb:48:ce:02:9a:50:19:9a:83:7d:96:b4:
                    fa:f5:c6:5d:7b:58:94:30:ec:83:e7:8e:97:f2:b7:
                    36:76:ca:17:9c:7c:a3:0d:7a:68:c2:1f:d9:bc:5e:
                    31:eb:9b:83:ee:7e:75:e9:73:78:69:4f:7e:b4:0b:
                    95:27:1f:46:f9:c7:a6:ae:c0:79:ca:1d:07:cc:4b:
                    eb:9d:70:dc:06:19:94:ad:d0:f0:12:66:46:c4:e9:
                    94:f1:2b:e3:a0:e9:90:40:78:de:db:4b:7e:54:b6:
                    0f:c3:7c:6f:63:67:0f:47:7f:bc:53:e7:11:d0:cc:
                    7d:35:35:b0:cf:a3:76:a9:16:61:56:7d:75:76:49:
                    86:25:6f:4d:1e:93:31:aa:cc:90:c7:07:05:50:9a:
                    5c:17:c9:70:b2:10:8b:b5:f4:f6:df:5e:41:02:f6:
                    21:fb:2c:25:5d:83:6a:92:d0:cb:03:0b:b4:ba:61:
                    66:f4:86:2a:e2:ad:e0:3b:c8:58:f2:47:60:87:3f:
                    2e:84:91:e2:61:a2:61:32:fb:cd:8d:f4:81:65:e7:
                    45:de:4d:24:a4:b8:cd:33:53:9d:17:0c:fa:ae:e0:
                    6c:e5:e1:42:35:1b:29:02:60:b3:bc:67:9a:79:50:
                    87:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:89:3B:7B:01:2D:08:81:E3:1E:F1:DF:38:02:6C:6D:FE:67:68:A3
            X509v3 Authority Key Identifier:
                keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:4a:b3:d1:81:f3:a6:d9:5a:b2:58:67:64:c7:ef:c3:d0:f7:
         dd:a3:a6:97:25:21:ce:76:2a:24:1c:db:18:94:fe:76:16:f1:
         74:e3:c1:4a:8c:57:a7:59:a9:32:46:04:90:70:2d:9f:8f:c7:
         f9:65:10:cd:96:52:6f:6c:f0:6f:05:b7:5b:27:1d:6a:2f:0d:
         b7:16:d0:4e:a4:0b:11:4b:19:67:7e:f5:67:34:33:75:49:de:
         59:29:74:13:bb:75:36:90:64:96:bc:d9:b1:62:2b:cb:dc:58:
         2b:83:1a:2b:a3:e4:c8:23:ad:22:d1:46:fd:5e:27:a4:0e:a3:
         97:c4:a4:ad:6f:5f:a4:68:bb:0d:a6:2f:9e:61:a5:6a:fe:9b:
         9a:32:b3:df:2f:c9:03:69:e1:35:0f:92:98:74:c5:6d:3c:83:
         e5:b2:85:81:53:c0:4d:d2:30:5d:9a:a1:b8:b1:8a:4f:a3:ce:
         b2:48:8f:fa:d1:1e:7e:ad:3f:ef:e1:ef:40:f1:84:b2:e2:14:
         d7:54:40:ba:ad:9f:46:a1:5e:a3:91:cb:8b:e7:7a:6f:f7:0a:
         d1:ca:41:6a:8c:46:39:36:29:a6:6d:02:b8:c8:a9:fd:d1:78:
         c8:25:a1:b8:1a:44:f9:f8:be:7e:b8:56:aa:63:c6:09:10:dc:
         8e:bb:de:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----