Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File:                     I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier:          8SDKF4nwaoMICZjxUyC80hvNpgkM+EtdPcODP1ljlEc=
Subject key identifier:   A4:98:18:1A:8D:5F:C6:76:DA:F4:64:AA:F8:1B:02:85:8E:78:5F:8B
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer:       /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial:       0193568AE9A03C2BBD478064195E420055F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number:          0F5D
Signing time:             Sat 23 Nov 2024 01:02:44 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:44 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:44 +0000
Files and hashes:         1: 0zttnUwcisQjkckLW6EIbpUbobs.roa (hash: n9y9JjNO6LnNNE6XAfwPARanyrp87r0naRByvo0BdO4=)
                          2: 18VWCQlISKjgnNFShnUEviO5Mtg.roa (hash: GmAGlXvn75m4SwBbrAisbA3Wa0iSPFOubY4UkkNm+ng=)
                          3: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: OVFm4CZ0mXNSMb14ANStMwqhUNVX9PwOtFRUvcZyxAM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:e9:a0:3c:2b:bd:47:80:64:19:5e:42:00:55:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
        Validity
            Not Before: Nov 23 01:02:44 2024 GMT
            Not After : Nov 24 01:02:44 2024 GMT
        Subject: CN=a498181a8d5fc676daf464aaf81b02858e785f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2f:11:3c:1e:95:97:b6:7b:3a:5f:89:35:59:
                    38:24:41:f4:3f:2d:c3:f0:8b:ca:9c:49:c4:8d:f0:
                    95:91:7b:41:79:e8:d4:36:b9:c9:3b:f0:91:f7:25:
                    aa:05:11:7e:14:93:b3:e3:c7:55:92:15:f5:3e:93:
                    da:76:7f:1a:63:6c:91:03:02:fa:b7:13:00:2c:e6:
                    18:fe:fd:1b:ea:d3:8f:6f:3b:ca:6d:d5:02:37:29:
                    fe:01:f7:8d:b7:d0:56:72:29:72:91:68:82:1b:2e:
                    3b:7a:9e:37:c1:06:83:e5:7e:c6:0e:df:97:66:65:
                    56:88:0f:56:fe:db:b2:48:7d:f9:c8:d1:8a:8b:20:
                    aa:46:38:cb:2f:59:87:2f:71:d8:3a:08:c8:9e:c2:
                    db:df:c0:44:6a:0a:a2:b2:f9:1b:cf:4c:af:d1:f6:
                    3d:4f:0c:43:83:d3:cc:4b:cf:84:8c:30:97:59:f5:
                    a2:b1:55:95:5b:2c:af:61:85:52:35:17:3d:04:b3:
                    a5:3c:34:36:d8:e6:f4:23:24:28:30:2c:6c:d3:c5:
                    75:b8:31:2d:b0:3d:71:49:8a:a3:e3:d0:9e:78:c1:
                    d0:d7:8e:53:39:fa:72:bf:ca:e7:03:12:16:08:2d:
                    e7:38:08:ea:d2:2b:a4:0a:73:51:fa:57:1c:42:dd:
                    14:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:98:18:1A:8D:5F:C6:76:DA:F4:64:AA:F8:1B:02:85:8E:78:5F:8B
            X509v3 Authority Key Identifier:
                keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:43:c1:bc:4d:a8:44:47:ab:1a:d6:a1:be:f9:19:c5:57:
         55:b4:88:af:68:97:52:25:8b:25:4e:0c:d8:e6:3e:1f:97:6b:
         5f:85:03:8e:51:93:17:e8:c2:f4:83:bd:7d:a6:2b:92:32:32:
         bc:51:6c:71:bf:51:f7:1d:25:77:c6:c7:1d:70:fc:a7:0f:2c:
         16:17:fd:3a:33:85:c9:ab:cc:40:b6:96:ea:a6:06:d0:79:e5:
         f1:cb:3b:a5:06:c7:75:e9:25:d0:ec:5d:cb:02:cf:79:05:d0:
         12:43:53:d6:8a:81:8e:da:1f:b1:58:76:58:96:4e:75:44:21:
         b6:28:6c:fa:c7:91:c8:93:b0:b5:e2:b0:24:5c:c3:6a:12:23:
         28:e7:de:e5:fd:2e:2c:09:e4:2b:01:69:bf:5e:ba:d4:4d:a4:
         77:bb:fa:0d:d5:fe:36:ad:34:41:27:de:3c:d0:0b:82:2d:09:
         91:47:85:2d:65:07:ce:25:ab:fe:a4:98:e7:61:8a:f9:e1:41:
         39:75:b1:d6:ce:e0:97:b2:63:92:7c:24:98:78:c1:a9:72:7e:
         7f:9b:36:2a:8d:67:03:1d:33:d3:96:2f:6b:df:e2:04:46:e7:
         09:fb:1f:6a:96:48:ce:34:a8:3f:b2:b5:90:5c:8f:00:31:53:
         9d:10:20:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----