Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft
File:                     e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft (raw, json)
Hash identifier:          4VJEH7+qXE1NP8k1A+Qlif4xQgSsboGd3fmHuegARNc=
Subject key identifier:   91:B3:1C:F0:28:74:97:D6:FF:85:93:B8:C8:EC:C8:87:F0:43:E3:BE
Authority key identifier: 7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87
Certificate issuer:       /CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
Certificate serial:       019356F6B28CA0E2BD977A3B808B22145E2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft
Manifest number:          0E0E
Signing time:             Sat 23 Nov 2024 03:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:28 +0000
Files and hashes:         1: SHMK1zjc2x_2KfkNxx7TDSZ_iwY.roa (hash: gfMmEHsmC6I+UfHzgGDhfFiipTZn3OsIQnum5FQ2sOM=)
                          2: UqslBgQ9-oc6et7Huolu_7BjjaU.roa (hash: 109e1uSRDENV2R5SmTOnvdNbYk82nLE/HTcxZ4zne6w=)
                          3: e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl (hash: aF5ojkFqkK2aWYmm/5IirvKT+QWQNm6bQ2VyuXH/TNY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:b2:8c:a0:e2:bd:97:7a:3b:80:8b:22:14:5e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
        Validity
            Not Before: Nov 23 03:00:28 2024 GMT
            Not After : Nov 24 03:00:28 2024 GMT
        Subject: CN=91b31cf0287497d6ff8593b8c8ecc887f043e3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f4:1a:76:21:f9:33:a5:29:7e:da:c8:ec:13:
                    a5:6d:25:ec:64:3a:71:d6:e5:f8:f7:4f:cb:44:97:
                    f0:99:20:c7:dd:35:c4:10:7e:b2:12:ce:33:5b:d5:
                    c7:db:31:0e:86:1c:3e:2f:cc:a1:50:3a:04:2a:9f:
                    19:3a:cf:3a:cd:11:da:4c:c0:95:2a:03:dd:65:98:
                    67:d2:82:d7:0f:57:14:46:f9:27:6c:e1:cb:87:7c:
                    98:2b:01:55:cf:99:ac:17:ba:cb:a1:ef:27:2e:b3:
                    3f:44:e6:14:b3:ec:e4:a7:17:ae:69:f0:98:48:3b:
                    97:45:b5:5c:6c:6c:fe:22:19:2f:95:7a:47:d1:1d:
                    9b:fa:90:c9:f4:15:61:d3:fe:75:da:31:85:2a:53:
                    63:f6:35:4b:36:82:2d:0b:9a:18:0e:f2:14:28:0f:
                    cd:cf:d3:a0:d8:9d:3a:27:fb:12:05:ae:5b:9d:ec:
                    55:a7:c9:2e:83:cd:1a:81:3b:29:cc:9d:14:6f:6f:
                    34:6e:17:89:af:cd:c5:ad:5c:7d:9d:08:b0:df:36:
                    15:ce:29:ae:09:ab:68:8e:45:8d:e1:85:fe:2f:1f:
                    3b:4f:49:be:b2:98:90:1e:ff:05:c6:de:10:ee:d8:
                    c7:f4:12:fb:68:59:4a:ae:46:27:e2:e6:49:e4:ba:
                    15:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B3:1C:F0:28:74:97:D6:FF:85:93:B8:C8:EC:C8:87:F0:43:E3:BE
            X509v3 Authority Key Identifier:
                keyid:7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:19:f5:07:22:dd:a3:6a:af:1b:f7:cd:44:87:a8:d9:eb:d9:
         3f:24:1f:78:7a:03:1d:e5:42:9e:e9:47:2d:19:06:1a:eb:d4:
         a5:8d:d8:c6:e3:55:a6:c3:fa:64:23:48:d1:5f:f6:e5:c3:6a:
         5d:9c:7c:2f:10:6f:7a:01:11:89:e4:74:2a:16:38:e0:a3:39:
         9d:4b:97:da:36:b3:06:40:a6:2c:8b:45:e7:95:f9:16:16:03:
         ae:24:75:c2:f0:3a:e1:e0:cf:4c:84:45:a3:7e:5c:08:a2:e8:
         62:7c:b0:5a:04:82:b7:a0:d8:22:d4:16:2a:c0:48:f6:53:4f:
         35:1e:c0:f3:9b:dc:71:ec:40:13:17:65:68:94:b4:46:f8:8f:
         ee:ab:e6:82:fc:55:fd:9f:58:12:09:c0:6f:c0:8c:43:17:d7:
         8f:3c:99:a6:a2:b6:f9:83:da:46:00:2c:ed:47:5e:15:80:17:
         d9:9d:07:ef:bf:cd:aa:9c:7d:ab:df:b0:2d:0b:07:fe:94:5d:
         ea:de:c0:13:d4:6d:50:54:78:0c:dc:f0:06:60:08:ee:8d:25:
         ef:fc:5b:2e:00:0d:eb:e4:12:f3:f9:df:56:b7:0e:49:3b:ba:
         66:52:20:ec:7c:b2:69:c1:7e:c6:9c:55:57:75:01:0a:d7:53:
         cb:83:cc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----