Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
File:                     bvqMD-YuxUrMveNcYL2K1LkBT_c.mft (raw, json)
Hash identifier:          ye+VjvKLD2UMgBmhrBLTy4QPcq5CuiqrIfYm9Cb9bq0=
Subject key identifier:   91:55:CA:98:B1:A6:51:CF:35:9C:B2:5D:A4:C2:15:36:90:02:38:07
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Certificate issuer:       /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial:       0193542C8D33DB7E55878B863183CAC057BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
Manifest number:          120B
Signing time:             Fri 22 Nov 2024 14:00:25 +0000
Manifest this update:     Fri 22 Nov 2024 14:00:25 +0000
Manifest next update:     Sat 23 Nov 2024 14:00:25 +0000
Files and hashes:         1: O_QmbB9P_CpJg9ebxgeDAfpMNWU.roa (hash: pvF4Jz8WJs2+NzQMogCJLHpy3gSmHfrVDNfYU5RdVOE=)
                          2: bvqMD-YuxUrMveNcYL2K1LkBT_c.crl (hash: HR9RC2PYAr7UK2cBbve3hVCxqj3b0Rufyu+LAQlg7Z8=)
                          3: fSMY4Ac6iBY71zSN8_uimw55_JY.roa (hash: 2CKqHGnPFUPKDdVvETvCy/KJWroVJH9MFIM5SyJw9h0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:2c:8d:33:db:7e:55:87:8b:86:31:83:ca:c0:57:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
        Validity
            Not Before: Nov 22 14:00:25 2024 GMT
            Not After : Nov 23 14:00:25 2024 GMT
        Subject: CN=9155ca98b1a651cf359cb25da4c2153690023807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d7:6e:af:63:25:5b:c3:c6:1e:6b:5b:82:fc:
                    a4:8b:ee:68:28:bd:a9:53:60:54:0b:bf:00:b7:d5:
                    51:3b:07:a4:c6:e2:29:c6:83:33:25:e9:83:42:cb:
                    49:3d:55:07:71:86:f3:ff:8d:f6:96:c5:ce:aa:29:
                    83:1d:b3:19:f9:66:2e:e0:c7:cf:88:29:5b:8e:8e:
                    6e:15:09:fc:d7:4d:43:95:c4:4d:81:11:bf:3b:b2:
                    d7:f9:eb:30:36:8b:ce:5e:7a:18:4b:29:82:a5:56:
                    05:b3:16:a8:4e:dd:08:39:ff:cb:35:e5:c2:9d:42:
                    b4:08:3c:7b:ef:05:89:19:b9:32:d8:2c:21:2f:21:
                    6e:49:b3:fc:66:15:84:a7:ec:65:d1:77:b1:0a:34:
                    d1:76:b2:b0:d9:7c:06:07:27:de:eb:52:88:39:5a:
                    d2:d1:03:f7:27:30:ea:3f:c1:2c:47:13:d8:11:1e:
                    b1:0f:a6:cf:54:04:31:b5:98:33:49:ff:f4:e9:8a:
                    61:23:c6:00:7c:4e:83:9a:3e:75:f0:b0:6d:09:83:
                    73:f4:3b:ab:74:08:e1:3a:b5:bf:ee:67:a5:bb:ce:
                    93:39:f9:fb:e3:25:c2:40:9d:03:51:5e:cb:8b:a5:
                    7e:bd:52:d6:e9:17:35:74:6f:e6:5e:32:f5:5c:32:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:55:CA:98:B1:A6:51:CF:35:9C:B2:5D:A4:C2:15:36:90:02:38:07
            X509v3 Authority Key Identifier:
                keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:06:7d:b8:bd:48:a6:98:ee:45:ae:58:0a:e3:14:d1:9b:a0:
         02:75:1c:b3:1a:38:66:e5:3b:e8:58:da:c2:e6:0a:26:86:b8:
         ba:c1:86:ab:a5:b6:3e:99:60:0e:90:99:7a:81:3e:46:24:14:
         f3:fd:b5:54:54:e4:0e:e4:c5:9f:5d:84:ee:25:36:8d:6a:22:
         9a:a4:9b:f3:45:43:63:3c:f0:80:f6:9d:0c:d8:7a:e7:64:62:
         e6:59:68:c5:51:c6:bf:6e:1e:4c:53:58:97:5d:ab:ec:fa:e5:
         d6:27:35:5d:58:f1:f5:dd:cc:a2:0a:78:40:b1:7a:29:8c:cf:
         36:36:77:25:8d:b4:38:13:20:5f:84:ab:92:ca:08:90:97:99:
         03:05:67:f1:cd:8d:1a:50:aa:8b:68:1a:ba:e5:8f:29:15:b9:
         50:31:26:8b:e5:63:6b:d0:0d:13:e2:dd:0e:0f:39:5f:84:ad:
         ca:20:ca:51:db:56:9b:05:7b:7a:1d:23:e8:4a:99:44:6d:1e:
         51:34:15:b3:05:97:de:cd:b8:b3:ce:39:b2:12:02:96:17:b3:
         79:7e:15:2d:b6:c7:7a:54:c3:68:1e:1f:87:15:f1:4d:39:1a:
         5f:1d:12:92:06:bd:83:25:c8:e4:98:40:a5:0e:7b:34:00:db:
         81:e4:38:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----