Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft
File:                     wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft (raw, json)
Hash identifier:          48K3Q7hcEGmwj2pyQRzeqghHe+Vbdpr33K/UP4/k4Lg=
Subject key identifier:   89:76:42:33:E0:B9:A0:F5:22:C1:72:DF:61:19:73:95:15:E6:A8:BA
Authority key identifier: C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4
Certificate issuer:       /CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
Certificate serial:       019353BF00459B54356D7FD4C55DB35501F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft
Manifest number:          02D8
Signing time:             Fri 22 Nov 2024 12:00:46 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:46 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:46 +0000
Files and hashes:         1: PsFj0jBOlnK8Si6GXWiKFli7hSg.roa (hash: AD3m5UOgu1pbKBnQ0Y3C9Uo7m8klm0a5IoMoz3rTIms=)
                          2: SP7-jlb8fquT9Xw5-EjgzR9HA2E.roa (hash: DsFrWyBQnZWHq/oPisk4Qiv/gEwwPLiz9AzqPL+e0fg=)
                          3: hUiIvXVuDG7JIqYCNKalxJ6fkcI.roa (hash: 0+gZLxGiDhUkP5z2sdpDkLgZgc/oBKsSnEUBgflQnkY=)
                          4: wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl (hash: JewcJRMn3tIqUlfRxwIYIuN18e+mD1wExwKgEcuU+DE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:bf:00:45:9b:54:35:6d:7f:d4:c5:5d:b3:55:01:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
        Validity
            Not Before: Nov 22 12:00:46 2024 GMT
            Not After : Nov 23 12:00:46 2024 GMT
        Subject: CN=89764233e0b9a0f522c172df6119739515e6a8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:90:f5:fd:06:dd:b9:b5:e7:22:e8:8d:05:
                    74:30:33:5d:a4:8c:69:c6:da:52:97:dd:75:93:69:
                    ec:9d:4b:b1:a5:ab:29:93:8c:eb:83:12:0a:e2:a1:
                    3e:c6:17:0e:7b:51:64:b9:75:1c:66:cf:79:40:fe:
                    74:cd:e7:2a:f1:87:82:9a:ce:25:5f:d8:19:46:a4:
                    a3:18:b6:a8:03:0c:01:12:b1:29:14:d9:bd:ba:73:
                    cb:e0:b0:c8:c7:19:08:ca:8d:ca:92:0e:20:c8:cc:
                    16:ee:59:c2:af:7b:b7:76:f9:f1:86:a5:10:d6:44:
                    98:79:56:f6:93:ea:db:1d:65:0b:54:49:24:c3:87:
                    8b:98:2b:6a:3b:e0:ad:71:c3:db:3a:69:eb:2a:fa:
                    ff:83:47:b2:8f:73:47:21:9d:be:1c:4f:54:50:46:
                    f1:8d:22:4a:0a:9c:f3:21:7c:43:2f:fe:3d:8e:8f:
                    78:c5:e2:4d:94:5d:93:0d:64:cb:34:01:fb:99:53:
                    63:ae:c7:4d:3a:b7:16:89:d7:52:88:68:a1:18:97:
                    7a:5d:ea:78:a7:f3:d5:1b:0b:b6:fd:73:1c:4f:bc:
                    c3:6c:27:42:f7:ba:12:96:0c:22:08:60:44:c5:c3:
                    ed:f7:d8:98:55:aa:62:e1:9d:e4:f8:73:5a:d4:b3:
                    23:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:76:42:33:E0:B9:A0:F5:22:C1:72:DF:61:19:73:95:15:E6:A8:BA
            X509v3 Authority Key Identifier:
                keyid:C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:cc:d8:2f:8d:4c:78:47:77:c0:2b:93:46:b1:9a:44:41:b5:
         d0:9f:6d:df:e5:61:6d:75:36:ad:3c:ce:bf:c3:41:5e:b0:2e:
         7e:f2:9c:15:fe:81:7b:54:9d:17:f9:ba:06:7b:99:30:84:be:
         99:e2:49:fd:1c:e0:21:a2:80:76:db:f7:6e:34:d6:a1:d4:6b:
         fa:d3:fb:88:31:8a:bd:d0:35:76:6c:52:46:be:c8:82:52:a1:
         59:8e:af:8b:ad:38:27:08:11:d8:f3:45:87:e5:af:c8:61:34:
         4d:0f:30:92:67:37:c3:ea:e0:e8:e8:7a:52:d9:66:b8:9c:e6:
         a4:e6:ed:a9:03:8a:ac:7f:ff:9f:8d:d7:4e:4a:be:7a:d9:f8:
         da:75:fa:16:c7:26:7a:5a:77:80:98:2a:6a:f9:54:83:f7:83:
         e1:a6:7b:2f:8a:26:1b:9a:63:de:63:17:ed:58:4e:c2:9e:c8:
         d1:07:f9:66:1a:d5:dc:cf:c4:be:0a:e8:46:49:92:bb:ab:20:
         68:1f:92:82:c0:f8:f5:2c:a2:83:dc:b1:1d:03:9e:70:c7:e2:
         dc:20:22:73:b0:11:93:58:2f:91:c2:9f:f3:05:b8:68:07:df:
         fb:25:75:17:98:7b:51:30:76:6b:92:fc:0b:0c:c1:40:1f:d7:
         0a:43:5e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----