Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File:                     qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier:          NFfxBeU2bc6fwUFa3ac2OwnYOjEG4oH+YhU3ADPkOnA=
Subject key identifier:   9C:17:8D:A6:7F:1F:1F:7A:63:4C:25:1A:1F:15:37:35:93:5F:9C:69
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer:       /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial:       0193568A68FAE14BAA4D9FA28C33EB71E330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number:          104F
Signing time:             Sat 23 Nov 2024 01:02:11 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:11 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:11 +0000
Files and hashes:         1: 0l7U_fLL2_CDBWhKEBNRuYlRFrk.roa (hash: bTOnRbLil2MAS+qgb1bMTQWVvLU4yHSIfrsaM+JQaNw=)
                          2: Vui3Xt0p-iRTjD8FXJHG8dy80Ro.roa (hash: FLNzMhbIGUnQVzO2lDIycTcDKCFZaxbX0fdELfPqyGA=)
                          3: phoqC7KdOvEjaOSbFu-Nfs5Kys8.roa (hash: zKyLs6wHa4xMeglFDYCdUn7zOwsumXKpCE2hHuwv0rk=)
                          4: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: KhpGhnK1RzaptQhE8U8YNX98pUSWDya5acTGksUMTi0=)
                          5: vdaq1AuIDT5gbw_uR_axS0AEd5Q.roa (hash: tb0EUoBzC9EWXc32fZRZKWbfF16DCOf5eb0yf+xFNoY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:68:fa:e1:4b:aa:4d:9f:a2:8c:33:eb:71:e3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
        Validity
            Not Before: Nov 23 01:02:11 2024 GMT
            Not After : Nov 24 01:02:11 2024 GMT
        Subject: CN=9c178da67f1f1f7a634c251a1f153735935f9c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:15:30:d3:1a:e6:e0:87:65:48:f6:6e:da:
                    a0:91:84:78:17:96:db:26:04:aa:1b:01:17:a3:c6:
                    e9:1e:ce:c5:62:24:a3:ca:bf:e9:6a:4e:30:eb:79:
                    20:8c:cc:89:bf:54:7e:2b:b0:9c:aa:99:8a:08:40:
                    ad:18:62:65:15:5c:15:66:cb:1c:9a:7c:2f:ea:76:
                    e3:84:7d:d9:99:34:c4:0d:02:5a:12:45:48:ac:77:
                    67:d7:4e:af:5f:0d:47:a7:2c:7a:65:98:5b:d1:4b:
                    c9:35:b4:72:59:38:bb:b4:85:c7:cf:f9:ef:d6:ff:
                    2e:7e:27:33:f2:85:00:95:f1:86:e6:d2:21:91:96:
                    0f:a5:6c:39:29:d7:3d:26:34:58:7d:dd:a3:4a:30:
                    ae:f2:c2:b8:5b:22:39:94:36:fa:35:07:dc:c9:d5:
                    0e:08:53:62:d6:5c:7c:5b:24:58:99:3f:25:29:2a:
                    a6:16:6e:d5:93:ed:1e:3b:21:4d:99:85:0a:14:de:
                    ad:0f:49:bb:bc:a9:18:0a:63:13:67:c7:36:a4:f0:
                    88:d6:c9:15:46:eb:ba:f7:33:04:ab:fb:0b:ae:b5:
                    5c:be:eb:a4:48:a5:3a:2f:50:f5:f5:5d:93:41:ed:
                    9f:cb:66:f4:56:b7:65:4d:ae:7d:4a:b4:e7:94:2e:
                    c1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:17:8D:A6:7F:1F:1F:7A:63:4C:25:1A:1F:15:37:35:93:5F:9C:69
            X509v3 Authority Key Identifier:
                keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:5a:f3:9e:0a:16:98:e4:d8:f4:b7:87:ab:dc:01:38:1c:55:
         80:86:58:9b:77:f9:b4:cc:ce:59:b8:52:fe:84:39:9b:8f:3c:
         2e:97:4d:29:a6:aa:8d:48:fd:9c:ef:2b:3e:72:21:d4:5e:87:
         84:e0:18:7f:ef:02:75:ba:6b:92:0a:16:5c:5a:4d:19:1f:48:
         87:61:92:8b:ec:6c:74:de:89:d4:82:f2:98:61:63:41:7e:40:
         1d:fc:89:eb:fe:18:40:65:e1:d5:2e:c6:f2:01:47:61:d3:47:
         1e:07:bf:e7:73:b5:25:5f:39:22:e3:86:48:14:2a:ca:62:c8:
         d1:c1:8d:32:ab:cf:0c:7c:ee:61:b0:33:69:a1:d2:4b:6c:c4:
         a6:46:4b:ba:9f:66:35:c7:99:a9:a6:3a:da:af:4f:26:37:26:
         39:a3:c6:75:cf:d0:f6:e6:91:ab:cf:e7:e0:5d:f7:c2:ae:17:
         2d:6e:2f:b0:fd:af:f0:ed:be:6a:36:27:18:1c:16:97:05:6f:
         fc:68:3a:6a:de:7d:b2:44:76:e6:93:99:19:7c:cf:4b:ac:fc:
         ad:aa:ef:0b:54:3f:ec:a9:9d:47:aa:83:d2:c2:52:15:17:03:
         58:c1:b4:e3:08:97:1e:82:6b:a7:b7:2b:c7:78:e8:d4:32:56:
         48:5e:7b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----