Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
File:                     POdWa7WxnnAPSOJeB1BsLyIt84Q.mft (raw, json)
Hash identifier:          INK82bIHnc0AQch0zmqUeOMuW0Bd0xpfWiaIm273Tdg=
Subject key identifier:   F9:1B:54:84:D4:B9:6E:6F:D6:F4:91:44:EB:67:C0:5F:5A:C8:9E:93
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Certificate issuer:       /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial:       01935878419CA561F3BAA5711A257CC8B469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
Manifest number:          0BCD
Signing time:             Sat 23 Nov 2024 10:01:36 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:36 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:36 +0000
Files and hashes:         1: 3CK8R5d7t2Xwz5j3f2UZ2JVqgMY.roa (hash: eZLyg8C6Jj6PXZSKfSOpZJRtapT1qH/uD+OHoYN4GLY=)
                          2: 3WLe2sxYegGUHmRHKtgfSE3BHjs.roa (hash: +Imn7aesVrsCLy8ijZsbPDahRH3iSdL5q/j5hLMEePE=)
                          3: POdWa7WxnnAPSOJeB1BsLyIt84Q.crl (hash: 9IwOG8PLSbAiyEaKQOjMksesSMlTksUdasll40xyGX4=)
                          4: ohITddIqQJ2UnMdoqcq6H9rFY1M.roa (hash: tkmucaYMD9po26tZKYbnEdZdE0fdnV2ludNYd/PBHHE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:41:9c:a5:61:f3:ba:a5:71:1a:25:7c:c8:b4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
        Validity
            Not Before: Nov 23 10:01:36 2024 GMT
            Not After : Nov 24 10:01:36 2024 GMT
        Subject: CN=f91b5484d4b96e6fd6f49144eb67c05f5ac89e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:d7:f3:9c:a4:fb:bc:04:28:f3:68:e7:45:
                    55:31:55:da:a3:37:9f:87:20:51:bf:7e:35:a1:c0:
                    79:d0:74:2f:00:0c:3c:d8:5f:29:a0:e0:b1:b3:1a:
                    b6:f7:0c:03:2f:cd:18:a3:17:34:05:df:d5:6d:d9:
                    f3:6f:fe:35:a6:00:9f:cf:aa:d1:fd:cb:37:60:51:
                    94:bd:a8:ed:41:85:c3:4a:07:37:9e:af:a2:e2:11:
                    68:e9:23:70:2d:89:1a:09:c9:da:4c:32:ab:6a:00:
                    d1:ab:2b:e9:1a:aa:f0:7a:78:fc:15:2f:dc:db:74:
                    68:b0:e0:99:74:44:0c:f0:a8:ec:e1:05:8c:d5:e6:
                    86:99:e7:11:85:6c:db:02:e8:52:6a:86:3a:57:3b:
                    5b:96:1a:3c:40:01:50:37:8c:57:ee:d1:63:87:fb:
                    ac:55:16:a0:4a:11:f6:74:02:fc:64:de:84:4c:ca:
                    10:b9:fb:2f:81:b6:2d:6c:ed:49:ba:ad:ba:f3:07:
                    ba:0c:7c:2c:a8:58:31:94:d5:be:a0:eb:f8:71:62:
                    e2:35:5a:63:72:13:0c:30:ee:23:90:3e:29:db:f9:
                    eb:a9:c0:50:bf:2a:28:7e:10:cc:bd:93:de:52:1d:
                    50:25:aa:eb:b8:8e:96:e3:76:93:e6:85:78:24:47:
                    ca:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1B:54:84:D4:B9:6E:6F:D6:F4:91:44:EB:67:C0:5F:5A:C8:9E:93
            X509v3 Authority Key Identifier:
                keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:48:9a:fb:0c:45:4d:ce:9d:06:f9:d3:60:d3:f8:92:f8:5e:
         95:88:21:da:5b:b6:1f:ad:c4:c2:99:00:c1:87:75:a9:34:e5:
         bd:4e:34:7e:e9:17:5a:47:00:be:b4:71:d2:c7:83:83:5f:26:
         91:74:47:eb:ea:b4:e1:d1:1e:22:52:be:c2:2c:d2:32:39:0f:
         dc:82:3e:5a:6b:8d:77:b2:a4:22:65:e2:98:9e:ab:1e:33:37:
         b2:c4:c0:b2:44:99:c8:12:43:7e:65:5d:02:79:3f:a2:16:c7:
         b5:fc:80:6b:5c:79:d2:11:79:42:d4:4f:ad:99:91:ba:04:25:
         2e:a7:07:1f:20:bc:fd:3b:07:3d:29:be:ae:84:18:68:96:ba:
         42:63:8b:3e:f8:f2:ed:e2:d8:51:9d:cc:49:ce:c3:78:54:de:
         7e:9b:32:fd:b8:47:43:40:87:e3:e5:9c:58:89:8c:8a:cb:eb:
         90:a9:fb:62:f8:09:20:01:0e:14:b4:9c:3d:04:bd:6c:5c:86:
         1e:d8:59:53:6b:9b:86:48:93:97:9d:c0:56:ed:61:5d:fc:35:
         77:7c:34:d6:90:77:6d:1d:d6:a3:6e:af:26:35:e2:ff:88:0b:
         0b:e1:28:12:61:e4:80:ab:a9:d0:41:e7:ce:9b:e4:e5:38:c4:
         0f:a2:8a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----