Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File:                     YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier:          apLnIjYjUDiw+FXbiiC+yfWh8eNqtsSbde4QahATdCk=
Subject key identifier:   B3:C1:4A:C3:65:4A:30:BD:27:69:AA:D7:03:C6:5A:84:40:3E:5C:0A
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer:       /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial:       01935199704092C0DF13FBD9F067137495E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number:          0F62
Signing time:             Fri 22 Nov 2024 02:00:30 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:30 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:30 +0000
Files and hashes:         1: 1-yDeptPK9dfxbEe1zalWderyFEI.roa (hash: I/BYSGh3st8TNUnUFW/fxtOzYlnSsGwJrKRFq2DG8M8=)
                          2: FkQMXykdcJastLUz7q_epspcbMU.roa (hash: bvvr2DdNlv4kOFxorcdDvFThOA/JH1kIqE4zWZhKLMQ=)
                          3: VndU9HMIiO24bwi6CWRWBioC5Rc.roa (hash: 550oajbHf1tWTYf4Lg+/raJY7u40PjQ4aQA5qOpH2sY=)
                          4: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: k/nguCTzfhmUlYBJ2eE5VsOVQzvFb42yp6Cu3e2EmbA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:70:40:92:c0:df:13:fb:d9:f0:67:13:74:95:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
        Validity
            Not Before: Nov 22 02:00:30 2024 GMT
            Not After : Nov 23 02:00:30 2024 GMT
        Subject: CN=b3c14ac3654a30bd2769aad703c65a84403e5c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:6d:99:20:3f:b3:f3:56:d5:86:4c:19:aa:
                    c1:19:94:72:2a:ec:96:e4:be:c9:49:11:c9:dd:46:
                    66:c5:4f:41:64:f6:63:30:70:f5:38:10:dc:74:9e:
                    16:81:73:3f:1c:0e:fd:e1:05:b3:4c:37:d7:ca:91:
                    d5:a9:7c:ea:a8:ab:91:b4:57:a3:a1:93:73:6f:41:
                    a7:53:66:f0:80:d2:59:55:9c:a7:a3:e1:13:62:10:
                    b6:9c:ed:ca:14:fb:ce:f1:04:81:1e:ba:69:52:d9:
                    34:a2:fc:fe:5a:97:5c:34:19:4e:aa:4e:f9:ad:50:
                    2e:3d:7a:b7:93:84:53:3a:2a:c3:0f:58:1d:67:de:
                    3c:0a:13:41:55:f5:64:88:d6:89:c9:86:12:88:50:
                    b9:4a:0d:cf:70:46:f9:4b:c6:3a:10:23:4b:97:1c:
                    4f:88:15:f5:6f:36:4b:41:25:0d:76:40:47:ab:e1:
                    14:ac:d5:b3:fd:bf:32:be:21:0c:88:28:59:e1:d2:
                    af:b6:7d:75:f7:6f:8d:2a:e2:b3:6b:14:c2:a3:82:
                    62:9c:6c:06:a3:1d:2f:6d:7a:b3:62:e9:67:eb:45:
                    eb:14:6b:19:8f:b2:1c:be:aa:62:b1:cc:ff:a9:08:
                    af:87:21:f5:25:af:75:0b:79:0b:7e:04:64:e9:fa:
                    6a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C1:4A:C3:65:4A:30:BD:27:69:AA:D7:03:C6:5A:84:40:3E:5C:0A
            X509v3 Authority Key Identifier:
                keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:eb:b0:ea:f7:e1:46:63:2c:67:89:c5:b0:19:6d:09:6c:b6:
         ec:01:e4:c0:9a:41:70:88:f1:a2:b6:99:4f:61:b4:2a:a6:17:
         52:f0:5d:3b:99:12:e1:3e:a7:fa:bd:87:ad:1f:cb:bf:d9:d3:
         e3:5c:28:c1:4a:1a:f2:f4:63:95:7f:7b:a1:12:c5:6b:d4:e2:
         4e:f4:66:fe:ea:67:e5:6e:26:70:49:a8:a8:00:7f:00:df:bc:
         59:58:62:98:ba:56:c6:71:f1:54:83:4c:4c:e3:f7:97:e3:42:
         88:da:e6:1b:95:8b:4f:e0:23:86:f7:e3:76:a3:dd:ba:a4:25:
         ae:2b:3b:8a:60:58:42:8b:49:17:72:9d:57:2e:1b:62:2d:cb:
         0a:9c:c9:af:d8:aa:65:0c:d5:bf:d2:9d:06:32:3b:26:d0:c2:
         42:06:34:a0:db:7a:9b:03:51:e6:8f:78:2c:bf:a3:17:f8:e5:
         4a:27:f0:0c:0a:19:2e:5e:4e:65:10:27:8b:30:f6:e1:83:5d:
         c1:5c:cc:43:3e:f9:57:a1:d3:c3:1c:c5:5f:45:38:7a:1d:97:
         22:02:8b:6f:6f:50:1c:86:c6:dd:e7:b0:4d:9a:d1:1e:86:e9:
         89:52:b8:5d:50:8c:eb:02:45:e9:27:77:c9:09:39:74:f5:5b:
         7b:7d:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----