Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File:                     xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier:          BfST4j4qilmHLDY1fhD/kmW3ZjWQ93qeoAMMdLqLXJ0=
Subject key identifier:   F8:C0:75:6F:F5:62:16:B1:1A:15:D9:73:38:39:72:29:4B:A6:60:02
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer:       /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial:       0193561AE66ADF5A265E9C0089F2A6C1C719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number:          1285
Signing time:             Fri 22 Nov 2024 23:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:23 +0000
Files and hashes:         1: 1SWJLYD8hakKZ32YvSh3GSVWQ8E.roa (hash: vVpqEVEErDiIJ2GUZGcYQJMYMXQZ5V2U7KgFuepQBjk=)
                          2: Ahcelz60YCZIwDUlfIn2Bh1Pz5I.roa (hash: 7aHG+vSULDFAdUSUOb0cHEqdj5p0+gRs3v2v7dMZVoY=)
                          3: DI8Lar4k414Z0bqXCPvF3j4bvdQ.roa (hash: amfQHsTvzVdEsSPl2cIQCY1qlX+nn6bPQmYADawLlKI=)
                          4: sEs0h-jXY9aEM0Q6qTUqXt36dG0.roa (hash: 93LSYZLJ7FKowgrEMwBhnd48p5hqv4L/7fqTAc+2H9M=)
                          5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: HrQYhj0JtQSED2Jm8BBKIur/bRZ0WXYVgwqaRwS5aYc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:e6:6a:df:5a:26:5e:9c:00:89:f2:a6:c1:c7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
        Validity
            Not Before: Nov 22 23:00:23 2024 GMT
            Not After : Nov 23 23:00:23 2024 GMT
        Subject: CN=f8c0756ff56216b11a15d973383972294ba66002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5d:bc:e4:00:03:d0:bd:68:55:c9:1a:83:e9:
                    c7:e4:c8:16:9b:1d:3b:73:7a:4d:d1:9e:17:fa:7d:
                    a7:65:8d:66:ea:39:51:a5:15:a5:6d:c9:55:aa:b8:
                    96:96:41:5e:69:a5:f3:01:b7:c1:27:8a:d4:61:45:
                    1e:1f:ca:3f:96:00:26:43:c8:61:e0:06:5c:f6:97:
                    0f:6b:ce:bf:68:0b:6a:fa:93:d0:e9:1d:26:0b:bf:
                    d2:f9:2f:2c:25:b3:bd:bd:98:93:53:ee:3d:f6:c7:
                    7e:ca:1a:2e:97:3a:10:9d:e5:a4:71:d2:f3:49:a5:
                    09:18:ed:c4:6f:db:78:fa:ed:52:db:0f:ab:ae:87:
                    06:ed:9b:7a:40:66:ae:3d:01:c3:70:93:58:30:f3:
                    55:2f:b8:8b:25:91:c5:d3:a6:92:c4:4d:94:0d:49:
                    a5:f5:d1:eb:52:36:3e:15:34:90:31:4e:a9:95:7c:
                    c4:f8:12:35:83:79:39:1f:a2:3b:9f:f8:be:83:c0:
                    db:c8:2f:d8:2b:12:f0:b1:ff:3d:84:c1:15:55:38:
                    5e:c0:62:05:cf:d2:89:22:8f:66:a7:e2:f3:22:be:
                    23:ce:be:f3:bf:68:83:56:ce:28:d0:59:b6:75:e3:
                    46:ad:67:5b:6a:ab:ad:65:1e:c3:a1:89:bc:0c:09:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C0:75:6F:F5:62:16:B1:1A:15:D9:73:38:39:72:29:4B:A6:60:02
            X509v3 Authority Key Identifier:
                keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:20:04:d9:9a:73:b2:e4:da:61:a5:2e:fa:1c:6a:57:92:47:
         4a:2c:b7:77:85:b0:d5:87:68:c5:cc:fe:98:92:24:94:e5:ce:
         45:f6:c1:a0:f0:20:31:dd:60:1a:c0:76:d8:87:b3:92:50:45:
         6c:64:43:8c:3f:57:f6:f6:b4:58:42:72:d8:18:34:3e:24:f4:
         e8:e0:64:2b:51:2b:73:1f:84:0e:50:70:2e:58:b0:07:79:b1:
         60:6e:bd:72:36:58:a6:d6:92:c1:4c:e4:3f:1e:06:db:08:22:
         dc:8e:63:6b:fb:12:f0:85:f9:33:bb:7e:f3:45:0d:9e:52:7c:
         71:6c:0d:e2:da:3c:26:a9:13:b6:67:e6:11:78:23:3e:a3:b9:
         4a:50:94:c4:fa:eb:b1:1d:41:19:87:75:2d:58:9c:77:3a:8b:
         60:23:f0:55:a0:47:1e:bc:91:35:39:a4:e5:9d:8a:67:d5:62:
         00:aa:95:48:27:e4:99:59:72:e2:d0:73:09:94:5d:3f:8c:a5:
         7a:c6:c3:95:80:ec:1a:d5:ba:7f:e8:72:36:eb:cd:8e:ca:44:
         3b:e3:c4:d8:6c:8c:e1:42:eb:55:f4:69:f4:08:7e:5f:b3:58:
         c3:f8:60:54:52:e8:ca:27:6b:7f:e0:e0:b4:6b:ce:cd:f8:c8:
         83:b3:ea:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----