Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
File:                     Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft (raw, json)
Hash identifier:          57KmZHyP2EEnGp5BC3BI/ybqBrE1UuZYb/yx7W5X8OI=
Subject key identifier:   14:36:CD:B3:94:22:94:43:53:40:7D:C7:3D:2F:7D:3D:73:3F:24:95
Authority key identifier: 26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
Certificate issuer:       /CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Certificate serial:       01935575F495806299DFF07007BED242A380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 20:00:13 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:13 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:13 +0000
Files and hashes:         1: 8L4tp0NTfqVDTLNFo2CfgDqDWEI.roa (hash: 9MIjBSeNBdQPovW61w+NVmwgQ0hZPNQtT4pUMO14OpI=)
                          2: Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl (hash: PDpAHphfwRVBcGZWvlK3jopgnlBHRYLM7XC0ILjFDfs=)
                          3: KzKonY-T9PLtA1kHZkLLS4_oR7Q.roa (hash: l8jd4G6i2//aWJKokziOqD1M1XeTzfs3q/IlET0aBRU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:75:f4:95:80:62:99:df:f0:70:07:be:d2:42:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bab8c6915851f4efd40274f742509b7ac7e22e
        Validity
            Not Before: Nov 22 20:00:13 2024 GMT
            Not After : Nov 23 20:00:13 2024 GMT
        Subject: CN=1436cdb39422944353407dc73d2f7d3d733f2495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:f4:2c:2f:12:85:bc:8f:57:cd:e1:41:84:
                    ad:f9:d2:d7:e1:d0:6e:6c:92:fa:a0:0a:8c:0d:b3:
                    d4:42:1e:fb:c0:fe:ec:b8:4e:5f:a4:e1:f2:41:ce:
                    ed:4d:6f:7c:6e:22:0d:da:7e:82:0e:66:b2:ef:8f:
                    70:0a:8b:22:ae:0c:51:89:d1:e7:ef:1a:26:76:1c:
                    46:5b:33:c6:30:ce:39:e5:5b:57:4e:96:0d:3d:fd:
                    fb:6f:21:29:84:bd:df:e2:45:35:16:37:81:da:6e:
                    7b:7e:37:93:db:25:ca:04:38:8d:d8:05:f1:43:47:
                    d8:67:56:03:21:74:e0:1c:f0:81:b4:96:3c:c8:be:
                    38:d5:22:ae:5b:22:59:89:e0:4b:c4:f9:b3:b8:73:
                    81:4e:0b:2d:fc:9f:ca:6f:26:8e:d1:28:93:c9:d8:
                    41:13:c9:dc:e1:5f:87:c1:37:49:91:8e:87:39:39:
                    70:f3:39:89:71:96:bf:a6:57:df:2c:ca:dd:05:02:
                    e3:b7:d6:a4:49:f7:a4:ce:70:38:a2:71:73:04:f8:
                    ef:56:30:e4:89:e1:e8:a8:19:e2:40:c9:4b:72:fe:
                    95:60:72:c3:57:33:64:03:cb:53:f3:54:b6:4e:12:
                    49:ab:5e:87:c3:4c:88:ed:53:e5:1f:2a:8e:c0:65:
                    78:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:36:CD:B3:94:22:94:43:53:40:7D:C7:3D:2F:7D:3D:73:3F:24:95
            X509v3 Authority Key Identifier:
                keyid:26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fb:81:18:b8:0d:cb:45:57:4d:f8:7b:86:0c:35:d8:a7:77:
         2e:fe:c0:92:7f:94:ed:3b:42:4a:57:02:16:5a:2a:f4:66:b1:
         85:80:cd:ba:cf:ce:e8:75:bf:f3:a2:60:74:61:67:40:47:b9:
         3e:02:4d:43:54:f3:6d:5c:36:7f:d7:ed:03:45:af:02:33:c8:
         9f:2f:32:0c:3b:41:08:69:cf:4d:9f:61:7f:a7:b9:dc:8f:ae:
         20:db:cc:d2:97:a8:1b:a9:f7:e5:a0:ea:a2:d2:f5:fc:9c:93:
         92:ab:7f:30:35:74:76:a3:74:eb:4d:bb:a6:e9:ec:64:a1:fe:
         0e:6c:90:22:d5:32:ec:8a:a6:30:2d:95:62:a1:b0:00:1a:f1:
         b7:6e:ef:b5:d5:db:c0:d0:90:b6:c4:43:2c:8c:1e:99:1b:07:
         7d:c5:4a:e9:01:47:8f:5c:c1:88:55:a4:1d:48:5d:d8:ec:38:
         6e:0a:37:34:e4:31:95:c9:5a:84:94:67:37:60:f1:90:ad:b3:
         67:2b:e2:5b:d0:42:29:e9:f8:9a:77:6a:5f:62:a4:c4:27:4d:
         06:d5:ce:ea:e3:f3:85:5c:39:75:c8:d9:11:73:ca:6c:77:b5:
         7a:c5:d4:7f:10:ab:b2:a5:ca:c1:f2:1e:04:b0:37:ff:7b:6d:
         30:88:50:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----