Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File:                     XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier:          oe1CA6YO7O8PeMnr2sqNJFlKNSSvh3KZ1mQC4KVtPic=
Subject key identifier:   B2:A3:A2:AD:1A:30:F3:AE:CF:D6:F4:0C:1D:6C:0F:B1:D0:3C:9D:56
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer:       /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial:       019356F67DA73DDCB51943376B3295252CED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number:          0B31
Signing time:             Sat 23 Nov 2024 03:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:14 +0000
Files and hashes:         1: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: uq89cm20muc34ewhWuEofkbEfkgmOdJpfmWvoeaKaeg=)
                          2: aEfLlOU4jA3M1RcpYgLJnEnb3Ko.roa (hash: 2kLRqpbIPp7XSccmtC51nzVSU8Rqdrv2ESWJaRtTIi4=)
                          3: zvdMGRrRmMrKZ-1VqDV9yOODkNA.roa (hash: chor6iMTKKB/FRp4kbPmhUImFe4+Qzolkb4AMIMZkGk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:7d:a7:3d:dc:b5:19:43:37:6b:32:95:25:2c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
        Validity
            Not Before: Nov 23 03:00:14 2024 GMT
            Not After : Nov 24 03:00:14 2024 GMT
        Subject: CN=b2a3a2ad1a30f3aecfd6f40c1d6c0fb1d03c9d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2f:d0:92:4d:af:72:81:41:94:01:58:5d:80:
                    2f:24:08:67:c4:b2:b3:4a:d6:ad:59:12:24:dc:ba:
                    21:59:cf:ad:18:4b:92:83:6b:39:af:2b:92:ba:9e:
                    da:b5:8e:3e:02:ae:34:5e:91:e8:63:d4:be:78:da:
                    7d:12:7e:f0:06:20:67:a3:3a:8e:4c:f3:21:91:3f:
                    18:86:c3:42:ad:e3:0a:ab:49:00:d2:8d:67:48:3c:
                    b9:30:31:86:95:06:7f:d7:09:3e:25:40:fd:70:a9:
                    19:22:19:25:c7:9a:50:09:86:4b:e1:df:8a:81:01:
                    14:5f:c8:1b:09:f0:86:b8:67:e8:87:8d:27:e9:80:
                    6d:94:97:2f:11:54:2b:a0:f3:da:c6:aa:4e:00:9d:
                    a0:0b:39:fc:1d:ea:ed:ad:b6:64:67:63:4a:b0:f6:
                    eb:72:db:a7:9c:79:11:fd:17:94:79:16:39:fe:37:
                    dc:9e:87:38:9e:3b:90:1d:ec:1a:19:9a:ba:2a:be:
                    26:23:dc:a0:f6:7c:1b:c8:76:3b:51:e0:7a:3a:37:
                    5d:2e:25:9b:61:22:05:2c:33:c4:42:09:b8:b4:86:
                    81:05:e3:0e:87:b6:90:25:2e:a7:42:3d:52:9d:cc:
                    11:c5:ff:3d:0d:0f:e7:08:12:e6:33:97:66:73:c9:
                    88:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A3:A2:AD:1A:30:F3:AE:CF:D6:F4:0C:1D:6C:0F:B1:D0:3C:9D:56
            X509v3 Authority Key Identifier:
                keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a6:f1:52:25:ac:ca:ae:1d:79:68:3e:b6:a0:54:21:f3:66:
         09:b4:f1:44:5a:06:6c:16:7f:c0:61:b6:76:79:01:c6:bf:2b:
         c9:d4:c7:da:54:f0:2b:71:5f:5c:f8:27:3c:6a:aa:a3:03:cf:
         0c:62:2f:32:84:79:f7:c3:84:1a:21:37:1e:3f:23:7d:e7:9c:
         9f:27:ef:2e:26:7c:70:09:91:4b:1b:9b:a6:84:1a:ee:39:27:
         87:e5:d8:11:e0:69:d2:b9:46:4c:d3:e0:4e:fa:52:f0:a4:56:
         2c:95:9c:cf:e6:c4:8a:e0:3b:fe:4a:40:5c:54:a0:fe:75:fc:
         04:c5:ff:44:99:88:e8:24:7c:3e:03:71:c9:aa:20:ac:06:4c:
         a3:00:b5:0c:4f:1e:8b:d5:f3:70:21:1d:3e:7b:ac:f8:55:3d:
         bc:54:de:e2:e0:4c:2d:34:34:f3:27:96:6d:0b:89:2b:7b:bf:
         42:4f:b2:3d:18:69:c1:7d:09:ae:80:32:66:fd:43:65:ea:ee:
         58:91:db:4c:53:9a:2d:5f:7f:9e:17:49:51:c1:da:8f:f6:b6:
         98:0e:07:cc:5e:82:f9:c3:c3:13:84:0a:53:d5:e9:82:88:d5:
         ea:f3:f1:67:8c:1f:4e:70:c7:78:91:11:7f:dd:7a:a6:10:cd:
         a1:e3:43:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----