Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
File:                     ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft (raw, json)
Hash identifier:          d58ZRvZYEU3hyJ2mYCOjpVqRCpJoHPpsl1qG5SPU0XA=
Subject key identifier:   05:02:5F:17:EC:7D:E1:A4:6C:0A:73:37:24:90:7B:A9:C2:DD:AB:12
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Certificate issuer:       /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial:       01936AEB8736229C978ADC7340B1F8296758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
Manifest number:          137D
Signing time:             Wed 27 Nov 2024 00:00:40 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:40 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:40 +0000
Files and hashes:         1: 1-YAYvIwHPm012P3OE_sYBiZGgRE.roa (hash: E2Pin0SosuOE3LPVpTvl5rUoXTQN8yzQiAXQaPoYS+I=)
                          2: 74qpdrLl1Tn7d_6k2_TSSc14PsA.roa (hash: HoTwh/apHEW2r81or/64YJ7llkuFf9OTRAiCq0CsLWE=)
                          3: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl (hash: 7raLpBvDruF9GbySrX5OAif/w0PKoiLXrNZSaRzz470=)
                          4: el8A8O8JZzcKQZD5JSUMRZChcMY.roa (hash: iLzM17a2whw1x9W2WBpa6REfF5XuUGECVKvZWuaM7lA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:87:36:22:9c:97:8a:dc:73:40:b1:f8:29:67:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
        Validity
            Not Before: Nov 27 00:00:40 2024 GMT
            Not After : Nov 28 00:00:40 2024 GMT
        Subject: CN=05025f17ec7de1a46c0a733724907ba9c2ddab12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:61:b4:70:20:b5:44:82:85:e5:70:8f:1b:
                    b3:04:a9:d0:b8:e0:9c:37:88:a2:38:8f:28:d3:0b:
                    4d:54:bd:d8:a9:46:03:e3:2c:a7:92:78:d7:af:bb:
                    f4:82:b8:2c:44:5a:0d:5f:0d:e9:a3:c9:c8:70:ba:
                    55:fa:f5:3e:21:19:fd:e9:01:34:ec:35:e0:32:86:
                    ed:fe:fc:56:0f:0c:0f:ee:0c:1a:87:e4:10:d5:23:
                    28:3b:07:be:87:77:10:9a:ed:94:51:a4:ae:5c:b1:
                    3b:ab:f8:8f:88:1a:35:ed:50:cc:4f:be:ab:d8:a8:
                    17:5c:2a:1c:d6:2e:9b:87:d4:c8:a7:5f:48:71:77:
                    e4:02:54:19:1f:57:a6:6d:57:36:46:cb:82:00:ed:
                    45:df:66:2f:78:c0:8f:5c:dd:38:4a:bb:08:4a:17:
                    e4:61:41:49:d6:cd:64:af:2c:ca:8f:08:69:bc:77:
                    02:cd:bf:14:8e:a7:54:52:a0:dc:dc:30:fc:32:ef:
                    21:7b:0d:f4:6c:6f:81:4d:4c:a9:16:70:75:8e:78:
                    19:f7:ad:92:f7:31:40:08:d1:da:06:70:88:ff:8b:
                    3c:90:b5:65:3f:58:2f:69:43:32:c7:fd:c3:df:d5:
                    d4:1e:60:0c:16:1d:a3:9e:ef:cf:c7:2a:01:1c:1c:
                    58:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:02:5F:17:EC:7D:E1:A4:6C:0A:73:37:24:90:7B:A9:C2:DD:AB:12
            X509v3 Authority Key Identifier:
                keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:24:1c:be:75:2b:6c:37:a7:a9:08:1e:8a:6a:bf:8f:ae:15:
         ca:b5:e0:c3:13:f6:18:db:70:4b:e2:66:b6:f3:68:5f:d0:8a:
         c6:2b:8c:ca:73:51:3a:a5:bb:6b:7b:bc:b7:3d:66:79:86:d9:
         2c:e5:fe:70:23:3a:ea:2e:91:dc:20:38:05:4e:d9:cd:18:ab:
         55:ab:5c:a3:f4:fc:22:98:de:03:25:11:99:66:0c:ef:d4:4e:
         77:df:0d:fa:d0:39:92:36:05:3b:d9:a5:2f:97:95:8e:56:93:
         a6:a2:9d:fe:6a:36:74:42:82:02:c8:82:71:1b:3a:94:a2:38:
         e0:6b:dd:93:28:18:12:59:e0:d0:58:1a:66:a5:7d:ef:5c:46:
         19:92:4e:90:46:8c:af:29:52:35:c9:a5:a6:60:f2:fe:d9:f3:
         0f:c5:c9:5a:eb:b4:5b:71:df:35:6d:a0:cf:7c:40:e5:b3:5e:
         71:e1:dd:d1:ac:d3:37:46:cd:9c:eb:56:42:d7:e8:5f:fe:46:
         d3:fa:ae:c2:69:d0:13:f9:21:a8:6f:e4:7a:47:bb:b8:e0:4f:
         d8:c9:a3:88:9c:05:31:8a:ba:4a:b8:8a:91:17:fb:8c:6f:c8:
         3b:01:d6:87:88:90:99:0c:2f:38:94:54:a9:84:14:8d:8c:31:
         56:4e:5f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----