Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
File:                     88q2j7sMl5R2WUvfxWwZIEK43t8.mft (raw, json)
Hash identifier:          LxzAk6OEQ3HQYIKZe//R82e3TxdRPQi1194HiN+c2i4=
Subject key identifier:   D9:9D:74:4C:65:35:7C:E5:F1:61:92:E2:5D:50:7C:43:6C:C0:05:55
Authority key identifier: F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
Certificate issuer:       /CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
Certificate serial:       0193584041BDDD61234B314D274154884FD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
Manifest number:          0EB5
Signing time:             Sat 23 Nov 2024 09:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:26 +0000
Files and hashes:         1: 0yLYA2Rd7lj541lpVJwhWcZUUXY.roa (hash: bc8pwWuEkQEfxSzWDonXFq/Ie82K4oEmG28MWXnUA1w=)
                          2: 88q2j7sMl5R2WUvfxWwZIEK43t8.crl (hash: nAmLFZiGjzzLGkYxxz3cjirztEJlmA5MdLFf6IBy4UY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:41:bd:dd:61:23:4b:31:4d:27:41:54:88:4f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
        Validity
            Not Before: Nov 23 09:00:26 2024 GMT
            Not After : Nov 24 09:00:26 2024 GMT
        Subject: CN=d99d744c65357ce5f16192e25d507c436cc00555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d3:ac:61:b6:3b:0b:d2:5c:95:63:e6:5a:2b:
                    9a:71:4d:74:ec:36:45:ce:8f:49:d9:6d:90:7e:df:
                    09:2d:23:ee:40:bf:22:28:79:42:17:f0:04:33:f7:
                    9c:c5:32:95:7f:63:3b:91:3e:00:70:2e:bf:28:93:
                    fa:8b:b0:06:2a:5b:41:d2:75:92:2b:42:09:60:2b:
                    04:b0:30:9c:a9:6c:77:2e:cc:c4:c0:f8:13:5b:53:
                    91:2e:2f:4a:80:31:e8:7f:66:81:0f:fe:8a:be:a3:
                    d8:cc:52:c8:fa:3d:f0:87:65:34:56:18:91:08:38:
                    72:79:0d:4b:f5:7d:27:3c:b7:95:c3:f6:78:d6:06:
                    75:35:dd:fb:f8:1c:35:f2:7e:01:7a:6c:b9:92:60:
                    11:dc:a8:be:6c:42:3f:ee:53:0d:22:0c:06:d2:17:
                    4e:2e:d9:ec:7f:9d:9f:b5:52:9e:3f:97:23:b6:30:
                    2f:a5:22:65:f9:ab:8b:73:9b:79:53:fd:67:9b:d9:
                    a5:e1:cb:a4:09:e1:99:7d:1d:73:99:e7:f7:ef:b5:
                    ae:7d:68:52:4a:1c:38:86:df:2e:b3:24:ae:09:3f:
                    cd:04:42:ce:e7:f2:e1:13:7e:4a:47:fc:98:8e:2f:
                    39:bf:13:ee:5b:62:4d:5a:66:5f:e8:1f:cb:cc:68:
                    d2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9D:74:4C:65:35:7C:E5:F1:61:92:E2:5D:50:7C:43:6C:C0:05:55
            X509v3 Authority Key Identifier:
                keyid:F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:73:1d:cc:93:69:42:75:1d:93:7e:7f:10:96:ca:c9:7d:d5:
         cb:ea:3c:46:3c:d7:d4:a4:9c:11:31:5e:29:01:61:e9:a2:0f:
         92:a6:83:ff:a2:9f:e7:32:64:0b:88:aa:5e:04:57:da:39:9c:
         78:16:8e:c0:02:dd:33:79:23:53:67:ce:64:09:56:e3:20:2f:
         91:06:4c:93:c5:0f:04:61:cf:24:da:fb:a5:c0:23:c9:47:05:
         35:d6:eb:e1:61:de:62:72:c8:c8:9e:dd:68:92:92:73:3e:b6:
         d3:e7:66:55:a2:ff:d0:a0:81:67:84:33:c7:73:33:eb:4d:b4:
         97:8f:17:9d:df:2b:a0:10:37:33:c2:cf:ab:57:6c:81:8c:3a:
         7e:64:15:36:b2:44:ce:82:25:eb:67:86:6f:7d:43:90:ba:47:
         41:fa:63:6f:b3:37:b2:bb:d3:23:51:69:c4:51:f7:27:08:13:
         e3:8c:6b:b1:a8:68:c1:65:35:2b:59:9a:e7:f4:ae:0e:ef:c2:
         50:5c:62:13:f0:60:83:26:b7:d6:80:43:54:21:87:b9:d0:87:
         4c:8f:4c:eb:ee:77:a8:c4:4c:3f:3c:58:72:0e:cc:a7:e5:95:
         8d:71:bb:b5:cc:a9:02:56:53:73:25:35:38:87:58:70:28:75:
         99:71:0c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----