Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
File:                     njUz1mLD8Na7HmkvP6tte6OCTCg.mft (raw, json)
Hash identifier:          J8YbQxrT6EH68f511aCFmpw0Au5QLMT4VV/I9QFFUpQ=
Subject key identifier:   1C:6A:A4:02:0B:6E:C6:2B:4D:70:E5:B4:69:FA:B8:46:C0:47:6D:49
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Certificate issuer:       /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial:       0193542C85552C552F7DC8E01A4605DD9091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
Manifest number:          1328
Signing time:             Fri 22 Nov 2024 14:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 14:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 14:00:23 +0000
Files and hashes:         1: AGCjlep1Ca-6AtXNZN-AYMpLYd8.roa (hash: eSOZRz75i1apXYI1R8A5tHk6ae5ysQQRz/gxl2iy1Iw=)
                          2: DzpKo4r5ltsdkdIJ81IKEwJLo7I.roa (hash: B3mWdf7rXyp3870KJRzWLCq2XDI+ZecR5nsOoyPc1Bc=)
                          3: jHXcNAHznksHHEsoQentdu06YzM.roa (hash: +XaxezL32vHXsweTZ4yC7cUBLU/HjLLVVO63UV1U9s8=)
                          4: jyOxZvnR119yiuWoMu6epibCnLE.roa (hash: dW1gmpoVpmB/xyPHTwm5hAARurUNurMDgadm+vNHTu8=)
                          5: njUz1mLD8Na7HmkvP6tte6OCTCg.crl (hash: lbwqRI69pIUwBRDjctjSEbHYCsDWAu185vlfvQBpun4=)
                          6: pF8mlLa4DIaVdawERlI1KCLszjw.roa (hash: HGS4cH68Z8DRPCcmZJ/IZZk3cp5ommT7GdIMzeiE9M8=)
                          7: q2WuRD__g7owa7jwZPoKNOBX21s.roa (hash: MuFkeuCZVY1sEiUIjo12aOnxza77ZfKzRHxggdO9WMc=)
                          8: xDEUDLuVNtWO7N4Ug_p4rt0fOds.roa (hash: fuuXRRqQTnjE2HWqyqXdd9e9V13lPC+nPP7au7xybgM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:2c:85:55:2c:55:2f:7d:c8:e0:1a:46:05:dd:90:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
        Validity
            Not Before: Nov 22 14:00:23 2024 GMT
            Not After : Nov 23 14:00:23 2024 GMT
        Subject: CN=1c6aa4020b6ec62b4d70e5b469fab846c0476d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:92:e0:7a:d9:02:38:b9:b3:5d:4b:13:ed:2f:
                    fc:ea:19:3d:0d:18:ab:fe:b3:0b:ec:c2:5e:35:77:
                    7e:77:eb:ec:4b:ef:ea:76:92:15:82:2a:dd:0d:4e:
                    cf:d8:ba:28:3d:7b:ca:8a:3a:66:d3:36:c5:64:ea:
                    9e:0f:00:35:2c:bb:1b:97:fa:2b:f3:cc:2c:88:33:
                    67:f9:ac:2a:6f:4e:bb:7f:72:57:00:70:9d:44:92:
                    64:30:4d:a0:7d:c3:2b:ce:a0:f9:e8:13:c7:c3:91:
                    39:db:fd:2a:89:09:cf:df:a6:a7:12:5f:84:25:83:
                    bf:fc:cf:6e:46:f6:4c:03:05:73:39:40:f8:4b:61:
                    33:5b:92:44:26:d5:c3:e4:d8:b7:b5:97:25:7e:e3:
                    d3:4b:36:37:a8:49:05:eb:3b:e2:1e:81:18:55:89:
                    c8:05:da:61:4f:06:2b:ce:f5:02:bb:56:b9:64:22:
                    86:ea:27:7c:e8:2f:0e:2e:a5:99:11:4b:09:8f:c3:
                    fd:3c:57:0a:bd:7a:b0:33:d3:3f:da:e5:da:cd:90:
                    a1:bf:92:6d:38:23:49:43:0d:75:5f:cf:49:7d:8c:
                    a7:f9:dc:ce:24:10:65:9f:ff:a8:67:eb:11:f7:27:
                    b2:29:f6:8e:ba:9c:57:ca:52:e1:67:85:16:e1:76:
                    89:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6A:A4:02:0B:6E:C6:2B:4D:70:E5:B4:69:FA:B8:46:C0:47:6D:49
            X509v3 Authority Key Identifier:
                keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:9c:19:5a:4d:40:7f:9d:f3:a6:70:88:94:61:d4:d4:70:84:
         d9:5b:cf:40:b3:70:2e:21:c4:52:e0:39:a5:82:c4:2a:08:fa:
         7e:3b:d5:17:93:e9:8f:5a:af:ec:11:eb:8b:05:31:6d:07:a2:
         63:45:b8:df:75:d3:6f:93:c3:ce:bc:50:61:0c:59:48:48:0c:
         9a:91:48:b9:cd:09:98:e5:7b:7d:b5:c3:d3:49:0f:f9:92:d3:
         b1:e2:b0:49:94:8f:d7:e2:8a:83:fc:00:7d:f6:0c:80:c0:fa:
         3e:d8:77:74:d7:0e:d6:9f:5a:3f:77:52:42:5f:9c:d9:12:ab:
         61:5a:de:7d:c8:8d:76:04:67:c3:de:67:59:67:c1:51:44:84:
         9a:ee:1a:09:dc:26:f0:c3:27:aa:07:c4:d2:52:a4:7d:19:46:
         55:86:d4:4c:4c:31:e7:05:b0:26:f1:85:3f:99:b7:ff:e7:8f:
         4d:65:61:f6:33:ab:77:74:ba:da:11:7a:9e:8f:9f:04:b8:32:
         52:c5:87:da:8c:2d:f9:9a:77:f8:43:73:9a:c4:14:ae:11:fe:
         2e:e5:f8:53:07:c7:16:e6:23:e0:00:43:2d:9c:bd:d4:43:37:
         19:20:7e:ba:2e:34:69:41:9b:f9:ea:00:67:44:3e:f6:fa:f3:
         a7:54:97:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----