Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File:                     xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier:          8dq+p4mBp1YUHoMiZMID9KacrioWwnjFf+PsDSYQcuw=
Subject key identifier:   EB:39:2E:F6:20:74:6C:BE:A1:AD:14:27:0B:71:48:86:70:AA:C4:3B
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer:       /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial:       019369A1C053AADB68E11758CFF8C62CF99D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number:          041C
Signing time:             Tue 26 Nov 2024 18:00:28 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:28 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:28 +0000
Files and hashes:         1: 8zqrQGHSV91mnD5L_Lg4SyId5Ng.roa (hash: O0SGBP084XsVx2JBr9Y6M93jupr+Dsr/Jtt4uTRIWEk=)
                          2: B-1nD_EAKr06ASh0fUcSAsrdIoI.roa (hash: fS6ZxHev8Fbn8UnfuPBDrSMfQrNbElzE6TvXGLWNL0U=)
                          3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: BA24CL6KTb7xUepSc5F2BzUiwd0YYffaoGqM+/tP07M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:c0:53:aa:db:68:e1:17:58:cf:f8:c6:2c:f9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
        Validity
            Not Before: Nov 26 18:00:28 2024 GMT
            Not After : Nov 27 18:00:28 2024 GMT
        Subject: CN=eb392ef620746cbea1ad14270b71488670aac43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:03:9c:42:9e:a9:b6:ea:fb:7a:55:2f:e3:
                    a5:a3:d4:12:2b:b4:9a:2f:7a:7f:12:c2:63:63:c7:
                    d1:39:13:16:94:ae:f7:f0:10:33:8f:8c:f7:1e:32:
                    6c:f3:d2:37:60:79:68:81:f5:60:fd:d0:a2:c2:c2:
                    e2:76:d5:26:21:26:59:65:93:9a:d3:4e:00:ae:f5:
                    f1:b3:89:89:3e:34:8a:8e:89:42:e1:07:db:68:12:
                    09:8f:03:62:f7:c2:3f:12:b6:61:93:5b:a9:59:d0:
                    16:7a:ec:a8:5a:7a:67:bb:8a:36:06:91:fc:6c:8e:
                    2e:76:ec:65:af:73:c3:b4:a7:41:b5:b0:78:9d:dc:
                    ae:46:bd:e1:8f:5c:bd:9d:ea:24:63:73:f7:40:e3:
                    f0:29:f3:d9:c8:5b:b5:1a:d6:6a:db:21:f8:46:2b:
                    00:98:6f:57:d9:9a:a0:a5:bf:3e:91:cc:90:79:64:
                    94:0b:78:2c:4b:c5:20:4c:76:5c:8c:78:91:62:12:
                    3b:7c:13:64:38:b4:08:2e:94:fa:4e:4f:16:88:64:
                    2d:51:de:32:40:5f:af:87:e5:e3:9e:32:ed:ad:1a:
                    b3:1f:fc:5b:f9:65:b2:cc:90:ec:c7:a4:bb:13:de:
                    0e:e6:4a:ce:b6:b0:f7:d3:d5:e3:bb:b7:46:fe:c9:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:39:2E:F6:20:74:6C:BE:A1:AD:14:27:0B:71:48:86:70:AA:C4:3B
            X509v3 Authority Key Identifier:
                keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4f:30:b4:2c:62:23:34:09:e9:d7:c9:c3:5c:cb:35:f0:0d:
         f8:43:67:34:70:d5:fd:87:f2:4b:8e:c8:40:12:84:f7:21:ae:
         b1:79:5a:c7:6f:d9:17:f3:de:d8:d1:b4:42:b3:34:9c:8a:7f:
         eb:68:dc:38:48:85:aa:0a:c6:a5:3a:3c:fa:bc:9b:f6:03:fb:
         11:a6:a2:79:e0:c2:13:6e:7f:13:bf:b9:ad:1c:47:ec:3b:e7:
         88:b9:f3:c6:c5:5b:25:f6:56:cf:4c:fe:3b:2f:7d:27:e9:20:
         b9:20:e8:92:c5:c3:69:9c:37:28:20:fa:37:cf:1f:de:26:6b:
         e2:60:e6:f4:cd:4d:49:e4:64:cb:54:19:52:65:e2:07:99:26:
         27:4e:70:2a:03:72:47:ef:d4:b7:68:5a:e3:d9:2a:73:49:8a:
         b4:e9:b4:c3:f6:70:3b:f2:48:bb:86:14:e1:97:7f:e3:0a:80:
         4b:76:16:68:b9:fc:93:03:4f:8b:4b:e9:0b:c2:71:6e:91:92:
         fc:cb:c9:12:dd:d0:05:c5:e1:60:50:9f:c2:90:38:b6:ff:44:
         30:31:a3:d0:14:f5:ab:9f:cf:77:40:c1:f0:ab:33:8e:31:c9:
         33:f6:22:30:b6:45:5a:ca:48:20:6a:f7:9d:4f:c3:ac:05:c4:
         e7:7d:72:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----