Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
File:                     bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft (raw, json)
Hash identifier:          i+rv/PIJvEVFLrz6iBn3rcDjedZAUWOmfvkozdCoDNY=
Subject key identifier:   42:0F:60:25:2F:63:88:4C:25:3E:21:7D:3A:37:1C:16:44:EE:0E:CE
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Certificate issuer:       /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial:       019362FAF37E3AE8F63C609D06D0C2C81E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
Manifest number:          13AA
Signing time:             Mon 25 Nov 2024 11:00:33 +0000
Manifest this update:     Mon 25 Nov 2024 11:00:33 +0000
Manifest next update:     Tue 26 Nov 2024 11:00:33 +0000
Files and hashes:         1: Ajhd8W9OIZ5bqIMgeWbmuQ3cco8.roa (hash: cJfRInb0Pyx4L/4yRpWdo3CDj2fDkXbybOHZvx/plEw=)
                          2: Mk1XugJgVyitbuZlK_8tGnsTy7I.roa (hash: M+Y9DB3gh1thqrUp20ISWwMydzivKab4XmqvSHiN/w8=)
                          3: _9B5OWRzC930yTVX3VrZeqgdDd4.roa (hash: yxnEtrKVnNIGcJopKdA6EyjFIygXLbuYt2+IFUSC4V4=)
                          4: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl (hash: jPCJSGid62iNE1JtRCQR/8F9EozSDabPM+LmCXXIcGA=)
                          5: bhgEe--d4xzO2EmDWFs7Tm2hKHg.roa (hash: +haU7Yf9Us31lU+OhM6yZyxOJxkr74mwBfT2jiqAMjg=)
                          6: mfseBlqU1g138npgvmxfq5-KAmo.roa (hash: ub1SxCZh8JIO+8wonLLb221dNd6CZzuvDVEpWo/KYPA=)
                          7: s6s_d4g_skp7fUFg555mRTncyvY.roa (hash: XzBiMtb8M8F4pL/yOmj/nurbva8xb3lGKdQQqrnKo6c=)
                          8: wgcQpLqP2CRIXvvYDcuGSZzIS98.roa (hash: 0aiFrn6CzhSQQgEeY1beZjbqST72X4y1zN20MZRj7NE=)
                          9: ymkvMj4O8Ok5IvQFcap1Q8O0qwo.roa (hash: CQ9zilfn+kN1BsY8BYU6oP3rx6+vLnHDxJ8wBDI8ky0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:fa:f3:7e:3a:e8:f6:3c:60:9d:06:d0:c2:c8:1e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
        Validity
            Not Before: Nov 25 11:00:33 2024 GMT
            Not After : Nov 26 11:00:33 2024 GMT
        Subject: CN=420f60252f63884c253e217d3a371c1644ee0ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:b3:62:e5:5a:33:75:96:50:51:b6:b7:a7:
                    0e:5c:e5:b9:8b:90:0d:24:92:cc:9c:79:f2:d0:75:
                    60:9b:2e:0f:54:07:41:81:a7:c2:a3:e9:50:75:3c:
                    ac:0d:05:18:02:ac:ff:06:49:78:7e:90:3d:4c:41:
                    00:80:60:9f:31:47:06:c9:ab:e0:41:9b:6e:d4:b6:
                    d4:4c:20:4f:49:2f:68:5f:c4:03:d0:78:54:c4:a1:
                    57:fc:7f:ce:5c:b6:ae:b9:3a:a3:74:1d:d7:d5:fd:
                    f1:66:89:98:96:ad:3a:f2:5b:89:59:b0:1c:19:4f:
                    dd:25:54:c5:5a:01:af:d3:3e:fd:54:27:fc:81:b5:
                    cc:da:1a:a5:ef:7d:02:be:91:bd:2d:80:03:54:b5:
                    bb:83:6f:6d:0f:ec:8a:50:58:bc:45:02:d7:f5:b4:
                    2f:a5:bb:e7:3e:88:88:c1:42:91:23:b5:48:8c:e4:
                    1f:f2:04:fb:3d:88:bc:fe:0b:39:4f:ab:68:be:fc:
                    5f:07:a8:94:fc:db:d2:72:49:12:fa:b0:1e:4d:0b:
                    15:33:28:a1:7e:58:00:92:00:9d:4b:b0:09:f9:41:
                    b6:af:24:5d:0e:5a:1c:a3:22:54:2f:5f:81:ea:63:
                    3a:c7:fa:6e:41:ea:13:f9:66:83:46:b7:00:e7:8d:
                    55:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0F:60:25:2F:63:88:4C:25:3E:21:7D:3A:37:1C:16:44:EE:0E:CE
            X509v3 Authority Key Identifier:
                keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:03:d6:3c:f2:6c:3e:bb:68:06:2e:f7:02:d9:f6:ae:eb:25:
         70:8f:c5:0d:57:0a:05:1e:35:04:d6:6e:99:cf:f0:b1:1d:90:
         40:af:8c:32:3f:92:f9:18:74:cb:4d:70:b3:a7:73:d4:32:05:
         61:a0:db:70:05:f2:d9:f6:01:03:67:26:50:84:e6:3b:26:b1:
         67:b4:55:5b:4b:2b:6f:be:09:30:87:ce:dd:f3:42:62:b1:c4:
         47:d9:40:0b:67:ae:1f:c3:a4:98:2e:2a:4c:cb:81:1b:39:46:
         94:7e:6a:ab:51:ae:a8:c5:c7:ad:08:d2:ec:4a:0c:36:dc:19:
         2b:3e:fc:e5:37:fb:03:c2:5c:d6:c3:5a:9a:81:d0:09:da:41:
         7e:22:38:c6:9f:51:4b:f9:02:bc:12:d0:22:86:fb:9c:40:3b:
         85:66:54:4f:cb:93:f4:69:85:9d:e9:8b:02:61:03:0a:42:1c:
         9b:21:8a:53:9d:c7:6d:e3:74:42:ac:3e:61:8e:2b:9f:60:f4:
         6e:5b:7f:ca:ae:8f:5a:f7:35:b4:46:97:4c:1b:0c:65:2a:6d:
         08:e7:c9:e0:44:6a:f1:fe:72:27:22:fb:70:78:41:0f:fc:71:
         b1:40:77:03:43:d9:18:ea:87:cd:b6:2a:43:c8:ab:17:c3:62:
         7e:08:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----