Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
File:                     E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft (raw, json)
Hash identifier:          ajOVVssmPMQP1sgW5hr9B1AOtrR5J9A8js7WUyeqDFU=
Subject key identifier:   4A:E7:2E:76:5D:6C:FB:92:C8:EC:AF:41:31:55:27:DC:4A:88:98:75
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Certificate issuer:       /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial:       01935651C753A12DB9ECD536323F28DBBC82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
Manifest number:          05FA
Signing time:             Sat 23 Nov 2024 00:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:19 +0000
Files and hashes:         1: E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl (hash: IoIbVlLTo5HPoKEQ5WOpKkDN5lLQl2vCjgF6Y2pqF2c=)
                          2: wH8dKoeGJgGmweQofWa1pKLttjs.roa (hash: q734lCUvqcbixBUU0tIHN9nSC2QLyXLQ0pIDYY0+ZTw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:c7:53:a1:2d:b9:ec:d5:36:32:3f:28:db:bc:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
        Validity
            Not Before: Nov 23 00:00:19 2024 GMT
            Not After : Nov 24 00:00:19 2024 GMT
        Subject: CN=4ae72e765d6cfb92c8ecaf41315527dc4a889875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:59:87:b8:70:74:68:e3:0a:bb:b4:b2:38:
                    c1:78:cb:71:80:cf:b1:3f:46:fe:a6:c1:2b:15:7f:
                    63:03:7d:4e:51:79:04:34:3f:b8:b6:82:0a:a5:14:
                    47:9c:aa:36:e1:7c:ba:79:15:db:1e:63:79:52:e7:
                    4f:eb:8d:a7:d0:09:07:ee:34:a7:33:4b:d6:5f:1b:
                    4d:5e:87:b0:0d:90:52:aa:be:71:74:8b:78:19:d0:
                    0b:4c:30:11:7b:6d:e6:8c:51:4c:c8:51:de:1b:84:
                    1b:22:cd:1a:45:f5:45:0c:85:b3:5c:b8:c8:00:1e:
                    d0:28:e6:e2:c9:bf:5d:fb:b8:8a:aa:79:35:c0:17:
                    7d:41:7f:fd:23:c4:6e:b6:3a:7d:fe:93:1b:b9:e0:
                    f6:d2:9a:f1:49:ac:02:a1:04:43:86:9f:36:41:4d:
                    a2:33:b2:35:a5:27:c9:e5:4c:95:54:96:bd:72:34:
                    09:01:b8:ab:66:83:bc:1d:89:e4:12:7d:7b:ae:03:
                    80:08:22:cb:9c:aa:34:35:c0:f0:67:3c:2e:ca:fd:
                    6f:3a:37:52:34:ae:f5:f6:11:87:b9:91:80:b5:fa:
                    6a:52:8e:00:00:86:08:b7:15:23:d7:bf:7e:72:7a:
                    da:4a:f0:44:8f:f7:68:78:c9:28:e1:73:59:88:89:
                    3f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E7:2E:76:5D:6C:FB:92:C8:EC:AF:41:31:55:27:DC:4A:88:98:75
            X509v3 Authority Key Identifier:
                keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:79:93:4c:64:7a:58:33:6c:92:eb:e6:9d:b2:4d:23:7c:ad:
         f2:2d:4e:a5:07:53:44:21:98:15:92:a5:74:54:0a:09:41:4d:
         46:6e:ec:8e:c7:c5:6d:0a:90:f5:ca:6e:8d:c6:64:f8:8a:27:
         04:e3:7c:56:60:28:73:c4:fa:53:ed:17:7e:0b:dc:3f:ee:c8:
         cb:45:a1:18:12:19:15:eb:1b:a9:6a:61:1c:4c:ab:8c:4c:c9:
         92:c9:20:bb:38:77:e2:e8:46:84:ca:36:15:67:6f:28:bc:62:
         ef:5a:c7:e9:7c:e7:48:73:b1:fa:94:1a:2d:c5:02:7f:58:74:
         42:ca:31:42:69:55:47:a7:fc:e8:4c:40:34:8a:49:81:cc:eb:
         42:ab:df:7c:91:f7:69:51:01:77:cd:ba:ae:4d:6c:87:fd:ec:
         b5:c1:a6:a8:aa:e5:05:de:f8:03:aa:78:53:8a:dd:40:e3:28:
         87:1e:68:e5:05:62:ac:61:d8:d1:61:72:f7:5e:f9:c7:43:59:
         4b:11:2c:72:05:81:51:21:22:bc:3b:48:d1:a6:b6:0d:49:f6:
         74:2b:17:2a:cd:99:1c:5a:a7:13:09:0e:b9:cc:45:70:d9:8e:
         55:66:a5:9e:be:13:48:01:ba:78:93:b0:09:1e:95:19:63:04:
         a8:c0:1e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----