Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File:                     1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier:          lVPjJdqzn9dc4c15Wf4+B0Ls/r6tn3Wm/Nc0tLZc1/s=
Subject key identifier:   0D:A6:2F:8D:16:0A:3C:FC:2F:82:18:F5:F8:94:7A:D3:0D:3E:EB:17
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer:       /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial:       01935689B3FDE0936DEF9AA1935CBAB2E326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number:          08B6
Signing time:             Sat 23 Nov 2024 01:01:25 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:25 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:25 +0000
Files and hashes:         1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: MNxwvdXrX+u4RsuHDIFd5SHF6jotuKF9jKWQF8l8ChI=)
                          2: mjx9XEfiC-e03MNr8is5qfj4kR8.roa (hash: TAPEURV1M95eJJznk7uheO9AsNQ9Jq6fhSj6q27VFEY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:b3:fd:e0:93:6d:ef:9a:a1:93:5c:ba:b2:e3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
        Validity
            Not Before: Nov 23 01:01:25 2024 GMT
            Not After : Nov 24 01:01:25 2024 GMT
        Subject: CN=0da62f8d160a3cfc2f8218f5f8947ad30d3eeb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:cc:3d:75:6a:8c:51:e7:51:e7:66:a5:a6:
                    fb:4f:f6:8c:7a:51:af:f4:f5:cb:7d:66:f5:c8:c1:
                    58:32:a4:df:03:9e:1d:9c:53:c4:2d:bb:a8:c5:71:
                    3d:f3:00:a9:5e:f2:66:33:09:40:c0:1d:2a:a2:41:
                    b0:e6:e5:20:0f:14:1f:b9:4d:27:9c:68:cd:c5:06:
                    82:cd:c2:22:23:e5:60:fa:dd:b5:34:c9:20:72:a2:
                    98:d3:8e:b3:aa:76:40:6f:e4:3f:b9:46:ef:19:35:
                    85:d7:f8:fe:f7:99:ac:77:45:57:7e:64:b2:c3:04:
                    91:70:5f:11:57:8c:ea:89:0a:32:f1:72:6d:8f:1f:
                    ca:9e:f7:df:d6:ed:e3:dd:96:52:af:af:e7:87:f9:
                    33:48:ef:89:95:b0:55:8b:f8:f3:b4:59:16:20:1c:
                    83:c9:f2:64:a0:fd:bd:6f:96:ff:46:72:3f:50:98:
                    e3:a6:83:f6:90:61:d3:f4:4f:d9:87:cd:72:88:6d:
                    29:a8:86:ad:bd:74:47:da:9d:ed:83:c9:3d:78:bb:
                    71:0c:45:11:f4:64:8c:ac:08:64:a1:34:2c:f9:38:
                    42:b9:6a:83:6e:ea:cb:57:27:e8:cb:3d:3c:03:f8:
                    06:1b:52:27:2a:d4:d6:3a:72:93:d2:7d:1a:74:b8:
                    69:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A6:2F:8D:16:0A:3C:FC:2F:82:18:F5:F8:94:7A:D3:0D:3E:EB:17
            X509v3 Authority Key Identifier:
                keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:8c:e8:05:e8:dc:1a:0d:f1:44:07:b2:56:08:6d:94:9d:eb:
         3f:33:d8:2f:88:94:ad:20:80:ba:2a:28:6e:ac:6e:90:a7:f5:
         97:82:2b:64:c1:7b:61:db:4d:4b:5f:73:70:4b:e1:5f:c7:f5:
         94:3f:6d:74:2e:f1:3a:8c:f3:fa:e7:8e:28:a3:79:a4:da:ab:
         1f:ed:3c:1a:f2:d9:fb:de:5a:1d:ab:51:e1:95:a9:2b:91:b6:
         b2:d1:26:6d:ad:36:c7:ad:84:3c:44:e6:28:e8:94:7c:f5:9c:
         5d:a7:8a:4c:b7:8d:a2:93:72:47:6a:7c:e2:e6:98:aa:bf:94:
         f9:d5:f8:2e:65:fa:79:f9:29:68:a3:bd:d2:8f:d8:28:8f:e4:
         23:8c:c4:d8:67:b5:ea:2c:35:52:19:91:cd:86:22:6a:8a:e9:
         da:d2:04:c5:72:6c:1c:27:11:ec:31:6b:4f:21:4e:56:b8:4a:
         5e:4d:e5:89:89:3e:3e:50:44:de:8f:92:0f:3d:77:2a:78:88:
         fb:00:c5:be:d5:1f:e2:79:39:da:0a:db:c9:c9:47:67:4c:41:
         ad:67:1f:d2:05:80:da:76:f9:c0:0c:0e:ee:fd:fb:76:dd:cd:
         67:0b:ca:3e:9e:57:99:3a:3b:51:d6:a0:03:07:64:c6:64:a1:
         7c:72:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----