Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
File:                     7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json)
Hash identifier:          uzRRxIVZWhnPUgHYXiED/F4nqTXf1JUw05xAyPpYIvA=
Subject key identifier:   EF:F2:CA:34:E6:70:7F:D4:14:80:F1:75:6E:43:49:2E:D4:0B:95:21
Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
Certificate issuer:       /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Certificate serial:       019355AD3F7884EEA32EBD3DAD3DB8F465C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
Manifest number:          0F40
Signing time:             Fri 22 Nov 2024 21:00:37 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:37 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:37 +0000
Files and hashes:         1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: 0A+LeaevZQpHkfMQqXSGHMgKO+CHDcgPRonbdbgnBtc=)
                          2: lPBe3KdDE0h6RBNV6Ws2fiMIG_E.roa (hash: F2gwKWZfokMKV3Ed3ieEqgGQ5NMB2bPpQrYc2V3vVFE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:3f:78:84:ee:a3:2e:bd:3d:ad:3d:b8:f4:65:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
        Validity
            Not Before: Nov 22 21:00:37 2024 GMT
            Not After : Nov 23 21:00:37 2024 GMT
        Subject: CN=eff2ca34e6707fd41480f1756e43492ed40b9521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:b5:b4:00:06:66:e4:0d:d9:95:16:92:e8:
                    58:c5:b0:11:35:43:9a:a7:0e:d2:41:28:8e:f4:45:
                    ad:97:1b:c1:4f:4a:a6:23:8c:04:99:7d:c5:07:87:
                    ed:83:95:56:1d:3f:63:7d:d4:c1:c7:7a:1a:54:74:
                    1b:e7:53:58:c7:9e:4b:63:48:7b:0a:f3:97:5e:f9:
                    e9:1f:17:14:be:28:4e:33:f9:14:d9:32:94:ee:b1:
                    f6:1e:8d:74:c4:71:01:2b:eb:3f:44:55:e2:16:ad:
                    71:2b:cd:3c:53:df:7d:89:2c:8a:29:30:a7:44:33:
                    78:f6:0f:11:e7:d8:54:eb:4d:58:68:fa:a9:11:8b:
                    19:69:09:fe:74:76:53:50:5f:b5:2e:06:79:6d:6e:
                    0f:75:da:92:97:b1:20:6f:d0:37:ae:27:97:bc:17:
                    a7:09:de:d0:e5:49:b6:8c:ee:a2:fa:36:c3:6e:23:
                    6e:29:af:85:60:9e:16:f5:52:b3:04:ec:e8:47:f3:
                    ef:3a:ff:c6:dd:6a:9b:ba:cb:77:b2:d5:ad:01:4c:
                    bb:c4:9d:03:cb:0d:69:ee:f4:ae:18:5e:f0:11:8e:
                    d4:93:08:4c:65:59:24:8f:cb:6f:6e:5b:33:9f:5b:
                    41:56:4c:10:b4:22:b1:31:25:f9:29:60:9d:ce:dd:
                    21:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F2:CA:34:E6:70:7F:D4:14:80:F1:75:6E:43:49:2E:D4:0B:95:21
            X509v3 Authority Key Identifier:
                keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:c6:4a:26:1b:69:f4:0e:c0:32:e7:45:f4:0b:10:f1:6f:60:
         5c:ab:fc:8f:7d:ce:ba:46:a0:63:19:e4:a8:e1:24:f6:49:66:
         6b:cc:3b:b7:81:27:cc:fb:9c:8c:60:e2:0b:6f:a0:ac:f8:3b:
         90:21:f6:38:6a:69:9a:36:59:76:94:e7:a0:42:03:4a:99:fe:
         9d:0b:3a:f3:08:8c:00:71:7e:c9:c5:7b:84:6c:42:d8:3e:b4:
         be:af:26:7a:de:20:b0:d8:52:ed:cf:dc:ac:31:44:f6:7f:8c:
         d6:e0:81:36:7f:13:ce:c5:5c:89:e3:1e:e8:87:f2:77:87:b1:
         8a:3c:36:47:0d:e1:91:e7:38:d2:18:ac:f4:68:43:62:0c:8b:
         a5:5b:65:28:46:13:1f:48:d5:1f:38:18:46:26:24:be:b9:24:
         ac:3c:00:5f:01:3a:5a:0b:82:2d:87:de:26:f7:ac:b8:ce:ba:
         8c:b8:6c:cd:12:3c:3a:86:28:8c:6f:f0:12:75:39:01:81:24:
         cd:a4:48:5b:99:a2:d8:b4:71:e7:7b:0e:b9:a9:0e:e8:fc:df:
         79:8e:5e:7d:8c:75:4e:41:f8:7f:15:41:a1:91:19:69:d9:10:
         75:83:7b:b5:df:69:85:70:fe:bc:a6:a2:c1:27:8f:e6:1b:c3:
         9f:51:ba:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----