Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
File:                     2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft (raw, json)
Hash identifier:          0V9R+D4rP0OENtaO951RUeOHzKtla221C+J5uwB23bE=
Subject key identifier:   F5:62:07:B0:9C:58:E7:83:63:08:B4:A2:9E:09:59:1C:49:4E:5D:6D
Authority key identifier: D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
Certificate issuer:       /CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Certificate serial:       019356BF9306A6D60C5F8056A8B93E1FB275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
Manifest number:          0A92
Signing time:             Sat 23 Nov 2024 02:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:15 +0000
Files and hashes:         1: 1MzrKYqKiMkdi82YbKIrSvpwt0M.roa (hash: 7C/x61ptmnldCIl9qkgb/Xcf3WXq6XIkpbCs6LXZpS8=)
                          2: 2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl (hash: wPm+kn4J/5CCOFmNL4gtMAXgJbL4aotM2+NjjuawEBQ=)
                          3: 6KYERBRl5ekA-7sjOqzF05qJa5A.roa (hash: nDQLNcVbt7VFw1Xequ9PZpxUx2QrU9GV2wW34LaLUM0=)
                          4: Dy6XhSxZqckgA0viJWcHEMwk3CU.roa (hash: PuvDB8xpvlN4yV07agPsntCXqt75SkI8d+65HAK3nqg=)
                          5: aFw08flLxetDI7put7ijDiQwuzw.roa (hash: pB6AxYZ8Msaleq4Kryl0IACx+7bt1YZa5fUgxDV60IE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:93:06:a6:d6:0c:5f:80:56:a8:b9:3e:1f:b2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
        Validity
            Not Before: Nov 23 02:00:15 2024 GMT
            Not After : Nov 24 02:00:15 2024 GMT
        Subject: CN=f56207b09c58e7836308b4a29e09591c494e5d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:76:78:3e:b8:72:4d:05:87:f8:ba:d0:66:
                    36:36:e5:99:a4:30:64:1f:74:d8:fb:9c:c3:bc:15:
                    50:ba:e6:43:9e:b3:7c:d3:a5:52:37:98:2e:6f:a2:
                    69:cc:f5:e3:2b:79:c9:8f:34:29:df:04:f0:6e:05:
                    a2:d1:69:50:17:78:93:3f:d3:48:48:fe:65:d2:ca:
                    76:c4:6f:eb:b8:c7:11:ea:da:e2:96:f0:8a:75:be:
                    c0:b6:b5:f0:d8:23:eb:d7:16:a5:e4:d7:16:ee:d6:
                    f0:5c:75:d3:5b:ff:4e:88:7c:3d:0e:de:6c:97:78:
                    64:cf:55:69:16:42:48:d6:84:ad:ff:16:38:af:d6:
                    38:65:d8:5d:b6:00:42:1f:a3:b4:d0:3f:8e:93:a0:
                    a6:1e:b5:c2:b3:5a:3d:d0:86:a7:c0:62:2d:1b:46:
                    61:2d:c0:91:6f:32:0c:aa:68:1e:e9:64:cd:fc:ab:
                    ff:fb:dc:c9:40:1e:d5:83:f5:83:07:93:84:16:e4:
                    1c:df:cb:02:ff:32:25:2f:f8:44:86:0c:ca:09:d9:
                    86:67:76:7f:63:e3:0c:4c:80:dc:67:ba:18:f7:a4:
                    3c:79:7a:30:be:07:f0:69:96:94:ec:e0:6b:5d:7b:
                    0e:e7:b8:c5:ec:ac:7a:b4:3d:60:d7:10:58:0d:0a:
                    53:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:62:07:B0:9C:58:E7:83:63:08:B4:A2:9E:09:59:1C:49:4E:5D:6D
            X509v3 Authority Key Identifier:
                keyid:D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:56:db:a2:e7:7b:55:13:65:6f:05:93:21:b9:73:f2:52:e7:
         7b:f7:5d:9a:58:66:05:99:6d:53:1e:ad:31:eb:1e:0f:8f:5a:
         ad:17:c5:e3:57:5d:db:c9:65:24:f9:d3:73:0d:1f:f3:51:3b:
         69:c8:4f:2f:af:40:96:89:2f:0f:f6:87:90:e4:0a:c8:6d:2e:
         80:d6:a1:fe:bf:a5:41:9d:e8:9e:e1:66:62:86:2f:43:0d:b9:
         3c:5b:8f:79:4b:e8:35:01:a4:a6:d5:2d:4c:e3:20:4a:b7:6c:
         50:33:86:60:4a:f0:8d:fb:6a:75:29:07:a7:8b:bb:a7:e5:11:
         2d:dd:d5:17:8c:11:e3:b9:91:7a:60:8c:3d:c5:24:46:b0:23:
         81:30:9e:e8:de:aa:15:1e:aa:31:a8:55:14:af:1b:fb:6e:df:
         91:75:2d:5b:25:b6:d3:e8:1b:f5:66:b5:05:e1:17:ab:6f:06:
         95:8c:5a:5a:c0:1c:09:b6:4b:2e:8c:9e:dd:65:97:f3:39:d5:
         c3:f8:23:26:d1:c1:91:5c:5c:b4:fd:c8:68:be:e6:dc:2c:05:
         cf:c5:79:bf:36:a4:d1:1f:84:49:54:1a:4b:d6:13:cd:ba:e2:
         0b:fb:6e:a7:97:41:22:b4:d3:bd:26:38:a6:a1:e3:46:44:8e:
         92:3e:29:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----