Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
File:                     OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json)
Hash identifier:          JvzAFpzY1xG8g8azxJxsVL/hO4aVJkcX+qb67T36tO4=
Subject key identifier:   FF:B9:66:A2:98:E9:29:D7:9F:8C:67:59:2C:0C:F9:42:64:BD:8C:16
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Certificate issuer:       /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial:       0193553F42E2BE9816988998376964D0A125
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
Manifest number:          1262
Signing time:             Fri 22 Nov 2024 19:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:29 +0000
Files and hashes:         1: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: yFeRgnQKKN8RTVje6gd91VNmJciKv/Lpvsu66Ibyk8Q=)
                          2: ZIMfSSRMD2LoKxS9OXYjBmqq6L0.roa (hash: b8cKAjbNsbstQFK+wSy+UfPUHrtAPpfCjs/d9rPd6XY=)
                          3: cKi4Su0ZnxWGfMeae5X6_qMLvPY.roa (hash: ZliTu0vnGmMSraLk6W/Wt9M3KUcyAObs9cpkSJU+FYQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:42:e2:be:98:16:98:89:98:37:69:64:d0:a1:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
        Validity
            Not Before: Nov 22 19:00:29 2024 GMT
            Not After : Nov 23 19:00:29 2024 GMT
        Subject: CN=ffb966a298e929d79f8c67592c0cf94264bd8c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9b:53:3e:af:9e:eb:b2:7b:8b:a0:d1:d2:12:
                    a1:72:8e:6f:32:77:1a:94:cf:18:bd:58:70:9c:ad:
                    1c:f3:0d:8d:1d:3d:c4:3f:26:0b:8f:04:0e:67:fe:
                    64:70:90:5c:fe:00:13:64:42:01:4c:6f:62:9f:b1:
                    0a:08:6d:17:f3:94:ce:a9:3d:e9:0b:d8:e0:85:48:
                    11:d6:06:eb:86:b7:3c:9f:44:55:b8:85:a5:c7:55:
                    68:40:31:aa:af:ff:35:bb:d3:00:0c:f5:cb:0d:71:
                    03:a0:44:8c:b5:29:73:a5:00:0c:58:ba:8b:3f:3d:
                    7e:87:e5:c2:5b:35:4f:95:22:a6:db:9c:ca:b4:41:
                    be:f4:ee:04:65:a8:c9:61:ec:a1:d1:f7:8c:e2:b8:
                    7f:e4:6e:ca:76:fd:7a:a5:32:81:43:fb:78:ef:90:
                    ce:a3:96:7d:2a:a9:3e:81:ed:75:6c:70:61:e7:0a:
                    8a:ec:3a:4f:65:d0:fd:ef:92:c4:e0:02:c8:b0:a5:
                    77:3d:73:17:81:83:ba:9a:1a:a3:d4:06:c0:07:82:
                    ff:8c:c6:fb:93:e9:fe:ef:bf:fd:1a:76:54:04:64:
                    91:ad:40:90:c1:20:c0:47:8b:47:3a:da:d5:00:95:
                    6a:30:05:ee:3c:73:df:52:95:0c:fe:71:e5:e9:3c:
                    15:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B9:66:A2:98:E9:29:D7:9F:8C:67:59:2C:0C:F9:42:64:BD:8C:16
            X509v3 Authority Key Identifier:
                keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0f:f4:ac:32:ac:82:dd:76:3b:19:53:ab:c7:e0:56:fd:c7:
         a5:a2:4d:87:f4:77:b3:ec:dd:a7:4d:73:ca:e7:f2:07:a4:e8:
         9e:c6:84:7f:08:3b:36:3b:60:c4:fa:ba:96:13:9b:ba:5f:9e:
         87:f0:13:fc:5c:d4:b7:01:81:ca:6f:27:b7:7b:1a:46:5a:0d:
         3a:a1:13:3d:0d:13:65:4f:0a:1f:f2:08:ef:f1:a4:8f:bb:60:
         a1:72:9d:78:d2:33:f4:e2:65:45:79:d7:ff:5e:6d:55:5b:ba:
         d5:10:13:85:0f:6c:a4:25:de:22:80:0b:4b:7f:9b:f1:b6:f0:
         98:d0:26:e4:b0:e9:4b:31:b5:d8:54:60:1f:43:cc:45:81:f3:
         da:18:dd:d6:0a:94:66:e0:79:0a:03:4c:e1:29:eb:d7:56:8b:
         91:ca:ae:be:e3:31:6c:b8:8c:90:d6:ae:31:48:88:a9:34:c0:
         d3:1d:8b:ce:a9:b2:45:4b:90:41:45:a7:a1:d4:de:f3:f0:e7:
         48:fe:e8:27:5b:b5:a3:fc:cd:e2:26:20:92:de:1f:d8:d9:e1:
         20:84:af:4f:f5:f4:09:5e:92:ff:3b:f2:1a:98:13:71:26:b1:
         ab:5b:e9:0f:b7:ca:b6:3f:36:df:e7:98:5a:2c:d0:7c:30:9e:
         94:25:23:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----