Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
File:                     IO7gXaGD3uK4EYFBlWRiySQNeHY.mft (raw, json)
Hash identifier:          SFW/MccM8WPdAmlmvsw1Vg/Ydcfg5O3ltAqxTs0fEOU=
Subject key identifier:   F3:2F:5A:97:86:93:F2:2F:EF:EB:3C:C8:97:7C:64:BB:FA:DF:10:42
Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
Certificate issuer:       /CN=20eee05da183dee2b8118141956462c9240d7876
Certificate serial:       01935879629A8255346C59262E0197FA774E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
Manifest number:          117C
Signing time:             Sat 23 Nov 2024 10:02:50 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:50 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:50 +0000
Files and hashes:         1: IO7gXaGD3uK4EYFBlWRiySQNeHY.crl (hash: KghOdliN26UNfRdKeSX8Nqsd7q1LW+za6Cog6HxX/Es=)
                          2: TEcgcfmPc588zPAFcM06ho7aozE.roa (hash: niZABl/p53xvLn9Jd0yvH3YAzX7TmR1lU6dVv6SS6w0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:62:9a:82:55:34:6c:59:26:2e:01:97:fa:77:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20eee05da183dee2b8118141956462c9240d7876
        Validity
            Not Before: Nov 23 10:02:50 2024 GMT
            Not After : Nov 24 10:02:50 2024 GMT
        Subject: CN=f32f5a978693f22fefeb3cc8977c64bbfadf1042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8b:08:f0:ab:e9:af:06:18:c1:6d:99:e7:04:
                    7e:97:43:0f:04:b7:02:58:92:db:47:ee:d7:03:2d:
                    4f:0f:9b:6f:ab:f7:11:10:35:77:d9:98:1f:b5:a5:
                    db:b0:32:b7:8d:09:ad:98:fc:e8:2e:61:b2:41:ff:
                    f1:42:b4:e3:3d:35:e1:f0:cb:e0:15:fd:43:ff:31:
                    33:2c:0f:c3:50:c4:a1:b1:fd:82:27:6e:05:95:bb:
                    e0:d3:d1:b9:b9:21:26:af:5b:0b:e9:3f:3e:e7:aa:
                    c8:99:9b:43:12:54:f8:e2:0a:fd:f4:bd:d1:0d:6c:
                    57:15:84:60:88:bb:3d:cc:19:26:6c:bf:8a:3b:db:
                    19:98:ff:83:4b:02:5a:a5:d0:55:a1:25:a4:4a:06:
                    54:15:8b:4f:b0:99:f9:40:cb:d4:ca:31:12:24:02:
                    af:ae:6a:83:31:9a:b4:98:7a:df:57:db:e9:f0:28:
                    2a:1a:d5:0f:8f:50:7c:2d:97:81:1d:c9:cf:06:6d:
                    20:45:dd:05:68:c6:55:db:7e:37:2d:38:b7:53:f8:
                    77:a8:dd:8a:7e:39:84:f6:9f:c8:d0:0f:5d:ba:f7:
                    04:93:67:8d:bc:6f:df:6d:7d:11:87:0f:55:a4:19:
                    a9:55:cd:c4:26:7b:3a:67:0b:3d:bb:f9:ba:46:35:
                    ef:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2F:5A:97:86:93:F2:2F:EF:EB:3C:C8:97:7C:64:BB:FA:DF:10:42
            X509v3 Authority Key Identifier:
                keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ce:87:9c:1d:15:45:49:c3:2b:ce:b2:7b:0f:3c:3d:c6:8a:
         ce:8b:f7:3d:34:a3:6e:c1:34:51:8c:27:4a:0f:56:86:2a:46:
         40:f7:05:0c:c4:6a:82:65:95:15:fb:1c:a1:2b:1d:2c:e2:59:
         ff:3f:43:1c:79:ec:1e:0c:df:d9:31:46:68:0c:41:1e:82:b5:
         67:5c:c0:51:10:6b:ff:b2:73:0c:eb:ca:9a:1d:ec:e4:72:2a:
         f1:9a:e0:24:15:34:84:7b:9e:47:5e:0c:a3:87:53:68:49:eb:
         7a:7d:60:21:8e:b1:e2:f6:0e:3a:a6:d2:9b:c5:3d:78:6a:de:
         7c:56:de:de:0f:ba:76:27:6e:d0:ac:25:9b:3f:80:59:c7:5b:
         9a:c6:5d:8f:0c:0b:28:57:53:f7:80:c2:64:f8:41:c7:42:36:
         61:a9:f6:e8:07:a7:8c:fc:59:f5:84:1e:e6:71:e0:82:5e:8a:
         e1:ce:6a:72:c6:bb:09:87:38:43:92:48:75:b5:02:cf:d4:e5:
         5a:70:59:60:1b:a6:eb:c1:20:c6:32:45:58:7b:e5:7d:9d:94:
         1a:f0:b5:9b:f9:73:60:ef:48:bd:3b:c5:1c:90:db:bf:0e:aa:
         a0:37:a7:30:51:f3:1f:23:32:db:cf:19:f7:56:27:43:10:7a:
         f0:19:b0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----