Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
File:                     44qr6o7im_fJFbw-8Luswn0Ozt4.mft (raw, json)
Hash identifier:          06CxOKOe1ZExqWlnC5Yseu+nt8NRR8olfHTydDvCoow=
Subject key identifier:   20:33:B3:37:59:38:01:C2:64:73:DB:62:D2:30:8D:90:9A:B7:4D:93
Authority key identifier: E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE
Certificate issuer:       /CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
Certificate serial:       0193549AFF53EA54BCE51DB8F76829B2AB8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
Manifest number:          101C
Signing time:             Fri 22 Nov 2024 16:01:04 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:04 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:04 +0000
Files and hashes:         1: 1-hpQjDeFJIOor7bNyYt1R9_pfyA.roa (hash: BvW2Pr5q+T4yY4tbonuV6/HNF9uIVdUdDDueeFrfouc=)
                          2: 44qr6o7im_fJFbw-8Luswn0Ozt4.crl (hash: VvuNgf64ol44CHOB3znqenJ4SdA4MHfgzbyOWoa7Xmg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:ff:53:ea:54:bc:e5:1d:b8:f7:68:29:b2:ab:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
        Validity
            Not Before: Nov 22 16:01:04 2024 GMT
            Not After : Nov 23 16:01:04 2024 GMT
        Subject: CN=2033b337593801c26473db62d2308d909ab74d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:a6:b7:57:c5:e7:57:f0:4a:0d:0b:ec:98:
                    13:d8:1d:66:08:3c:85:41:08:54:82:01:73:32:45:
                    93:24:14:17:0f:8f:dc:c7:dd:e8:cc:ab:9c:63:54:
                    0b:f8:ee:aa:c3:b0:f1:4d:28:bf:4d:68:48:d3:a5:
                    2e:26:29:23:ad:80:a7:76:28:15:08:64:14:32:17:
                    fd:b3:65:30:c5:09:c6:12:03:43:3a:ae:21:62:c8:
                    3f:8c:3c:a8:3c:58:64:db:02:fa:a0:d2:fb:ea:40:
                    c8:4c:41:72:5a:37:c2:73:4f:7b:30:cd:4b:2c:7b:
                    e1:b4:7c:1b:66:52:ee:a0:c2:9b:35:63:ce:5b:9d:
                    02:a5:57:ac:b1:c2:9b:93:e9:07:d4:2d:42:bb:e3:
                    67:12:f2:6b:39:9f:3c:13:60:94:24:1b:2e:96:14:
                    49:b4:2d:d7:b8:b8:70:85:fc:47:ef:c3:33:46:b2:
                    b8:63:dc:51:be:ac:0e:2a:69:ff:17:43:61:4f:82:
                    b3:88:18:ff:a8:27:85:34:1f:45:4d:e5:f9:69:ca:
                    4d:39:be:fc:b6:6c:83:f9:1d:9f:41:52:8a:dd:d2:
                    0c:e0:cf:ed:8f:3d:6b:63:9f:91:ea:1f:1a:e2:b0:
                    9c:f6:1d:14:a0:91:e8:cf:d4:cc:05:ff:90:b1:f2:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:33:B3:37:59:38:01:C2:64:73:DB:62:D2:30:8D:90:9A:B7:4D:93
            X509v3 Authority Key Identifier:
                keyid:E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e7:2d:fb:25:81:72:5c:56:9c:de:1f:07:73:71:6b:e8:2b:
         84:60:d4:63:dc:11:c0:16:a6:0c:9c:2d:0e:c0:62:ee:b5:c6:
         09:6c:72:a4:fb:b2:d5:7f:a8:64:e1:6f:ba:43:17:a5:82:4d:
         a9:8b:c3:1d:3f:2b:ac:b6:f6:ce:50:6d:6f:b5:cc:57:4b:32:
         35:b6:b2:13:b7:bb:eb:7a:c3:84:7a:5d:fa:9e:03:b4:bd:88:
         aa:06:b5:18:ba:a4:3e:a3:73:a9:f8:c7:55:da:a9:54:82:63:
         d7:c2:7c:da:84:40:8c:73:11:cd:98:6c:6b:b7:43:a2:da:bf:
         1e:49:de:6a:47:ec:97:27:fc:a8:cc:12:0f:13:bc:5b:fb:84:
         5c:5c:75:7b:6b:52:cf:45:e4:55:e2:e5:10:b3:34:44:f0:b7:
         b7:49:0b:df:2c:71:68:a7:db:37:59:cd:03:df:dc:02:8f:30:
         f8:68:9b:bd:99:c8:8a:f2:f1:e4:36:05:23:e6:71:be:24:2d:
         a3:fb:1b:50:6f:73:54:7b:18:d4:77:6e:ca:d9:d0:dd:d6:2f:
         6a:7c:91:70:7a:3a:a9:b7:b1:c8:f8:9e:11:58:76:e6:ff:44:
         af:55:9e:fa:9e:8c:02:8c:fe:ca:e7:86:6f:3f:5e:c1:14:a1:
         5a:80:e2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----