Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
File:                     F6b6gLLRxD7J6oJOfoOV95KU44o.mft (raw, json)
Hash identifier:          7bdNZZc+iX+J+shkVJyc4XZltSPktUVpFFcVghNRh1Y=
Subject key identifier:   73:F3:28:54:31:6C:56:11:14:0A:A0:70:31:B8:6D:D2:CF:CF:1D:71
Authority key identifier: 17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A
Certificate issuer:       /CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
Certificate serial:       019355769B7A4AB972EEC8FCFBFBEC10A16A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 20:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:56 +0000
Files and hashes:         1: F6b6gLLRxD7J6oJOfoOV95KU44o.crl (hash: BYi4lp9beM6ESIG7fDlr56SkKk36hp5lsqfr6MFlleo=)
                          2: RF1gPcwUDH2wECZQ9VZf9zt6vo4.roa (hash: dCkSgubUd3h/5bZOdLkco7+QQCzxm22HXyop7SC9JTA=)
                          3: VFT74Flot8-rSltpzAKgIpsTu9Y.roa (hash: gQFSSmtEsYEqshACi4jq82cgMJpIapg4JIN2HJCMqUs=)
                          4: sRgfCVpmsqGfrq7pnYrOOaEudAE.roa (hash: xViU2DlvjjjZ4ktrS4AWE/KFK5Y1ur0Fj7xVauNS96g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:9b:7a:4a:b9:72:ee:c8:fc:fb:fb:ec:10:a1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
        Validity
            Not Before: Nov 22 20:00:56 2024 GMT
            Not After : Nov 23 20:00:56 2024 GMT
        Subject: CN=73f32854316c5611140aa07031b86dd2cfcf1d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:58:0a:81:5e:16:ea:6a:81:f1:4d:06:7e:
                    08:8a:95:48:2b:47:0a:e2:66:d5:83:ac:ac:ba:04:
                    a9:23:39:50:28:b1:ab:29:d6:e8:75:20:d4:c3:7a:
                    e8:20:73:dd:74:f8:8d:db:a9:7b:07:dd:7c:65:11:
                    85:d9:b7:c9:df:36:c6:e6:88:e1:75:6e:38:44:83:
                    b5:ae:e2:71:8a:d0:4f:f3:51:77:a8:a7:61:ec:98:
                    5b:a0:78:f4:93:8f:81:b4:bc:85:38:e9:11:2a:af:
                    5f:24:d5:21:58:71:35:21:ff:31:d9:0a:43:c4:e2:
                    31:26:c6:1d:b7:8a:c8:98:0d:e2:83:3a:04:26:af:
                    f9:ac:0c:6a:a6:b3:1c:b6:42:7c:23:cc:e4:21:f8:
                    e4:2c:b3:fb:cc:7b:d8:cc:94:7b:6a:bf:7b:a0:de:
                    74:52:c9:d4:8b:62:99:d6:8e:51:7d:6b:80:10:d4:
                    98:e0:8d:52:c5:68:5e:1c:d4:2a:da:f8:0a:1a:ef:
                    cd:de:06:4d:1b:e0:0e:f0:32:32:fd:b0:1d:12:da:
                    1b:5b:0d:50:a5:a2:3d:95:c4:89:8e:70:6d:0a:9e:
                    8b:1e:d8:af:69:04:41:e9:2d:92:d0:04:d7:26:79:
                    3a:3a:7f:3b:27:03:77:8b:88:b5:6e:55:de:97:92:
                    1f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F3:28:54:31:6C:56:11:14:0A:A0:70:31:B8:6D:D2:CF:CF:1D:71
            X509v3 Authority Key Identifier:
                keyid:17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:21:3f:fb:93:c2:c1:c7:25:0b:b0:33:c5:02:08:a0:8e:b6:
         31:32:25:3d:da:1c:f7:7d:27:b9:49:b5:f4:11:6e:0f:dd:6c:
         17:65:5c:18:84:ad:db:e2:38:7c:4e:ea:31:bd:38:2d:78:5a:
         58:7f:98:21:41:41:3f:02:be:ee:8e:8e:3c:5c:8d:b0:d4:71:
         76:b9:75:99:3e:3b:05:10:aa:ba:35:c6:7e:b3:30:0a:77:d2:
         ce:30:07:ab:7a:62:44:39:be:cc:c3:47:d3:d6:fd:bd:06:07:
         ca:75:8c:38:bd:b7:e3:37:ee:fb:ea:21:af:e8:e4:80:b1:69:
         ed:97:d5:b4:b4:8f:9f:16:69:f5:02:79:d8:a6:2f:b6:93:b7:
         66:6b:f7:26:4e:50:f6:c9:2f:20:de:32:aa:da:f7:4c:bc:f2:
         4b:cf:ac:72:d7:1f:24:1f:39:bd:9b:d1:3e:38:98:ad:d3:9b:
         7e:53:f0:b8:b8:3b:0e:eb:1f:35:ae:6e:61:d2:f4:f0:73:13:
         9f:08:94:79:74:c0:12:4c:e4:74:b8:16:02:ac:43:0b:3f:3e:
         20:bd:b7:27:f4:15:fe:46:33:7c:2b:6a:0c:06:b1:87:4a:f9:
         86:c4:7c:22:89:13:86:e0:f5:9b:89:84:3b:7e:86:b0:8e:84:
         94:4b:f5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----