Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File:                     CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier:          6c1R1PFPGtxI+K+qeHZd7HkeygdOHKvMDAncMI4m45A=
Subject key identifier:   B8:FC:F5:B7:F2:A3:54:5F:FD:D5:18:3B:06:06:A4:BC:AB:78:53:8C
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer:       /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial:       01936632B15B97EC6572F2647F80453DBD2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number:          0D43
Signing time:             Tue 26 Nov 2024 02:00:18 +0000
Manifest this update:     Tue 26 Nov 2024 02:00:18 +0000
Manifest next update:     Wed 27 Nov 2024 02:00:18 +0000
Files and hashes:         1: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: O7i4hutoG9OxTfdgAy0zUIeHXl/0t38pn+bNucdOOus=)
                          2: JqcaBjXFPRhjFP95sNdHBsG25IM.roa (hash: 2jjp2v0HjTSwWPOM0wfwtYsjZ2O3chG+OJ6z8HZsvbU=)
                          3: NWjU99hKkszeYs_FemFc3MN8zyY.roa (hash: CPvtHE1P1A989zvMihN1261KyU6aBCPkwacw1lPts4k=)
                          4: hTpBUHjKSibUjSu531PR8oyCGJo.roa (hash: FVUbBHWJuqqaaxaoiRKqWrwd28wE7nfe382mHHXTOas=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:32:b1:5b:97:ec:65:72:f2:64:7f:80:45:3d:bd:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
        Validity
            Not Before: Nov 26 02:00:18 2024 GMT
            Not After : Nov 27 02:00:18 2024 GMT
        Subject: CN=b8fcf5b7f2a3545ffdd5183b0606a4bcab78538c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c6:b4:55:de:ab:96:f7:9e:c2:64:2e:a9:5f:
                    04:1d:ca:3e:e1:47:c5:1d:d1:81:2a:ce:e5:e6:b0:
                    03:21:7b:50:ae:10:d8:6d:2b:ea:f5:38:bf:ef:86:
                    9c:a0:0c:c9:06:18:56:48:2c:78:80:90:f2:c0:1c:
                    ce:34:6c:5b:b5:b4:03:40:9c:50:63:1c:47:62:ac:
                    47:20:20:8e:85:37:7e:3f:ed:7a:bb:8f:b7:96:2f:
                    50:82:df:4b:36:b0:53:fa:81:b4:60:40:c9:e5:e7:
                    ff:97:2e:f9:b4:ef:14:d3:82:7e:81:1d:e9:1f:04:
                    48:fc:97:1d:f3:42:81:dd:c4:6e:e1:fb:9f:df:7f:
                    a5:21:44:24:cc:f8:d2:e4:36:04:cd:b3:bd:74:0e:
                    31:a7:67:8e:20:33:8b:33:0c:2a:eb:e8:26:7d:56:
                    04:12:eb:db:6d:d5:03:94:40:cd:67:c5:f1:4e:8e:
                    72:e8:ed:df:f3:cb:99:5b:a7:b1:a1:78:28:c0:00:
                    21:86:9f:ec:b2:3e:da:ba:61:62:11:1a:8e:73:5c:
                    4f:1a:3c:26:bf:fa:a1:53:91:e7:cb:45:1b:34:f6:
                    9a:9d:a1:cc:7c:b0:38:78:25:73:5d:bb:d4:8d:c2:
                    ca:eb:0e:97:bc:22:de:03:a7:b3:23:3e:94:b1:a7:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FC:F5:B7:F2:A3:54:5F:FD:D5:18:3B:06:06:A4:BC:AB:78:53:8C
            X509v3 Authority Key Identifier:
                keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8b:d4:04:ce:9b:fd:91:42:84:69:df:de:2a:16:89:2d:eb:
         d6:1f:0b:36:29:19:2d:ea:a5:b8:f5:48:16:00:d0:02:57:bc:
         1e:d6:eb:b7:da:ff:b9:54:f7:99:74:bb:c4:b1:cb:69:e3:66:
         bc:74:7f:46:c5:29:f7:9e:21:6f:3b:ba:72:c9:b6:9b:52:87:
         83:f2:00:ed:d9:f4:35:ad:d7:ca:95:9b:95:f5:e9:a9:6b:1a:
         10:b7:65:58:35:43:5e:07:68:43:de:a9:a4:fb:11:2e:0b:e2:
         7d:32:f9:67:56:c1:23:be:7f:7e:5a:7f:68:bf:63:16:f7:d8:
         90:26:65:f5:8b:06:06:84:26:7d:48:51:fa:ac:7e:f2:78:e5:
         73:8c:e8:35:c2:09:79:b4:3f:d6:43:15:56:e0:b3:19:91:fe:
         5f:a9:7c:b6:c2:47:f7:2a:dc:15:25:37:86:b4:a3:1b:a9:8f:
         d1:bb:b7:1b:cd:bc:2f:94:87:f0:2f:8f:10:3c:06:9a:ca:c6:
         82:72:c4:9a:7f:56:4c:bc:4c:c6:55:fe:ad:65:ef:e9:85:97:
         93:24:9d:48:12:49:94:2a:7d:40:94:a9:82:eb:da:e2:8d:3d:
         1a:15:98:43:46:7c:71:7c:d5:b0:dd:f5:44:e5:1c:29:eb:b5:
         08:c3:e9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----