Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File:                     HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier:          lQx0YaXzmNm7z3NFpWA54/igpbMrGSqjrdwoxD6+sHM=
Subject key identifier:   4C:BB:1B:47:04:93:0E:45:BA:8D:7E:2F:BD:23:9B:92:0B:F0:50:0A
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer:       /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial:       019369DA3271F7DF4012A358FF3696698879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number:          0A9A
Signing time:             Tue 26 Nov 2024 19:02:07 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:07 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:07 +0000
Files and hashes:         1: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: hlnT/y7ybCWMeJ4om09Y96GTUX0ycuJwXyj4iRtBAnU=)
                          2: bOxBSbCy_hnNNrD7DVyr3Zs2CAo.roa (hash: Y43iqZCaUd6cVdsiWHVFaCyzO9TNlnUCH9iGl6IInhs=)
                          3: ylRs-1QtkEZ2C6ZW4VCXk_xDabQ.roa (hash: EAu7PIzYcnDO0ubimfljtvbzeg6vMF5GvYl4y5N5NPo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:32:71:f7:df:40:12:a3:58:ff:36:96:69:88:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
        Validity
            Not Before: Nov 26 19:02:07 2024 GMT
            Not After : Nov 27 19:02:07 2024 GMT
        Subject: CN=4cbb1b4704930e45ba8d7e2fbd239b920bf0500a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:aa:63:dd:b9:46:72:ab:71:52:37:8f:9d:7c:
                    40:ba:55:d2:1c:70:f1:39:4d:fd:b1:94:f9:c1:d0:
                    23:35:1e:c2:8a:1c:e9:df:d4:e9:19:55:10:98:5a:
                    9f:45:ad:13:7f:15:6e:29:83:f2:9c:49:23:15:3a:
                    53:69:9b:42:d2:99:a9:b8:63:76:8b:d4:dd:f4:09:
                    67:be:6a:90:20:d1:92:a3:fc:41:7d:ec:31:be:e5:
                    23:42:4e:1a:02:65:ff:d6:1b:5c:78:a7:48:5f:81:
                    3a:b0:c6:d4:25:0a:40:52:71:68:74:1b:47:03:63:
                    67:39:a4:cf:99:cf:c4:71:b9:db:1c:7a:f0:ee:1f:
                    67:55:4a:a3:00:99:9a:fe:9e:be:78:a5:b4:04:8c:
                    77:56:d0:92:d6:6d:79:b3:2e:24:37:ea:9e:13:0b:
                    dc:4b:5f:54:cd:6d:88:25:8c:76:3b:a4:0f:be:d4:
                    5b:54:8b:bc:29:ad:ff:3b:b5:21:e8:87:9a:d4:9d:
                    3c:bc:ce:82:9d:41:0c:c2:e9:2f:86:56:17:aa:e0:
                    c2:41:6b:6e:16:6b:c1:11:62:22:23:a5:69:71:08:
                    09:ca:15:7c:28:3a:d2:f1:d8:4c:67:7f:4d:8b:5f:
                    3f:fe:ce:4e:9e:b3:c0:73:20:bb:21:a1:83:ef:aa:
                    31:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BB:1B:47:04:93:0E:45:BA:8D:7E:2F:BD:23:9B:92:0B:F0:50:0A
            X509v3 Authority Key Identifier:
                keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d3:4d:4e:7d:a6:08:45:26:ae:6f:41:fa:b8:aa:fc:f5:64:
         6c:07:58:fb:33:0b:30:c1:76:a9:fc:fe:1a:6f:d5:e9:b5:26:
         cb:3d:41:1c:39:94:6f:2d:87:0d:bf:4c:b5:eb:84:91:46:89:
         0d:fd:a2:c5:60:f8:d1:bd:50:b3:bb:e6:3b:6c:dc:36:b0:9e:
         eb:5e:ca:a4:3d:f0:52:5d:ef:22:00:81:d8:41:2b:6b:ec:39:
         e2:12:7c:f9:da:c9:b9:b3:dc:66:45:57:17:2d:3f:4e:97:bb:
         75:8f:73:08:6d:87:bb:25:7a:21:86:76:81:d1:6e:1e:0c:33:
         d0:4c:81:fb:95:3d:d1:25:86:b3:b1:ae:9b:af:22:22:29:5e:
         9d:bf:3d:47:37:9f:72:f6:39:9d:e9:99:3e:68:0d:d0:ea:5f:
         01:ad:e4:3d:29:4d:02:70:67:82:42:a4:aa:fa:03:66:58:37:
         ca:d5:1d:f3:74:d1:37:d8:0b:cb:bc:fa:4b:b8:44:1b:f5:f6:
         47:fd:ab:6f:d4:1e:7a:60:81:21:b8:fe:58:44:45:2c:7a:78:
         09:8f:65:81:3b:3f:9a:5c:8c:bf:e5:1e:b6:85:b7:21:5b:e1:
         d2:5b:4d:b3:c1:a3:4a:4a:29:a2:b4:8f:79:d8:0a:ef:d8:1c:
         bc:43:b4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----