Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
File:                     vqbKA6jBNc7q4jLJN8HuC6uH54I.mft (raw, json)
Hash identifier:          DuESTWG6G57CV2sz1sCFK738lbuB4VUhr47AZFuDouY=
Subject key identifier:   2C:3B:C3:29:5E:3D:93:6A:15:8D:63:B7:A1:8B:BD:E3:66:53:51:1B
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Certificate issuer:       /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial:       0193617A4D943909AF964F590CF66D5092F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
Manifest number:          0B8F
Signing time:             Mon 25 Nov 2024 04:00:25 +0000
Manifest this update:     Mon 25 Nov 2024 04:00:25 +0000
Manifest next update:     Tue 26 Nov 2024 04:00:25 +0000
Files and hashes:         1: ItlKXyPwGNslZV0hhZQrPQkGIDo.roa (hash: QAM+Z8SJJ8j3z9V119Wg+WZbsc2qc/EyTR472e7AXMs=)
                          2: XH8MwnrRriAgwi0t1qOmRFgJcFM.roa (hash: uceifxPtHcuJ0q8bUqyN45WPCASQILcRmI8LqzeVrw0=)
                          3: vqbKA6jBNc7q4jLJN8HuC6uH54I.crl (hash: y/q7RONrwuZJWOCH+kV4nkJfPSVseRCfUhQM4jkeuoc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:61:7a:4d:94:39:09:af:96:4f:59:0c:f6:6d:50:92:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
        Validity
            Not Before: Nov 25 04:00:25 2024 GMT
            Not After : Nov 26 04:00:25 2024 GMT
        Subject: CN=2c3bc3295e3d936a158d63b7a18bbde36653511b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f0:c7:fa:c5:7c:7e:03:1a:69:59:7d:89:b3:
                    04:b8:88:49:5c:1e:ce:77:ad:f6:ca:d8:b8:5d:85:
                    7b:ec:d7:78:ba:2c:89:b0:47:1b:eb:8c:c8:f2:57:
                    eb:eb:15:31:a6:11:31:97:74:b8:37:09:38:cf:10:
                    05:0e:0a:e6:53:d1:1f:6d:28:d0:da:a8:a6:d2:4d:
                    4b:f2:ba:fc:00:08:03:80:6a:a8:d4:74:e9:3a:52:
                    e3:26:8d:c4:b3:ce:16:db:2c:72:95:b5:41:71:38:
                    ab:c7:de:c1:2f:a1:86:58:94:be:f9:ed:df:fb:fd:
                    2b:19:b3:82:e2:3b:db:ba:e1:ca:df:7a:8e:fd:e8:
                    30:df:10:7b:0d:55:b1:97:46:30:e3:26:b2:a2:c4:
                    ae:6f:2b:8a:a4:60:2a:b3:aa:33:01:90:c4:28:e3:
                    7a:7e:21:53:02:27:58:69:20:71:95:17:c8:ec:73:
                    51:99:24:a9:fe:f1:ae:2f:c2:3f:24:3c:10:15:f2:
                    06:2b:ba:32:3a:b7:ce:e5:cd:07:89:1c:06:bc:60:
                    9e:ef:c8:77:ea:e4:bb:ef:52:c0:7d:ef:a9:db:63:
                    11:3d:82:eb:68:46:bb:08:fb:ba:2b:4e:76:05:e3:
                    6d:49:24:7d:f2:b4:3a:d5:6c:be:66:36:c1:a5:22:
                    9c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3B:C3:29:5E:3D:93:6A:15:8D:63:B7:A1:8B:BD:E3:66:53:51:1B
            X509v3 Authority Key Identifier:
                keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:6a:b8:54:9c:1a:54:22:08:76:d9:5b:45:fd:bb:41:ae:57:
         92:7a:24:b2:49:4b:8c:ac:7f:f1:62:f9:7a:2e:e9:29:8f:f1:
         7b:1f:2b:12:a4:a6:e6:0c:22:c0:05:df:72:c0:f7:15:ff:70:
         6e:eb:1b:e0:f4:7a:a1:ab:74:84:bc:ee:ef:2f:0a:2c:cc:74:
         c7:d7:f1:8c:84:18:d0:22:b1:90:86:11:92:8b:19:22:90:5a:
         a7:83:9c:28:11:5b:61:b8:41:37:09:97:3b:3d:c8:ce:41:59:
         71:6c:a0:4e:b2:84:d9:0c:f9:6b:d0:6c:a9:64:8d:90:57:42:
         ac:cd:21:da:d9:2b:32:6b:ef:2f:31:4c:cc:c0:ec:e4:9e:30:
         5e:36:05:70:d4:61:1b:61:9a:6a:d5:85:80:17:c0:c0:08:61:
         98:39:77:6c:87:74:d1:1d:45:8e:de:3f:5c:ba:f3:5f:4e:d4:
         e5:9c:d1:28:b2:7b:c6:5e:2e:1a:33:2b:86:6c:31:8b:5b:bd:
         c8:62:d5:d1:05:14:5a:0d:51:83:03:b6:5a:fa:13:82:8f:19:
         6f:d6:9a:06:d0:1c:95:96:97:82:df:3d:02:8b:f9:01:e5:5a:
         86:1b:f0:3b:61:30:4b:e6:5d:4a:7e:64:6d:6b:a2:42:fd:60:
         a5:c8:a3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----