Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
File:                     EKjG6TCLsACDEAFx4A27YUD09YA.mft (raw, json)
Hash identifier:          RzVTVlMtKwajzMjrRd4JXvVLMXLNz45Yhli7uBT9QAE=
Subject key identifier:   48:5B:0B:BA:CA:F3:26:44:B8:30:C4:D9:CD:A1:77:AB:84:14:58:5E
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Certificate issuer:       /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial:       019358799DBF07154A30040E6EA6D9013A4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
Manifest number:          1376
Signing time:             Sat 23 Nov 2024 10:03:05 +0000
Manifest this update:     Sat 23 Nov 2024 10:03:05 +0000
Manifest next update:     Sun 24 Nov 2024 10:03:05 +0000
Files and hashes:         1: EKjG6TCLsACDEAFx4A27YUD09YA.crl (hash: Ms7WVzZaH1HI4VMM2VIY1qBrw7gIs1Z9yO52a1JCw70=)
                          2: HN7IjDJegzM4ibdIH3jhl42vbA4.roa (hash: ngdA6p5LO6RvY2yZiad+3U3ydYiWcDMTvz0nGACINr4=)
                          3: HTPfoLai5yprcQFdUPMzU2WVJXE.roa (hash: kpl5nkLScj1q1oKorvqWRQbrdAUVlLzG0zUAvGRsGpE=)
                          4: l4iHVnlKMzV7mNLRg0yhWpFlvEQ.roa (hash: CB/cJojCHwa8gcbLbI36BjFE5tIpjNh1+5uKBESizOA=)
                          5: n7tReWNZ9epaX3dp35dWooTVWdc.roa (hash: uNbg62yPbAItzx+QlXPSdeiy13+eKFUT8/CRJFZSVlw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:9d:bf:07:15:4a:30:04:0e:6e:a6:d9:01:3a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
        Validity
            Not Before: Nov 23 10:03:05 2024 GMT
            Not After : Nov 24 10:03:05 2024 GMT
        Subject: CN=485b0bbacaf32644b830c4d9cda177ab8414585e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:f5:cf:ed:e4:db:26:0e:9f:d5:97:39:cb:
                    74:52:7b:6b:1d:51:ff:3b:38:d6:07:2d:23:b6:21:
                    c6:4a:79:39:14:ae:82:64:12:fd:df:bc:8c:38:07:
                    ba:9b:17:69:92:0e:5a:06:0b:d6:26:a3:3f:97:75:
                    2a:0e:03:79:9f:6f:d3:fe:25:65:1f:be:81:0f:c0:
                    3a:de:72:06:d8:56:8b:bf:ba:b1:7b:f5:ab:1a:b0:
                    cf:45:c2:09:1e:8a:aa:f4:ae:ff:f8:21:4e:37:25:
                    d6:96:10:0a:57:f8:ab:ba:1d:ca:07:90:6c:3d:83:
                    89:4a:18:67:16:89:64:6e:84:e8:3d:15:30:ef:6d:
                    49:73:3b:c0:de:a3:77:a1:02:74:3e:21:69:a1:56:
                    4c:48:48:22:7d:30:8b:03:97:c5:c6:46:0b:88:c2:
                    cb:3e:e3:3c:41:09:13:76:18:a8:e2:68:7e:ca:fc:
                    de:42:9c:44:36:03:ae:7b:3c:48:34:0c:65:03:3c:
                    6e:c3:71:cf:9c:c9:87:c0:2f:48:a4:b2:5c:a6:aa:
                    59:7d:77:7a:8b:f0:cb:88:ae:03:e7:85:1f:a7:9e:
                    15:4e:d3:11:2a:d7:4d:9f:97:83:a6:f2:af:49:30:
                    8a:76:a8:3a:a6:54:c1:e0:ea:4d:0c:b5:46:b6:cc:
                    38:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5B:0B:BA:CA:F3:26:44:B8:30:C4:D9:CD:A1:77:AB:84:14:58:5E
            X509v3 Authority Key Identifier:
                keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:13:c2:b6:ca:cf:d1:db:6d:58:50:5c:28:e8:4e:ce:8a:e6:
         dd:2b:39:72:17:97:44:ec:7c:eb:8b:e7:be:66:9b:09:7a:9c:
         35:b8:dd:20:4c:cf:ff:dd:ee:6a:7d:fe:0a:0e:4d:80:f0:22:
         1a:0f:3a:d9:11:6a:46:74:04:fd:11:67:d8:70:e2:b2:5b:a0:
         7c:01:23:d6:30:48:0b:02:2c:db:7a:84:15:9e:6b:2d:df:69:
         99:f3:22:d0:4c:7e:c5:ab:9e:7e:9c:9e:66:15:78:1e:ae:60:
         63:ca:5c:8d:6f:4a:f1:2e:f6:7e:57:b1:dd:c9:a7:f7:ba:84:
         f5:e3:9b:7e:c7:e4:99:18:a8:17:64:ad:21:61:1e:8e:36:93:
         91:1d:df:af:da:ef:bf:46:eb:bf:67:f5:c5:a6:cd:b0:31:81:
         7b:3f:2b:02:25:db:12:57:e5:22:83:4b:4c:f5:74:0c:97:fc:
         46:56:c0:1d:34:04:a9:b9:b6:7f:90:b6:b4:34:ee:73:f6:ec:
         9a:20:f6:43:6c:93:7c:51:21:b3:1d:a2:9d:60:f9:26:00:77:
         6d:4d:52:a3:53:bb:43:85:ed:0f:ae:bd:9a:c4:83:5d:16:b3:
         f2:57:cf:73:e2:52:75:0e:9c:27:a3:71:80:ff:df:4e:44:72:
         42:b1:b3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----