Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
File:                     ih8K1VcrribjnIdAxoqPu0buSGQ.mft (raw, json)
Hash identifier:          9Dodg1vRQDG5lz29KpOrOCMUCp99GKC6Y1EYucj5QW8=
Subject key identifier:   9D:29:A7:6A:31:A9:09:5A:C4:BD:C5:02:F4:7B:99:A3:9D:B1:DA:CF
Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Certificate issuer:       /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Certificate serial:       019356F6AF6B060A65AC096C6FB4F9F25356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
Manifest number:          0701
Signing time:             Sat 23 Nov 2024 03:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:27 +0000
Files and hashes:         1: DbMo_NzkiiliYs57pi4EQRNM8iA.roa (hash: mZdkZo/YNL2ivX6Ucdz/rXgcskCAHWUSNqEp3aidXmI=)
                          2: ih8K1VcrribjnIdAxoqPu0buSGQ.crl (hash: dd1KpeuQGwJk6OPxrMkoOjQgXMfjgsotYSqb4CgwZ9g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:af:6b:06:0a:65:ac:09:6c:6f:b4:f9:f2:53:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
        Validity
            Not Before: Nov 23 03:00:27 2024 GMT
            Not After : Nov 24 03:00:27 2024 GMT
        Subject: CN=9d29a76a31a9095ac4bdc502f47b99a39db1dacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:4a:7d:18:a4:b5:62:12:c9:44:bd:56:d4:
                    cc:b1:29:2b:c6:68:d4:65:48:db:45:cf:97:e0:79:
                    57:3c:71:f1:55:dd:aa:de:27:a8:c9:a7:cd:17:98:
                    c1:20:7a:62:60:e7:44:68:db:a1:52:fb:bd:aa:8a:
                    40:f4:44:ac:f0:1d:6c:db:8b:43:39:37:28:dc:ad:
                    e9:fd:ea:89:5a:60:aa:33:32:ed:7b:98:95:57:93:
                    27:91:5d:2d:99:f5:07:e8:b9:12:ca:5e:7f:20:5d:
                    53:d8:3e:5e:45:3d:71:b1:22:15:06:2c:71:10:af:
                    f7:11:3b:91:bc:06:27:a0:87:55:ff:36:f3:d0:8a:
                    da:60:c7:17:75:2d:f9:d3:6e:7a:04:92:0e:a7:18:
                    34:0e:f7:f9:e1:69:4f:e4:18:50:bc:19:a2:4f:1a:
                    e2:1d:e8:7c:ca:a2:02:f1:20:6c:79:dc:b2:05:6c:
                    be:de:8f:06:59:63:73:c3:18:7f:f2:44:8f:85:dc:
                    26:0b:75:2f:cd:27:2f:dd:34:0d:bb:9f:6e:5d:24:
                    10:64:13:e9:c8:8e:1c:49:86:88:4b:4f:52:76:51:
                    20:82:a9:3b:05:d7:e6:b4:eb:79:a6:2f:b4:ce:18:
                    f9:51:94:ce:0e:06:62:02:00:d1:4c:3b:c4:04:02:
                    b5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:29:A7:6A:31:A9:09:5A:C4:BD:C5:02:F4:7B:99:A3:9D:B1:DA:CF
            X509v3 Authority Key Identifier:
                keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:2c:6a:ba:c1:41:12:fc:df:ca:59:eb:0a:c5:d0:e9:17:48:
         b9:6a:fa:eb:bf:f2:15:a6:d8:ac:83:43:18:1a:60:e4:15:4e:
         12:d2:bb:57:74:4f:80:3a:12:c9:1f:ca:68:c2:a4:f0:5f:b8:
         92:a7:39:dc:11:0d:cd:b3:45:da:67:bb:28:b7:fc:36:86:0a:
         b9:3f:dc:9f:9b:c7:09:ca:22:ce:f2:a1:97:b6:0c:46:42:c0:
         02:35:6d:9b:80:56:e8:4c:41:48:6b:a3:ee:b4:33:7a:43:2f:
         e3:1a:93:07:d7:ac:e3:7f:d2:87:b5:61:d3:04:d7:b0:e5:ec:
         0b:ba:9a:5a:08:11:d8:0a:ef:09:2e:1e:10:cd:7c:46:9b:66:
         a5:c7:f7:52:97:45:e0:d1:7b:30:e2:b9:1d:c3:9f:29:57:7e:
         5b:a1:52:12:c4:98:0f:ba:f1:08:82:49:32:0c:67:92:ca:f7:
         09:ca:d4:24:0e:0c:7f:f2:60:3d:3a:7f:1e:ff:68:e8:e0:f5:
         7c:c1:e9:63:6d:52:2e:88:99:01:17:79:17:b6:64:c5:57:19:
         84:9f:3c:69:bf:9a:40:7a:b4:72:fc:c4:9d:c0:4e:5a:89:83:
         ce:35:18:92:16:77:6f:d8:5f:da:1f:8d:c2:b2:e3:e3:48:64:
         ca:68:f2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----