Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
File:                     OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft (raw, json)
Hash identifier:          YegqErEeM235nFPlUPlUOo7BdfpMOQ4UHIZKRnZZTBw=
Subject key identifier:   F2:73:45:AB:5F:B9:5C:08:C0:96:BC:6B:2D:E4:0B:F4:DE:33:29:81
Authority key identifier: 38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
Certificate issuer:       /CN=3841266f2c94ac422b96a68a7500bb82c1179191
Certificate serial:       019369D936F1723E6F99E7513C12CEB8D2E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
Manifest number:          12D0
Signing time:             Tue 26 Nov 2024 19:01:03 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:03 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:03 +0000
Files and hashes:         1: OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl (hash: ecVZBZIBL/Klcsykirllp9jNTpFiVgM7EPSn0m/Ewwg=)
                          2: PPOc_HNxpvdgl_py9_ksf9RrVMQ.roa (hash: MeGiJRL9Y9hmImUBGd0umSJNe24gb3OMRc4ksjj+RwI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:36:f1:72:3e:6f:99:e7:51:3c:12:ce:b8:d2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3841266f2c94ac422b96a68a7500bb82c1179191
        Validity
            Not Before: Nov 26 19:01:03 2024 GMT
            Not After : Nov 27 19:01:03 2024 GMT
        Subject: CN=f27345ab5fb95c08c096bc6b2de40bf4de332981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:15:99:8a:ae:f2:db:04:43:f5:90:b0:b1:b9:
                    bc:6f:f9:93:98:f7:40:69:4e:43:ba:6b:4a:92:0c:
                    15:69:9b:43:4c:97:19:b3:88:c1:91:42:df:c0:2e:
                    0a:7a:94:aa:7a:0a:41:d1:02:36:24:b9:a0:b6:19:
                    f2:65:b4:09:fa:90:53:70:10:95:5e:a4:3b:10:85:
                    e1:2a:4d:7b:0f:bd:9c:b5:ed:e8:8a:8d:5f:ea:57:
                    2c:04:e0:f1:36:ad:a6:ca:6f:23:6f:36:b5:83:c2:
                    f3:b9:2b:1f:3d:2e:ee:86:cf:d9:08:42:2b:df:6d:
                    94:99:c4:e0:aa:72:4d:c9:bc:0d:d5:b9:61:8c:1a:
                    97:ca:5f:f4:63:0f:c4:dd:46:b0:70:43:3f:8f:25:
                    c3:2e:ce:a8:ef:ee:8e:54:f2:60:65:2d:71:d1:9a:
                    0b:d1:d5:c8:3b:47:b5:e0:28:c0:33:7e:b5:02:1a:
                    a1:91:f1:18:30:f6:a2:f4:17:9f:3f:92:bd:91:0c:
                    2b:9c:7e:9b:b8:c9:25:69:11:11:04:db:07:ea:68:
                    80:33:3e:a5:7b:db:eb:06:65:75:48:e8:c9:78:b3:
                    db:09:88:a9:09:d7:0b:06:b4:ca:63:ba:ed:87:75:
                    e0:97:32:78:f5:4b:d6:60:6c:5d:3e:2c:12:e6:4c:
                    a7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:73:45:AB:5F:B9:5C:08:C0:96:BC:6B:2D:E4:0B:F4:DE:33:29:81
            X509v3 Authority Key Identifier:
                keyid:38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:de:92:20:ed:5d:1b:21:6f:f3:9c:4b:d2:3e:0b:83:3f:6e:
         95:d5:61:73:24:41:fc:ab:ae:3e:e9:c1:50:ed:1a:35:c4:58:
         05:06:dc:1a:da:7b:0f:b9:90:11:30:85:6e:d3:ce:04:58:3c:
         14:4d:c5:7d:03:88:3d:51:e2:d7:7d:3d:14:76:83:a6:b7:05:
         38:3f:a6:ca:f4:33:d1:6f:8b:58:c5:ed:4d:2a:22:99:c3:c5:
         e2:2a:f6:04:d3:59:83:ff:51:d9:7b:ad:8b:bb:ee:5f:2e:20:
         9e:d0:9b:c9:d8:c6:2f:17:3a:f0:71:41:79:d0:53:79:76:60:
         3a:05:3f:b2:2c:54:f1:fb:f0:08:ec:11:97:41:8f:61:b2:8e:
         ba:3c:c8:f4:00:83:0e:5b:77:71:79:84:c2:7c:66:97:16:37:
         2e:89:46:92:a9:b8:4b:12:83:a3:43:b9:e3:69:66:a6:f4:d3:
         d7:40:a6:b0:3a:b5:55:5e:f6:c1:8b:29:05:8d:c7:b9:53:a0:
         f2:d4:73:cc:98:8e:02:3d:c1:0e:24:2a:2b:07:f2:2f:22:6d:
         02:64:ac:53:a3:0d:54:2d:b8:61:80:52:88:fc:83:0a:63:ea:
         ee:83:5d:17:ec:6e:67:19:9b:01:40:a5:cc:da:c8:02:20:0f:
         b4:52:2e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----