Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
File:                     AdULmAcVDaOWMiudTc_A0vsrZSA.mft (raw, json)
Hash identifier:          NwIBuRorVOB9+1N0DuOgiOfFZ6BiQmNKXQA3qNZ8GBc=
Subject key identifier:   18:53:73:69:B1:29:A1:41:D2:08:62:FB:A9:4C:D9:A0:B7:93:DC:3C
Authority key identifier: 01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
Certificate issuer:       /CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Certificate serial:       019355E45CDD754D81631B38F1ACD74395E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
Manifest number:          03C2
Signing time:             Fri 22 Nov 2024 22:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:49 +0000
Files and hashes:         1: AdULmAcVDaOWMiudTc_A0vsrZSA.crl (hash: FzdbVUSf85jMHW52InHoIwrDxvY0KmqM7shSaiBnNV8=)
                          2: Kj_wFJUCEkU7Bp1zbjVhy_PtQsA.roa (hash: 8CX+XCC0Zzi3FyzaMMtEJ7YWP+Pm9naPexHxcVzraJU=)
                          3: tpkA3qRi64Kq9kts3BktURuTRl0.roa (hash: iZQ27cYreiw4P2WxjAel7u8J5YN8kvy8aOBeGAZ5nhU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:5c:dd:75:4d:81:63:1b:38:f1:ac:d7:43:95:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
        Validity
            Not Before: Nov 22 22:00:49 2024 GMT
            Not After : Nov 23 22:00:49 2024 GMT
        Subject: CN=18537369b129a141d20862fba94cd9a0b793dc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:22:b2:04:a9:12:05:cb:e3:42:14:40:db:de:
                    fa:69:64:ed:45:7f:37:8f:10:de:cf:82:e6:e3:27:
                    f0:3b:1d:25:37:ef:29:7b:29:b7:5a:fc:1b:e3:98:
                    49:44:07:8e:aa:06:08:04:52:af:8a:28:a0:ee:4a:
                    cb:75:f8:dc:6b:4c:25:07:9d:00:29:50:11:bf:17:
                    61:43:e0:19:4f:5d:84:cf:73:ae:a8:45:57:ac:a1:
                    2e:c4:b1:57:f4:3f:74:84:08:28:43:af:e1:42:00:
                    f8:52:7c:6e:d4:4d:52:0c:b9:61:87:a2:a1:85:fc:
                    ca:9e:ae:30:d5:03:6d:a0:b9:35:d2:6b:e9:c1:ae:
                    44:5b:c1:fb:5d:91:bd:19:8c:96:b4:82:4c:c2:bf:
                    f4:58:49:c4:90:66:89:e7:6f:0b:ba:5b:23:87:59:
                    c1:2e:75:be:82:9c:fe:12:1f:b0:35:1f:03:45:bb:
                    78:20:53:15:7e:1e:0b:e6:78:dd:36:e5:1e:e5:78:
                    be:90:a8:d4:7f:59:61:90:d4:e4:fa:b6:12:dd:f6:
                    2a:c6:82:78:ae:52:ae:54:57:6e:3f:79:78:2a:09:
                    59:46:cd:f9:18:3f:be:b6:16:12:e1:5e:9b:bb:6a:
                    d4:db:59:1c:43:87:c0:ed:3c:5f:57:28:73:7b:5e:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:53:73:69:B1:29:A1:41:D2:08:62:FB:A9:4C:D9:A0:B7:93:DC:3C
            X509v3 Authority Key Identifier:
                keyid:01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1b:f1:39:a3:63:cb:9b:af:0b:c7:9b:98:65:3e:fe:17:d4:
         44:01:d0:61:d2:27:a7:81:4b:94:1b:56:e5:9c:72:bd:97:3d:
         2d:74:2b:ac:ac:0a:e3:b4:69:14:68:bf:a0:60:0f:51:20:f3:
         c4:c4:12:03:45:4e:d1:2f:3a:1d:a6:2e:18:1a:37:38:c9:a4:
         d5:4d:e9:d4:c5:af:12:49:b3:14:f8:0b:fb:6f:79:d7:11:d9:
         d3:30:be:3f:bc:d0:da:cd:da:8b:5f:2b:26:73:72:e6:d3:c6:
         32:78:76:b5:96:a3:fe:44:17:a0:be:bb:7d:ab:76:fb:bf:ae:
         f6:13:95:d8:13:e5:94:b4:6f:e4:c1:96:66:35:4b:d1:73:c8:
         f3:73:b0:fd:e3:99:b2:64:a9:09:19:a5:9f:bd:de:90:b8:26:
         f0:68:33:89:55:53:5a:19:59:68:77:bd:fc:1c:44:e4:89:77:
         2f:80:63:98:86:41:3a:0e:94:14:3a:c1:ea:83:95:96:8e:27:
         c0:d9:4f:69:8e:33:5c:5a:9d:37:a4:d0:90:0b:bc:ba:d1:6f:
         11:d5:8a:a3:a8:b6:73:50:6c:c2:af:27:9a:9e:2c:eb:70:97:
         8a:8a:18:f8:3b:11:ef:bc:f5:8c:26:18:4d:67:69:83:b2:93:
         18:64:2d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----