Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File:                     KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier:          iU6i04m5byNjZRhBfQHK0XesP1mxQgQHNhdQWXkBaE0=
Subject key identifier:   2D:A9:3F:9B:EE:E2:1E:DE:87:34:9C:8A:92:7C:78:22:FE:C2:A2:5A
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer:       /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial:       0193568B0BE333E6D72BDD4EA63A7140680A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number:          088D
Signing time:             Sat 23 Nov 2024 01:02:53 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:53 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:53 +0000
Files and hashes:         1: 0NkZr9xN1HRdTGRaVb57tDZXqFo.roa (hash: botsMZF+GjttbrakuQN0eLxcRATmR0gANUESq5NOgvs=)
                          2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: 2re8yWlwuTWsAh+pwONUoSPL2RgyiBLdn2ri5LpZsU4=)
                          3: dMLi1hnqfwP2FZ7MrJzKAhZqNj4.roa (hash: fgjKdEVKKQLyuZgdRPOIVpLaIZvI5cp4LI1zSG3BXpY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:0b:e3:33:e6:d7:2b:dd:4e:a6:3a:71:40:68:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
        Validity
            Not Before: Nov 23 01:02:53 2024 GMT
            Not After : Nov 24 01:02:53 2024 GMT
        Subject: CN=2da93f9beee21ede87349c8a927c7822fec2a25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:42:a3:e5:98:7b:7a:12:62:77:1a:76:5a:aa:
                    eb:d0:03:a4:56:2e:68:92:92:00:c1:ed:2f:d7:85:
                    bb:9b:95:e1:ec:99:f4:b0:4b:a7:31:20:8a:a5:07:
                    68:10:0f:c3:9b:e2:5f:03:4e:0e:b3:e2:79:5d:71:
                    82:ef:b4:5d:b2:13:a7:ed:d0:26:ea:27:d9:49:d6:
                    47:5c:b2:f0:38:71:5d:e4:18:11:6d:b3:e1:00:63:
                    ce:b0:2f:76:b5:c8:13:b5:e1:b5:68:2d:c5:d1:b7:
                    ab:18:3a:ea:f0:94:08:2b:b6:ac:b9:81:18:57:63:
                    3b:4c:90:c6:55:da:61:78:c6:19:dd:90:8a:c8:1f:
                    f6:97:81:57:04:68:98:e5:8a:0d:3d:0c:0a:7d:9f:
                    c6:64:17:ff:e1:fb:cd:0b:e0:b6:92:06:4d:4c:4a:
                    e9:02:8e:94:12:b9:bc:33:1c:0d:74:ba:0c:49:ad:
                    d5:84:c5:c4:cf:fa:3c:46:40:8f:bd:6f:49:29:19:
                    af:82:ac:6e:33:3f:aa:9b:27:0f:0d:39:71:d8:a1:
                    43:ae:72:6d:b4:74:93:d6:52:d5:7a:9d:1c:a4:b8:
                    56:5f:1b:bf:36:14:2f:f8:1d:73:85:b8:d2:96:f2:
                    ba:b4:8f:6b:74:fb:bf:af:14:ed:14:03:f4:31:b1:
                    a0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A9:3F:9B:EE:E2:1E:DE:87:34:9C:8A:92:7C:78:22:FE:C2:A2:5A
            X509v3 Authority Key Identifier:
                keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:45:d6:a6:ee:d1:e1:f8:86:05:f5:00:0b:9b:69:c6:35:49:
         fa:e0:43:d0:8a:4d:29:7c:ff:c8:f2:3e:cc:93:b8:d7:12:e7:
         91:d4:22:9e:84:5c:1a:5b:f8:80:b3:8d:0b:89:7f:16:b9:76:
         8c:74:e5:3f:45:7f:d2:27:12:6b:c5:5c:46:2f:7d:69:66:59:
         76:16:83:a9:f0:aa:12:0e:b6:a1:f1:89:65:84:be:5e:fd:cc:
         60:7b:83:23:d9:d8:5e:5d:44:27:af:78:4f:fb:aa:51:8e:9f:
         9c:0d:ff:89:d5:73:9b:fc:7c:c2:3e:9d:d1:1a:3b:12:55:63:
         2a:72:fd:5a:85:a0:36:23:f4:15:e9:4e:a1:76:2f:e6:c2:d5:
         95:a2:af:ae:81:32:5b:c9:90:28:99:54:ba:e7:33:63:7f:82:
         c4:4d:d4:a2:77:60:ec:af:cf:6d:51:06:e6:96:e5:21:10:c7:
         4b:73:e4:16:9f:7a:8c:28:43:d9:15:d7:7d:64:c5:91:78:b1:
         e4:a4:3c:41:b4:7b:12:0e:3b:33:5b:00:c0:fe:40:de:fb:c0:
         b0:03:b0:c0:60:b4:c6:7d:1a:04:8a:f5:6b:a3:43:22:24:86:
         38:c2:b0:8d:25:da:8d:ec:66:75:b5:cf:b7:0c:ba:76:87:8e:
         42:98:45:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----