Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File:                     V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier:          m8PYz7qYq0fg+RU0zVJ7tJ+Y1fhlz2LVFEjYIgRMWpM=
Subject key identifier:   20:EF:EC:CE:F8:68:72:75:48:86:67:64:06:69:E7:BB:D3:AE:79:C2
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer:       /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial:       019357647D740955D3192F56CD1B15D9DD8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number:          1375
Signing time:             Sat 23 Nov 2024 05:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:23 +0000
Files and hashes:         1: 8szsEPLQMR10YxrYoAC19toW0i0.roa (hash: x23LaeEppGzkFqbwRMKuAhGfv6RdMl9OPyrcBbCXueI=)
                          2: Gaw46kzJ7FcUTI7Na1l0YWu9dTg.roa (hash: adknisPbz0xY+AVIq2hKRIdBaIpbDL/8laDqsPQfbu4=)
                          3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: eqTNUIaVf4+IOvnD1ghYwQEbEVc/JFtIzsKYu9B2iDA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:7d:74:09:55:d3:19:2f:56:cd:1b:15:d9:dd:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
        Validity
            Not Before: Nov 23 05:00:23 2024 GMT
            Not After : Nov 24 05:00:23 2024 GMT
        Subject: CN=20efeccef8687275488667640669e7bbd3ae79c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e4:d8:bb:d0:3f:9f:fa:cb:de:a3:35:b5:8c:
                    fb:cd:dd:5c:f2:8f:da:f7:37:33:f5:de:53:c5:42:
                    b3:a3:97:db:61:e2:ec:97:91:77:39:ba:16:6c:fd:
                    33:34:a0:80:11:a1:be:86:cb:be:00:00:0a:da:0c:
                    0a:50:d8:f5:71:36:01:18:5d:ee:00:48:a4:41:50:
                    e6:a5:3f:e2:0f:0f:59:2f:ac:b2:7d:32:13:2a:26:
                    13:33:3b:74:fe:22:98:9c:e1:a8:df:20:ac:57:c5:
                    de:4c:9f:f6:38:08:00:dd:fa:d0:06:ab:af:df:0d:
                    34:47:99:49:d4:95:cf:92:1b:3d:09:72:55:4e:86:
                    4d:33:03:78:35:e3:40:39:f3:ff:ff:6e:5d:9c:c8:
                    e6:21:7b:72:4e:27:91:61:88:28:f6:b2:ea:87:e9:
                    17:26:a3:92:a4:29:62:d8:ba:35:ab:40:7d:2e:c9:
                    68:b5:a6:6b:8c:36:b2:bd:2e:f3:ac:68:6d:c0:d4:
                    43:ee:3c:0f:0e:f2:2e:11:bb:25:fb:d5:f5:97:f3:
                    bc:18:bd:3a:21:e6:44:c3:b3:aa:bb:1b:f5:79:28:
                    f9:fe:50:d0:6a:c9:45:4e:45:b8:19:83:eb:ff:5e:
                    18:83:6d:0a:f7:f0:56:16:bf:4e:a5:c8:98:45:98:
                    a7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EF:EC:CE:F8:68:72:75:48:86:67:64:06:69:E7:BB:D3:AE:79:C2
            X509v3 Authority Key Identifier:
                keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:61:fc:58:70:8e:97:fb:ee:a1:43:e9:ef:d2:26:1f:68:c4:
         b6:8f:7e:6e:40:d5:75:a0:d4:86:da:8e:c4:e1:ff:55:08:7e:
         54:0b:43:03:24:b4:5d:cb:76:84:c0:dc:a6:c6:b6:60:48:2a:
         9b:4b:d1:4e:9b:e1:a3:a8:cd:7d:53:28:b4:fa:a1:ba:d4:e2:
         bb:f8:51:3a:cb:ca:d3:85:e5:88:55:bd:a2:9c:84:99:e6:04:
         53:1e:51:7f:f8:4c:da:0f:d8:6f:d7:36:1b:5e:5a:24:41:37:
         8e:75:8b:03:1a:a5:3f:12:98:46:35:9b:2b:f3:bd:58:0a:2c:
         4d:89:c8:f7:ce:37:2d:0f:92:95:9e:6d:c4:4b:8a:52:b1:c4:
         9b:e6:3d:2b:52:d5:b7:c4:82:d2:e5:eb:57:2a:00:52:7a:1c:
         fe:34:ae:fe:01:73:63:e3:15:8c:08:a3:a9:73:89:32:0d:67:
         d1:ce:1b:ab:20:05:9c:58:f6:2c:f7:27:4e:ea:14:a2:a5:43:
         70:78:97:b7:af:32:3e:30:68:f9:65:16:df:47:1a:e2:eb:dd:
         92:ca:98:e1:51:9d:e3:1d:6b:be:7a:d2:de:5d:7e:a1:53:87:
         7b:10:e3:b6:87:8e:c3:f7:c0:ff:dc:d1:59:83:c8:c8:b5:3e:
         2a:63:6e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----