Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File:                     _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier:          D/ansW0dzAYxme8MXoDmZpQYa/CPEVxoxyPBBna4yvI=
Subject key identifier:   DB:DA:2B:32:9C:B9:58:F3:50:95:C4:6A:2D:D8:FF:13:2F:00:F5:7A
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer:       /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial:       0193549C01CCA9723EFE5FBDEEC4184F6B1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number:          09B2
Signing time:             Fri 22 Nov 2024 16:02:10 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:10 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:10 +0000
Files and hashes:         1: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: rwiQ6kyxksM9rre5FzxJ93FSDhnC1i1DL16FW6m+wOo=)
                          2: ePq15_GWZuTYXrCH6f9gp-FHmCI.roa (hash: ksagnwLSJiHwzYFeXNFfbZpnPImGwiWLXsRWPSuzpzA=)
                          3: l04UMPCmgQK89rUNOYhEqbio3ys.roa (hash: XdNkjuIPn0lwXsxr3lz4uJuwZIe3TL0Sp9SDvcXNUBM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:01:cc:a9:72:3e:fe:5f:bd:ee:c4:18:4f:6b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
        Validity
            Not Before: Nov 22 16:02:10 2024 GMT
            Not After : Nov 23 16:02:10 2024 GMT
        Subject: CN=dbda2b329cb958f35095c46a2dd8ff132f00f57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:2a:6f:cf:19:1a:62:0a:ea:fc:6e:75:7c:
                    c0:03:65:84:20:fb:7b:36:6b:50:58:dd:58:c0:af:
                    c1:4b:02:1a:b1:a6:df:1f:81:3f:1d:21:5b:ab:2d:
                    6c:94:c1:f2:8e:b7:60:26:8f:e3:dc:96:24:be:ba:
                    77:e5:ee:9e:ae:09:d6:77:5f:4c:1b:27:27:03:bb:
                    da:5d:8f:fb:af:dc:41:a0:7c:db:69:91:8e:47:f6:
                    11:28:36:fc:17:eb:1b:4a:8a:fb:6d:de:6c:b9:27:
                    95:48:2e:d0:c2:9a:39:d6:c2:e5:71:ec:2a:bd:b9:
                    09:08:c6:d1:2c:5a:1d:a5:39:35:23:12:56:d8:d5:
                    d3:75:74:35:e3:5d:55:74:c6:54:41:3a:3a:1b:49:
                    c2:d7:fd:bb:ff:b4:61:98:d9:90:08:1a:b8:79:f2:
                    65:dd:a2:dc:76:e0:ea:56:ca:1b:5c:36:5e:b2:5b:
                    a7:be:76:8e:f2:5c:cf:ab:bc:2b:a0:40:25:33:c2:
                    49:d8:2b:c9:47:20:ff:6e:b1:c1:59:fe:af:fd:67:
                    8d:1b:49:10:43:b0:4a:48:a8:0e:a4:8a:97:38:1b:
                    6b:69:66:7f:e2:ec:2b:8e:0f:f7:2c:96:7d:b7:a2:
                    7c:a3:41:93:fc:2a:56:be:21:88:64:27:54:d7:ad:
                    f9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DA:2B:32:9C:B9:58:F3:50:95:C4:6A:2D:D8:FF:13:2F:00:F5:7A
            X509v3 Authority Key Identifier:
                keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:14:42:07:8c:b1:b4:7d:cc:5a:ce:3e:cf:0e:e7:07:a2:2c:
         bb:aa:aa:14:5a:5f:14:c1:7a:76:19:ed:b2:e0:fc:5f:27:a8:
         b2:61:29:6b:e0:f8:d8:0c:6e:04:84:55:d6:e2:7f:ab:a5:d3:
         e3:2f:38:26:0c:57:41:42:b8:ec:c5:53:d3:43:0e:a3:75:f9:
         bd:9b:c6:94:fb:cd:ec:a8:e5:fd:04:d9:85:e5:df:08:bb:a6:
         46:5e:df:7d:a6:c0:2f:76:ef:e8:44:04:e7:70:55:2f:cf:29:
         7a:ee:6f:87:e9:4e:c3:1d:8a:74:c0:29:d5:61:7e:e5:48:51:
         c3:8b:13:d5:34:37:32:0f:e0:49:53:85:81:c1:b9:f0:87:1e:
         88:6b:44:42:6a:72:11:46:83:49:6d:10:bc:83:b1:5c:c9:78:
         93:a1:f3:b6:7d:c3:7b:4b:b2:76:09:f3:5e:8c:81:14:b4:f5:
         6e:0a:68:f0:0f:b4:60:ca:f4:9f:63:86:54:fe:aa:ae:9e:4a:
         bc:bb:54:9e:32:75:96:54:6d:9c:5b:00:21:0a:c6:f0:85:47:
         19:77:f1:5d:21:50:74:b0:14:67:74:b3:ae:81:9e:a2:90:8e:
         6f:a1:f9:20:0a:10:b6:08:1b:99:14:a8:61:b5:81:3f:b8:41:
         d2:26:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----