Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
File:                     2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json)
Hash identifier:          l1ZrwZxmElg7I10bVwK//y+fAoqtmUkjKK/e56Ace10=
Subject key identifier:   15:7B:32:49:1C:40:F4:B6:A5:98:59:53:B3:AD:89:48:95:0A:7A:58
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Certificate issuer:       /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial:       019233FFE152D6E0587019A4E52A8364286E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
Manifest number:          05A0
Signing time:             Fri 27 Sep 2024 15:01:00 +0000
Manifest this update:     Fri 27 Sep 2024 15:01:00 +0000
Manifest next update:     Sat 28 Sep 2024 15:01:00 +0000
Files and hashes:         1: 1-DXQMAAVcsnH1GH4XWD2FZKft6k.roa (hash: ne5rrRBMS+Icm+R1ik7VZhBfK3GSnCokyyHpUSN+2No=)
                          2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: QUqju6XbnIqiteeqexTjcFigvrYmsO6o03VoLTU79RU=)
                          3: 9L7UvQQGhWV8ymKT3JjCvRfnnpE.roa (hash: qPtqo9hF17QSWiHCyKukfkf6Mw1HCOCLe8snidpxJ5Q=)
                          4: zN94u2P0OcgUyF2Io8qfJAhfeUk.roa (hash: hodzCdrza6C4uqEyPC5xqNCIY1vsP79XPwOL383rj4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:33:ff:e1:52:d6:e0:58:70:19:a4:e5:2a:83:64:28:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
        Validity
            Not Before: Sep 27 15:01:00 2024 GMT
            Not After : Sep 28 15:01:00 2024 GMT
        Subject: CN=157b32491c40f4b6a5985953b3ad8948950a7a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:3d:bd:87:29:11:c9:2d:76:67:08:03:81:
                    96:bb:38:f4:08:6a:5e:2f:bd:50:57:a3:bb:94:9b:
                    72:fa:0d:da:af:c4:2c:55:69:f2:8b:e2:5e:ef:3e:
                    3c:b1:f1:b7:59:10:03:37:b4:50:b8:87:45:72:38:
                    70:22:75:cb:be:20:5c:ca:bb:af:c1:b6:97:8e:8a:
                    fb:1f:2c:be:a3:e6:68:3a:05:3a:d1:99:d6:27:fd:
                    45:ad:27:05:76:1b:fe:7a:8d:5f:33:1d:82:7b:3b:
                    32:1e:af:e3:53:69:69:7e:90:65:0c:f6:36:e8:83:
                    48:1d:23:5b:37:bc:19:43:51:6e:61:90:d9:36:6a:
                    28:e1:c7:30:76:75:72:0c:f3:19:19:1b:b3:94:a1:
                    f2:fb:43:0d:b6:25:32:f8:42:74:fc:65:76:f2:92:
                    a0:da:df:69:ed:ec:76:f3:13:26:0a:68:73:22:05:
                    88:87:d2:ca:54:5c:2e:14:13:e4:a2:1c:70:99:d3:
                    04:be:ea:af:67:3d:33:28:c4:8d:66:7a:c3:ec:d9:
                    d6:65:39:70:2c:e3:c6:28:fb:8d:f5:d6:8c:c0:8b:
                    32:2c:d7:e1:23:b7:3b:8e:76:71:7b:e3:d5:c0:a7:
                    e5:c6:60:12:0d:6e:a4:08:89:fc:16:37:1f:1f:f9:
                    5e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7B:32:49:1C:40:F4:B6:A5:98:59:53:B3:AD:89:48:95:0A:7A:58
            X509v3 Authority Key Identifier:
                keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e8:eb:ab:a2:10:67:b9:bc:c1:34:b1:69:11:90:d9:23:ec:
         a1:d2:55:ba:7e:ce:54:2b:31:26:0d:35:5d:5e:07:78:00:6a:
         1f:c8:e2:3d:05:74:04:50:0e:8e:bb:c2:c0:d0:7a:a5:e2:da:
         bc:af:2c:70:74:8b:96:6d:bf:9c:2b:62:58:91:8d:2f:f2:33:
         10:26:8f:55:cb:1e:e3:14:c6:51:ff:4d:87:d3:05:a9:5b:b9:
         5b:d4:a5:37:de:e8:e6:bf:c6:4c:f7:32:a9:cd:e2:05:92:7a:
         3b:9a:0c:61:2d:03:f5:65:49:58:ed:6d:20:ed:34:11:19:f7:
         42:9e:ac:45:ad:fe:39:ca:b7:89:c1:e5:5f:36:3b:c0:4a:0c:
         12:bc:fb:cb:95:18:0a:e4:c6:ae:f3:68:1d:e1:9f:3c:76:bb:
         46:fd:c2:a1:b0:40:d1:bd:e5:52:73:f2:c6:3f:d0:b7:77:01:
         cb:07:f8:9b:63:2f:27:48:41:34:2a:32:e9:75:3e:99:a5:a3:
         75:bb:4a:71:c6:a9:32:3f:ae:f5:4a:02:67:7a:fd:7c:d6:e0:
         89:87:46:00:63:94:fa:e7:60:d7:15:43:87:3d:9b:37:8b:86:
         58:08:54:2b:57:b0:ac:52:1d:02:2b:7e:e7:dd:87:a9:96:f7:
         c9:7c:9a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----