Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
File:                     g0jafL6MpBhlvaGgguAMtcJYh68.mft (raw, json)
Hash identifier:          Q1iPVzuCc1cauwSX79leAB/Xm2JtuN/kcSNrvaRYEAw=
Subject key identifier:   F5:C8:0A:56:50:F1:1B:17:27:3A:0C:A8:BB:4E:9F:D9:5E:E6:2C:86
Authority key identifier: 83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
Certificate issuer:       /CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Certificate serial:       019369D9F6167C61B65E314A75D46931590E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:01:52 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:52 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:52 +0000
Files and hashes:         1: g0jafL6MpBhlvaGgguAMtcJYh68.crl (hash: E7D7glvyDk1DDm2LTo70vBGtumxXSpe4LAhsBcSfo5U=)
                          2: zkvkoENsL5piwHXOvbWUAt1QPtE.roa (hash: GE1txPpgqutIOjnQFxEmFOpUTUP8dlfFQ1rNT9ElMAY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:f6:16:7c:61:b6:5e:31:4a:75:d4:69:31:59:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
        Validity
            Not Before: Nov 26 19:01:52 2024 GMT
            Not After : Nov 27 19:01:52 2024 GMT
        Subject: CN=f5c80a5650f11b17273a0ca8bb4e9fd95ee62c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:88:f9:14:42:87:b3:f4:40:1d:54:fb:b5:
                    9d:7e:08:59:dc:14:56:22:3c:83:68:19:9f:ca:48:
                    80:29:50:29:09:35:a4:4c:c9:38:bd:88:7a:68:0c:
                    e6:8b:65:7c:d7:1d:8d:c7:6e:e9:f8:20:57:80:4c:
                    57:07:b7:75:b7:41:f3:fa:7c:09:c3:8f:6a:0c:d4:
                    9f:52:14:82:64:83:14:65:5c:30:fb:3a:b6:58:e7:
                    55:cd:f1:aa:79:f9:56:bf:5f:df:94:fc:33:5d:14:
                    09:98:3b:48:7c:39:56:9c:62:d3:f5:cb:3b:e4:16:
                    8e:22:a7:84:6e:47:cf:09:40:33:b3:75:44:0e:60:
                    3a:dd:0f:bc:d3:17:12:75:8e:f2:1c:1a:fc:7f:f4:
                    34:a4:12:fc:07:c7:0b:2a:23:26:9e:a0:17:64:0c:
                    d0:83:17:55:9a:8c:63:31:09:7b:b9:58:22:c1:c4:
                    94:87:18:a1:f5:a4:ab:62:24:2f:73:42:30:17:d1:
                    ce:bf:a9:50:1a:b9:a9:f1:33:af:ad:0e:f1:b6:b6:
                    22:75:f2:cd:1c:f2:bd:cb:f4:b3:43:e4:de:71:12:
                    77:43:fd:05:a3:22:0a:95:d3:20:fa:7a:b3:53:3d:
                    af:80:c8:53:40:4a:b8:fd:e2:64:84:29:e6:38:cd:
                    55:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C8:0A:56:50:F1:1B:17:27:3A:0C:A8:BB:4E:9F:D9:5E:E6:2C:86
            X509v3 Authority Key Identifier:
                keyid:83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c9:e8:2e:5b:eb:b3:05:84:07:6e:f2:44:9d:dd:df:75:f4:
         f7:fa:52:11:41:57:04:86:dd:fb:84:ae:e6:b8:6d:86:41:4d:
         37:67:1a:c5:28:4a:8b:47:fb:a4:a6:72:b5:b6:84:49:66:fd:
         8e:0a:7d:67:f7:52:7e:b2:7d:06:bb:aa:dd:b1:4b:32:64:fe:
         33:13:f0:ab:94:3f:0b:d7:ea:ea:3f:8d:16:8c:bd:1f:30:86:
         db:93:91:42:c5:11:ad:a6:c7:82:8d:4d:8e:a8:40:77:88:af:
         3f:d6:bf:c8:12:0a:74:13:ad:27:62:7b:3a:03:81:2b:cf:d9:
         11:88:c7:e4:72:bf:68:b8:11:3c:6d:61:53:53:2a:60:1c:56:
         c4:a8:45:95:94:1f:e5:f6:59:4e:f3:d5:c0:c7:14:1d:d8:8e:
         8b:ab:21:99:6a:17:a7:a7:e8:e0:ef:11:36:da:58:3d:f0:e1:
         ea:49:c7:f9:ed:6d:03:ca:b5:55:bf:7e:50:cf:ce:90:e7:ab:
         36:33:14:12:d8:08:a2:99:b3:bf:a7:e0:3f:ba:13:58:21:66:
         66:57:21:61:7c:c4:40:1a:92:74:46:3b:ca:c0:ee:64:5b:3b:
         6a:c3:b2:59:43:f2:5b:0c:30:0f:de:18:67:a0:5b:5c:b5:d8:
         d6:19:89:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----