Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
File:                     mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft (raw, json)
Hash identifier:          E3YNeraBn3xo3W0nf82RtKOVBO2P/LxZ+X5ZDVuda/c=
Subject key identifier:   0F:07:DD:F0:69:CE:C3:BC:61:68:5F:DC:D8:D8:20:89:B9:70:88:81
Authority key identifier: 99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
Certificate issuer:       /CN=998674263fccd07f684e1e199302eeefe783fb3d
Certificate serial:       01935508A2652C82EEDEF236EB25FED94E36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
Manifest number:          08A0
Signing time:             Fri 22 Nov 2024 18:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:49 +0000
Files and hashes:         1: Nk3cIPcD2EjeYB6s_cNLC53eAN8.roa (hash: wQTkkdx4JJuwMXI5iQjWwVmlViAtE12DqO9XIOBGyIk=)
                          2: mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl (hash: s372x/O5/KlyDKcomyKA1PB3rpndhGQwrDMU4kTDk1k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:a2:65:2c:82:ee:de:f2:36:eb:25:fe:d9:4e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998674263fccd07f684e1e199302eeefe783fb3d
        Validity
            Not Before: Nov 22 18:00:49 2024 GMT
            Not After : Nov 23 18:00:49 2024 GMT
        Subject: CN=0f07ddf069cec3bc61685fdcd8d82089b9708881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2f:a9:72:2f:2c:7f:38:4e:cf:67:1b:ba:aa:
                    a5:d0:28:5c:26:b4:11:cd:19:70:b0:73:1f:ea:a6:
                    7d:a3:2d:25:09:0a:ce:b2:ab:26:86:4c:47:bc:0d:
                    e8:c6:d1:76:aa:2c:34:50:a6:cd:1f:91:35:09:cf:
                    25:60:d6:2f:c4:1f:8f:36:a3:23:e4:56:b4:ca:54:
                    1e:88:ff:08:3a:b5:93:e8:da:af:37:71:be:f7:18:
                    76:65:c5:52:d9:0e:e4:43:0b:06:23:ee:a8:63:7f:
                    ce:e3:3c:60:e6:34:28:bf:fa:ca:18:89:59:ee:18:
                    23:93:35:9c:ed:56:86:cb:4b:d1:34:f0:c2:27:fc:
                    1d:26:f9:a3:1c:9a:63:e3:fb:99:72:21:66:28:03:
                    b2:3e:cd:6d:10:23:b6:21:1f:d5:06:03:b9:b1:6a:
                    0c:d9:c2:8f:58:c9:78:dc:32:5d:82:a0:10:8a:ee:
                    ee:df:63:bd:5d:44:78:a0:72:83:b9:c4:47:96:ae:
                    bc:93:0f:f6:7a:f9:80:f6:ef:b9:72:3f:1d:46:13:
                    48:83:0c:5a:3f:0b:96:79:9f:20:4b:b0:a1:e4:42:
                    2d:a3:f3:62:94:57:20:e6:de:83:f1:a0:ec:d2:5b:
                    85:6c:d8:8b:42:23:78:8c:b8:bd:25:50:b4:e4:83:
                    e7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:07:DD:F0:69:CE:C3:BC:61:68:5F:DC:D8:D8:20:89:B9:70:88:81
            X509v3 Authority Key Identifier:
                keyid:99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:51:39:cf:3d:5a:b9:a9:61:9e:33:ee:d9:c3:1a:35:79:c7:
         83:c9:9c:4a:45:0d:05:15:5d:56:ef:36:e2:ce:a1:23:59:60:
         d9:5d:10:a2:4b:8e:e3:5c:96:4a:e2:b6:26:99:48:7b:df:10:
         34:c7:45:39:98:a2:e4:a9:1f:4b:b4:c0:48:05:16:52:83:e0:
         3a:b6:06:06:5a:de:f5:9d:8e:0f:40:79:cc:89:b3:05:ec:6d:
         30:4a:e0:61:cb:db:89:62:a8:d5:bb:d8:af:9c:83:7d:6a:df:
         9d:ed:77:a3:30:bc:93:4e:83:ea:78:00:b1:15:de:5a:dc:a8:
         40:3d:27:b3:d7:67:8e:60:f8:58:ea:f1:a0:39:9c:a8:d0:25:
         9f:f9:dc:df:7d:ec:a9:01:29:32:ee:ab:a6:2c:f5:26:19:02:
         55:17:97:d1:51:73:c9:09:46:01:29:81:17:86:53:02:63:9a:
         97:cd:6c:bc:6d:37:56:fc:73:fd:d1:11:4b:65:97:27:13:1c:
         a6:2b:a4:3d:92:1a:62:6c:b3:f2:44:ea:03:dc:49:04:c0:4b:
         3d:be:3a:54:e9:3d:9e:9d:9d:c1:cb:2b:8c:33:8d:dc:1c:53:
         d2:f5:2a:c1:0c:30:20:a8:85:1c:d4:ed:53:74:e0:69:25:2d:
         6e:c5:23:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----