Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File:                     3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier:          6/s23vcJzE1IZJeUlXZL9UlQfnq9mzALDb8b1fYtZNw=
Subject key identifier:   44:27:9B:E2:DC:66:5E:37:A2:16:BE:BA:29:62:F1:44:AB:E8:DD:A7
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer:       /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial:       0193598A34921EAB4FF16225581D6D836A4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number:          0E84
Signing time:             Sat 23 Nov 2024 15:00:49 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:49 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:49 +0000
Files and hashes:         1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: RHDo6aMG/4STaVadbQ7yW00Z0wWYOPzPuBL+y7NAlFM=)
                          2: ZhyFAG-m6OoEpbGtzF_pFYvQeFA.roa (hash: FCUDtdF68MBHSIxqoq2oSJ6SNLzgVm8q7csyjVeOM5c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:8a:34:92:1e:ab:4f:f1:62:25:58:1d:6d:83:6a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
        Validity
            Not Before: Nov 23 15:00:49 2024 GMT
            Not After : Nov 24 15:00:49 2024 GMT
        Subject: CN=44279be2dc665e37a216beba2962f144abe8dda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:de:76:0c:2a:6f:09:f3:e1:ac:16:16:01:da:
                    e6:6d:be:80:18:7e:a5:b8:fc:f5:de:90:1e:6b:8e:
                    9b:87:c0:4b:9f:82:84:de:f0:23:a1:6c:d7:76:6c:
                    64:4e:0c:38:10:f8:d7:f2:14:9e:ac:78:4b:f7:21:
                    d9:66:f8:1d:47:8d:34:5b:d2:3c:c8:80:81:d0:9d:
                    85:46:6c:b2:ec:50:4c:5a:4d:f2:6b:f7:3b:23:d8:
                    95:fc:ec:e8:ec:d1:04:75:f1:62:61:1a:6e:58:c2:
                    b6:6c:b0:bf:73:7b:6a:5c:d8:db:4b:08:17:3b:64:
                    c1:69:15:fa:4f:27:73:b0:fb:cf:4b:c3:69:e9:78:
                    51:e8:91:a5:bd:26:01:83:06:08:9c:e2:7c:6c:e9:
                    a2:53:1f:2d:5f:ba:72:be:8f:d5:c8:d3:6f:4e:4b:
                    b4:c1:6e:46:93:cd:18:43:33:3b:bb:9c:4d:00:f9:
                    88:11:3a:d3:72:b5:f7:42:2d:81:a5:50:92:14:d1:
                    53:4c:34:85:07:77:f2:30:16:25:29:50:5a:79:d7:
                    5a:cd:ec:85:36:53:15:ba:f3:d7:82:c0:2c:65:fd:
                    93:b3:7f:d0:e5:2f:7d:19:ce:4c:c9:ae:c4:ae:04:
                    04:cc:89:ed:e9:9b:e0:2b:c1:1b:11:c8:ce:13:71:
                    50:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:27:9B:E2:DC:66:5E:37:A2:16:BE:BA:29:62:F1:44:AB:E8:DD:A7
            X509v3 Authority Key Identifier:
                keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:68:eb:50:c5:a5:11:4b:57:46:47:48:b6:e7:a5:4e:ec:ab:
         5b:aa:0e:6b:2b:7a:b4:4b:cc:16:c2:b3:f1:9f:81:5d:ce:bb:
         59:4d:dd:5f:a7:5b:d5:37:62:e1:95:d9:41:8c:01:7d:bc:47:
         b9:a3:92:89:9e:32:ec:6d:d6:dc:8b:47:9f:f5:3d:bb:a6:fd:
         fa:81:2e:86:bb:2c:f3:52:75:59:c8:dd:53:b5:d7:3c:ff:84:
         64:ce:35:e0:67:e6:f7:89:f6:b7:41:00:7a:a6:90:c7:52:b0:
         fd:ec:9c:53:c8:67:de:71:42:bb:42:9e:7f:bb:95:f5:53:00:
         d1:64:47:1d:bc:29:43:b6:c3:c8:20:fa:2d:15:ae:39:6c:4a:
         47:ca:bf:a2:c1:2f:c3:d6:b7:ee:61:21:bc:bb:b7:c8:80:bc:
         d1:a0:61:d6:2b:76:41:9b:04:60:e0:4f:c5:af:70:32:cd:6c:
         60:1b:36:65:de:09:60:34:87:46:ae:70:fe:44:6c:f9:e4:5b:
         86:74:13:7a:06:ad:1e:53:29:05:01:1f:88:17:39:f2:1a:1e:
         df:09:41:b3:2c:df:81:8f:df:08:87:5b:07:c8:5b:98:04:9f:
         b8:97:b7:78:4c:bf:7a:2a:9e:73:8e:b5:35:d3:53:b4:7d:7f:
         4d:48:6f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----