Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
File:                     IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft (raw, json)
Hash identifier:          HEzQpE3dKAR9l2gzFGu8li2GvA3At6CskAPpRbNC2F0=
Subject key identifier:   D6:A8:6C:C9:18:C4:55:C0:98:07:15:25:93:ED:1F:8C:94:07:70:1E
Authority key identifier: 21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
Certificate issuer:       /CN=219885ea020e65006314ee9480def3b3efc039e3
Certificate serial:       019353F5BC6262A35733A7479C97B9FDB895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 13:00:33 +0000
Manifest this update:     Fri 22 Nov 2024 13:00:33 +0000
Manifest next update:     Sat 23 Nov 2024 13:00:33 +0000
Files and hashes:         1: 0Ushjlx519Vf97PiC0DXs_XfAIg.roa (hash: ATG33ouECk+RMA3BmeyitsJELqapumEbQsXxyMtqglA=)
                          2: IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl (hash: 75oD6WkktG7NmN3WqEyK6DTRSrzgdXDwUdNZtchF88Y=)
                          3: cI7fOXU_mPq6bXH9g9syofs2REc.roa (hash: gdNDlLHj6WXj4MQJRnE34WHyExBJQGWBa0RwUV5bW3I=)
                          4: oDtDqYBnZOQndYkNinRiVTNjCPY.roa (hash: fJUXTLU8AeX3x+H0B4omtbAnaondZ5CKNZIsGcjLEEI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:f5:bc:62:62:a3:57:33:a7:47:9c:97:b9:fd:b8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219885ea020e65006314ee9480def3b3efc039e3
        Validity
            Not Before: Nov 22 13:00:33 2024 GMT
            Not After : Nov 23 13:00:33 2024 GMT
        Subject: CN=d6a86cc918c455c09807152593ed1f8c9407701e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5b:3d:e1:36:6d:6d:38:0f:ab:d4:53:46:5b:
                    58:e8:93:38:15:0c:0b:63:c9:bf:e4:58:17:22:47:
                    79:c2:ba:e7:ac:78:b0:1c:5c:ed:d4:fd:66:26:a7:
                    77:f4:fc:e6:f5:90:62:20:e5:b4:01:31:db:8b:0c:
                    cf:57:f0:35:1c:c9:c8:ef:2d:4e:0e:9f:dd:a5:49:
                    1b:39:34:96:18:38:b7:11:92:55:e9:14:48:89:db:
                    6b:15:c8:a2:1c:b9:b6:14:8f:ba:48:18:fc:d9:8f:
                    6b:89:c1:c6:71:88:75:2d:d4:8b:a9:53:5c:10:4e:
                    ee:9c:9f:e0:e7:4a:81:50:19:dc:36:f8:bd:98:a6:
                    74:00:b8:45:9b:33:eb:6b:e2:98:f2:12:a6:09:4f:
                    81:23:13:6e:4c:3a:bf:56:b3:88:df:21:3d:30:d1:
                    b7:a5:2a:0b:05:25:4f:8f:40:01:4a:46:b3:82:e7:
                    46:bc:8f:0e:46:21:32:94:d5:d9:5e:70:1e:b5:b5:
                    4c:22:99:45:87:86:9d:bd:2e:4b:26:f5:4e:47:f3:
                    17:42:3c:0b:e1:a1:91:4e:82:3b:bc:b8:cb:2e:95:
                    21:07:a8:f8:09:3a:60:75:0c:8b:4a:98:9a:10:79:
                    ee:c3:3a:78:ce:36:c3:04:62:5f:0e:78:f7:ca:85:
                    2b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A8:6C:C9:18:C4:55:C0:98:07:15:25:93:ED:1F:8C:94:07:70:1E
            X509v3 Authority Key Identifier:
                keyid:21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:62:63:e8:bf:f9:36:76:a2:54:87:b3:d2:b3:ea:b5:d3:53:
         71:aa:05:82:d6:0c:80:f7:39:10:d3:e9:31:6e:e1:98:9f:d5:
         e7:a3:7b:6f:5a:a4:5e:8d:27:7d:b8:f1:0c:8c:e9:26:2d:53:
         e6:74:64:8e:f5:84:7c:cf:a3:ab:a6:d4:dc:88:ff:9f:f9:90:
         03:7c:64:79:e9:22:32:80:1e:ef:ab:28:e5:06:a7:cb:c5:ce:
         f9:1a:dd:f6:33:0a:7a:0a:b0:9b:f3:e5:3a:23:ca:82:4e:cc:
         0a:5b:f2:d4:d4:87:08:3a:f8:9d:16:86:1c:72:61:72:e6:a0:
         65:02:f7:e6:8f:1a:a7:c7:56:c5:d5:32:f9:3d:5c:a3:a8:1b:
         25:df:7d:8d:92:93:77:80:9b:39:f7:5a:5d:f7:2a:2c:e0:e6:
         49:51:0d:6f:92:42:d6:97:6a:c3:86:59:a8:b0:02:02:cb:42:
         ec:52:ee:8a:c8:7a:9f:85:43:a5:07:b1:85:03:ce:85:a0:69:
         37:f7:55:a0:66:c1:b5:b8:b3:db:19:11:e6:b1:29:e4:5b:05:
         01:eb:b7:ef:5d:ba:b0:fe:54:da:27:d1:6d:e6:82:f8:7d:35:
         3f:6f:28:3c:ae:6f:83:97:ef:ea:f5:98:40:22:60:c5:54:f5:
         00:09:9b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----