Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
File:                     IkI4OfIQchYnZBrmtszqzujZBns.mft (raw, json)
Hash identifier:          TM1vjn6veDJUCoNNIRg1J/hoKfaGD113/l1Q4UknDE4=
Subject key identifier:   27:76:48:B4:28:35:BF:E2:AE:B8:6E:07:ED:20:6F:58:F8:3F:51:A7
Authority key identifier: 22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
Certificate issuer:       /CN=22423839f210721627641ae6b6cceacee8d9067b
Certificate serial:       01936A0F9490234454B68330351C3506DC0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
Manifest number:          08BD
Signing time:             Tue 26 Nov 2024 20:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:26 +0000
Files and hashes:         1: IkI4OfIQchYnZBrmtszqzujZBns.crl (hash: JGHjbor2oXT6gVJbTwmrHwPYS+hCrNsXoOK5J72qQq8=)
                          2: wJDRK32lB5LW0NYdA-0BMXDkTmQ.roa (hash: 5KCUkLPS/IZxQSW1wdCDmiriNWaMq50KNrDeTbU9NZQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:94:90:23:44:54:b6:83:30:35:1c:35:06:dc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22423839f210721627641ae6b6cceacee8d9067b
        Validity
            Not Before: Nov 26 20:00:26 2024 GMT
            Not After : Nov 27 20:00:26 2024 GMT
        Subject: CN=277648b42835bfe2aeb86e07ed206f58f83f51a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:72:0f:a4:29:b3:97:3a:4b:b5:56:3f:9d:42:
                    81:a9:bc:09:ef:e2:d6:7f:9f:8d:90:14:9d:83:9e:
                    ea:8a:f6:bd:8a:f7:41:cd:26:14:6b:e9:b6:ae:e6:
                    e2:4e:7a:eb:cf:de:fd:b2:9a:e8:93:46:7a:74:db:
                    58:28:1c:97:41:12:81:b8:87:5f:fa:27:10:5a:df:
                    6b:31:73:72:38:49:b1:8e:c1:17:66:d9:3c:55:cb:
                    91:02:0f:d6:53:15:1a:8b:c0:85:20:65:ad:6b:0e:
                    8a:64:d2:57:df:d1:87:1e:2a:d9:0f:9f:7f:84:1f:
                    87:50:52:a6:e9:c1:69:0a:c8:67:47:b7:a0:95:69:
                    6c:ae:10:c1:49:89:bc:7f:1c:77:37:e3:cb:59:d3:
                    7c:bb:e1:ca:4c:7c:02:ef:8c:42:0c:89:6b:95:14:
                    f5:6a:f3:80:a4:07:08:5d:f1:94:36:ce:bc:64:6e:
                    bd:ea:de:72:39:55:8e:4a:86:29:89:c1:4c:a0:44:
                    b3:41:ef:e1:2e:b4:95:99:40:51:5d:41:b6:76:a7:
                    7b:64:7e:a3:1c:b7:4e:c9:b9:86:fe:10:13:6a:3d:
                    e4:2f:1b:e6:52:de:7b:44:70:b9:eb:1b:15:72:fe:
                    cf:4f:fa:e4:47:25:85:df:2e:86:31:5e:46:1f:fd:
                    14:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:76:48:B4:28:35:BF:E2:AE:B8:6E:07:ED:20:6F:58:F8:3F:51:A7
            X509v3 Authority Key Identifier:
                keyid:22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:75:47:65:e5:5d:90:7e:05:2f:02:09:64:e7:f2:39:76:93:
         68:fb:0d:2d:50:54:1b:72:1e:6f:49:d1:13:a7:86:99:d6:60:
         2c:d5:76:db:fb:ce:3c:dc:a7:65:43:9a:79:97:53:71:c1:34:
         7e:57:76:23:ac:65:c0:67:1e:4e:0b:c3:1b:57:35:d9:9e:08:
         4d:7b:50:d8:fb:1f:07:b7:a4:40:57:b5:0f:fa:03:3c:6d:aa:
         31:57:11:97:e2:25:e7:de:42:2a:6b:3f:08:33:4f:85:35:0a:
         ec:d4:73:57:66:f7:b7:a2:ad:7f:95:df:64:e2:69:85:c2:d3:
         6e:42:fe:8b:ba:3d:b5:ad:cc:29:b0:2f:94:7b:e4:a8:c4:bb:
         b7:26:ff:87:77:96:fd:4d:3a:28:11:92:ce:89:4f:c3:7e:ba:
         9f:fa:d2:fd:af:89:fe:96:93:43:c1:09:31:fb:7e:4c:b4:1b:
         fb:b9:70:38:6c:e2:28:df:46:2f:a0:15:18:e9:f8:b4:14:48:
         a6:60:2c:ae:eb:39:06:0d:0a:da:a6:0b:55:c3:4d:e8:f0:a0:
         c0:3a:a7:5d:bf:18:70:4e:20:b8:e2:ca:5f:d3:0f:e7:e0:ed:
         a9:b5:69:01:36:4d:57:41:cc:74:57:08:b4:17:f6:6b:3c:09:
         47:c8:4b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----