Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
File:                     4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft (raw, json)
Hash identifier:          GADvZZDdnL4nzBVcHoqCdvUB4oZOCVHlpOH8fxEYH50=
Subject key identifier:   82:3D:69:78:D1:DE:27:DE:F3:E7:A7:F5:5D:D6:E1:29:81:F0:4A:8F
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Certificate issuer:       /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial:       0193568911F923A7027FFCD3C31C68B431B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
Manifest number:          123F
Signing time:             Sat 23 Nov 2024 01:00:43 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:43 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:43 +0000
Files and hashes:         1: 4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl (hash: j8ODSdrSIQ3GW+5WTW6x9ANeLy80IDc5Wu/1vNimKtc=)
                          2: POLhW9JrFFsVUDo0zbXWFI78WNQ.roa (hash: AXHnPXKIT12W9uFRCSnflK5bnrQkH2czpFMGpp9hK8g=)
                          3: R2W8Nq6246WMpjEyUKm_NsQAx6k.roa (hash: Vp/uLLgwcLbp7RDu9MXrJ+hFhcQuNqcxTWIXP0ukL5k=)
                          4: Y6lH-sAOY9XRQ9gnqxIFd_Fm-wI.roa (hash: x4oVwdvIa2HUpXlBLQA6wSeCoAhrNf6krmwMsC4SMp8=)
                          5: qIjLU34vdixbV-3eXTk0OQ3Gabc.roa (hash: yav/Kb4UtPv3OLFg0VlZLoU51UXi3bUcOsfd6Jg9rCg=)
                          6: sLsv7PcXJFZp2s9rj7ItI0Db32Y.roa (hash: 5zzGJDTlHbFicMcMnulH5kEDreMgoA19lWizhPVsN/8=)
                          7: vU41uo_hwgVmdbBFBQIZvGXER88.roa (hash: fANXktw44O4Jgqe6yPyS/YwgHF0cBh0EFMOr2tQWq8I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:11:f9:23:a7:02:7f:fc:d3:c3:1c:68:b4:31:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
        Validity
            Not Before: Nov 23 01:00:43 2024 GMT
            Not After : Nov 24 01:00:43 2024 GMT
        Subject: CN=823d6978d1de27def3e7a7f55dd6e12981f04a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:77:c5:e7:30:57:5f:93:61:04:52:14:a8:
                    5d:ba:c7:58:83:9e:76:74:c0:e2:c5:32:87:a1:78:
                    04:7e:2f:d0:e5:62:fd:85:67:84:2c:b2:6a:95:4d:
                    59:c9:19:cb:b2:df:af:09:79:92:a9:ed:3c:35:d7:
                    c3:7b:60:d1:76:2c:81:5f:8d:05:5d:c6:bc:49:b1:
                    68:f7:08:a0:9d:c9:73:a7:c9:43:64:f3:7c:b8:b5:
                    41:55:16:a1:f0:6a:97:f1:c2:07:e8:3e:fc:39:cd:
                    6a:ef:be:de:86:ad:c9:f7:08:9c:21:8e:fa:5e:87:
                    42:fd:01:14:59:0b:49:a3:3d:27:4d:86:f4:30:60:
                    2b:9d:ac:14:f9:d1:b0:95:b8:15:a6:c2:bf:c9:a4:
                    3e:f0:4d:cd:a6:d3:79:3a:58:9e:64:d6:4f:48:34:
                    5b:39:4e:3e:54:d2:ce:c6:86:d3:94:b9:5d:15:5f:
                    9e:cf:48:0f:92:2b:48:83:c8:b5:f7:d3:86:38:99:
                    4f:77:b7:54:c3:98:6f:c9:98:0f:51:02:88:bf:a2:
                    f8:9f:62:3a:0e:2a:bc:59:e2:bb:90:68:32:cb:65:
                    73:dd:f0:2e:66:89:01:fe:0d:4f:76:db:6b:9d:af:
                    76:45:ef:9b:3d:e6:a4:cb:3e:91:fb:5e:1b:0b:9f:
                    75:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3D:69:78:D1:DE:27:DE:F3:E7:A7:F5:5D:D6:E1:29:81:F0:4A:8F
            X509v3 Authority Key Identifier:
                keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:d4:11:a7:d6:c4:30:63:0c:a5:06:f0:93:e9:03:a8:18:f0:
         59:83:44:d0:3e:94:92:da:8c:8d:73:70:6c:ed:75:e6:b3:95:
         f1:40:f5:66:77:75:5e:d1:11:ff:39:81:52:96:3a:fb:23:3a:
         a0:b6:20:7d:92:48:7b:24:cb:ee:d1:f1:b4:a9:61:03:50:48:
         67:6b:d0:ad:c3:9f:10:78:75:db:00:d2:f9:2e:e7:4c:bb:4d:
         dc:df:c4:db:88:1c:dc:a3:27:ce:7c:0f:6b:ae:d9:1c:64:c8:
         5d:78:55:fc:91:c4:29:4f:fa:0d:8f:46:d0:2e:b2:8e:f7:7e:
         fa:2c:93:55:d3:ba:52:86:8e:03:28:b1:e1:e8:ba:0d:c1:27:
         41:c6:a2:3f:c5:54:19:cd:ac:01:47:7a:54:de:14:7f:49:fa:
         d3:98:28:fe:b8:63:6c:f6:9e:93:54:27:02:df:90:8a:c4:17:
         21:7e:90:32:f5:6f:0f:21:c5:99:61:ad:12:0e:5c:26:5e:3b:
         db:1f:ae:57:b4:8c:67:86:fe:3e:55:b1:08:e1:3b:f3:22:a9:
         93:ba:27:0a:8d:f2:f4:db:e7:06:30:1e:47:9b:3c:2e:9a:a9:
         87:5d:ee:98:17:ab:9e:1d:0a:e4:e8:e9:ca:3b:c0:d2:e4:6c:
         84:6a:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----