Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File:                     l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier:          BPSsY9EcT3EFoNIUO4jTWvBPDs1Dw8tyXI6Jvo3inx8=
Subject key identifier:   BD:A1:67:86:07:19:35:E5:76:74:E7:56:CF:24:2F:6F:75:0A:19:58
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer:       /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial:       01935508899A2520069BAC19F3F6B82C305B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 18:00:43 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:43 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:43 +0000
Files and hashes:         1: Keir4GQt_xK2AMSqC5Gty8KlRPQ.roa (hash: 9ofOIAEcRqd+tVSQFgghpabhzWnyPNjBi8UjGqzQCxE=)
                          2: XxvfJmTkWtmlpvaOkZae8cXP4cA.roa (hash: tEbtSxoBGzvascIxCqmb8Ve+uQX7g8UXpGVLNYyliGo=)
                          3: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: CbstHfY39wunK5raSJoqc88Yu3bnstmxPmvGJeRzFOM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:89:9a:25:20:06:9b:ac:19:f3:f6:b8:2c:30:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
        Validity
            Not Before: Nov 22 18:00:43 2024 GMT
            Not After : Nov 23 18:00:43 2024 GMT
        Subject: CN=bda16786071935e57674e756cf242f6f750a1958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7a:2a:63:e1:80:c1:bb:07:84:33:79:03:f6:
                    64:65:bf:e1:82:20:5d:bb:18:f2:25:2b:e2:35:bc:
                    fe:2d:bd:9c:ff:93:91:ac:72:ca:3d:6d:1b:9e:cf:
                    6e:30:a2:4b:3a:fa:26:cc:40:64:30:5c:6d:62:b7:
                    61:de:13:fe:6c:16:af:9e:3f:5e:be:49:ee:da:2b:
                    9b:af:c7:2d:01:b9:dd:4f:0f:d2:3f:07:a3:73:b8:
                    2b:b8:ad:6d:20:c7:d9:25:34:24:7d:ba:26:d5:61:
                    e1:6f:46:a9:8e:71:84:d8:fd:23:e1:6d:95:2b:ea:
                    aa:8d:06:11:b4:d2:72:bf:1e:fa:17:bd:ad:6f:c3:
                    9a:fc:c6:32:ed:66:15:aa:7a:00:bf:50:d7:9d:36:
                    18:52:ff:8f:2e:bc:25:62:37:9e:9d:81:6f:db:10:
                    5f:cf:5f:c4:cf:6e:d4:0a:5b:13:ab:c5:7d:56:c7:
                    82:51:5f:26:1e:f3:7e:cc:b1:8f:6e:55:f6:2c:85:
                    64:a9:c7:3d:d7:d2:9c:57:5e:28:85:ea:f8:2a:c3:
                    c8:f8:e8:41:05:22:42:6e:79:4f:37:90:ef:c4:f7:
                    9e:5c:1f:ac:fd:b6:b8:fb:a9:a5:ad:a0:a7:fb:bb:
                    1c:d0:2a:87:97:c6:c7:9c:40:c7:ae:7f:3d:49:55:
                    0e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A1:67:86:07:19:35:E5:76:74:E7:56:CF:24:2F:6F:75:0A:19:58
            X509v3 Authority Key Identifier:
                keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7c:0b:41:75:3b:70:b8:ed:f1:75:88:c5:32:1b:b4:58:d8:
         31:85:f3:6a:0c:4c:a5:82:fa:d2:a9:c4:3d:97:f0:2b:7b:e0:
         b3:05:8f:05:59:2f:aa:f7:a9:99:6f:48:5d:9b:0c:bb:2d:13:
         ec:af:c9:ff:04:ae:1b:15:66:c5:0f:7c:bf:2a:17:0e:eb:68:
         9b:b4:01:bb:e7:64:5b:54:c2:4b:b2:57:5a:5d:83:31:6f:d4:
         74:0c:fe:30:04:24:a0:2f:40:a7:9a:e6:ea:ee:19:a1:ea:4a:
         e5:3f:ff:9e:56:e2:b1:bf:e1:ae:bd:b2:6e:cc:3a:82:5f:2b:
         8b:cc:ff:a3:b3:f4:98:df:0d:d9:f5:e5:30:cc:e6:65:14:2d:
         0e:1b:d8:1c:dc:da:88:09:fb:09:b0:67:83:e9:3c:ca:40:5f:
         6c:86:5f:01:04:70:20:e5:b2:34:49:2e:53:61:68:51:f1:01:
         66:32:cb:62:57:ab:a2:7b:43:1c:6c:5c:3a:3a:85:63:ba:6b:
         8e:20:e4:d0:a2:49:fa:eb:15:c5:57:82:90:cf:75:d8:0b:b5:
         ee:44:d4:54:ca:36:d6:b5:62:05:3d:11:b0:cf:5f:b4:5f:1d:
         99:85:76:c8:c5:88:4b:59:31:ea:40:94:fb:c8:1f:b1:db:d5:
         e6:0d:d5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----