Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
File:                     K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json)
Hash identifier:          KUlh1fE7UuijyFT7vERO3dAFW2+vDx7OVMOy9kSCD84=
Subject key identifier:   D6:28:A1:57:39:AA:72:DC:D5:7B:81:91:B3:35:19:38:BA:A6:09:AF
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Certificate issuer:       /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial:       019351D0842552D9B9812D50D7F6E2181C3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
Manifest number:          0143
Signing time:             Fri 22 Nov 2024 03:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:39 +0000
Files and hashes:         1: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: whUVChh+g907QS+cyJWrIdsoMXupOJcGSowKTX+vbEg=)
                          2: TRyFDjn_Lrsjr76xd9avjafu434.roa (hash: 37PIDSZM8Eposy8DaRvrygw/n7ePO8Jwz8NIN/fRDC0=)
                          3: UYoJB-Rk3kc8dgej9JjyXgsCyfg.roa (hash: tu82cgNS9X3LlXfqCse7vnz4Zxz6ydu4dMt8nUX8dZk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:84:25:52:d9:b9:81:2d:50:d7:f6:e2:18:1c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
        Validity
            Not Before: Nov 22 03:00:39 2024 GMT
            Not After : Nov 23 03:00:39 2024 GMT
        Subject: CN=d628a15739aa72dcd57b8191b3351938baa609af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4a:54:18:7b:47:cb:71:e8:33:64:4a:40:27:
                    cd:07:5c:f9:f9:92:6b:d7:b7:d7:61:da:bb:c2:0f:
                    b4:64:58:3d:be:0c:dd:66:38:c6:8d:d0:37:dc:87:
                    58:66:90:b0:31:0e:c1:27:74:14:61:b5:fa:6f:e2:
                    2f:cc:f7:b1:e7:be:ab:04:77:b8:50:7d:5d:fd:fe:
                    30:b6:37:a1:83:fd:a5:81:fd:3e:9d:fb:a7:5b:44:
                    7f:df:4f:16:ce:95:be:3c:32:82:ad:74:9a:64:7e:
                    88:dc:63:92:0c:51:12:69:c3:0b:38:2d:20:9a:be:
                    ad:92:49:da:b8:ea:4b:50:d4:4f:66:f7:aa:ad:9b:
                    33:a4:4a:49:f4:66:5a:2b:dd:e0:8f:c6:2f:e1:aa:
                    35:b8:d5:e1:e7:b0:fe:d1:d3:43:56:88:ea:70:88:
                    4a:ff:cc:4d:0d:7f:b2:5c:d0:5b:79:9a:fa:a4:b1:
                    82:00:1a:ba:95:f5:99:7f:57:1a:bc:f1:64:64:56:
                    36:4c:97:ca:88:54:ca:43:2e:b1:10:da:0a:e8:b4:
                    d1:fe:74:5c:58:ac:2e:b1:76:5b:b5:dd:1b:2f:73:
                    39:97:ec:2a:e2:48:d7:98:d4:33:01:ba:c7:9c:fd:
                    58:05:28:84:63:d9:f6:ab:d7:0d:a2:eb:3d:af:4b:
                    25:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:28:A1:57:39:AA:72:DC:D5:7B:81:91:B3:35:19:38:BA:A6:09:AF
            X509v3 Authority Key Identifier:
                keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:35:53:bc:f5:48:8a:7e:f2:3c:14:47:e1:7d:da:f8:8b:93:
         3c:ec:93:e8:2e:1e:23:f1:76:2e:78:5f:e2:c7:c1:02:00:54:
         4d:fc:dd:63:fe:94:0e:d6:64:24:35:48:e8:d6:d4:9d:83:bb:
         1b:49:fa:8b:3c:87:28:2d:a9:73:19:52:08:8a:4a:ab:43:be:
         c2:52:71:9b:5a:3c:b9:ce:bd:03:16:4f:18:ec:3c:2c:b0:ac:
         26:d6:29:e5:82:e2:e7:e3:9e:1b:02:90:c1:77:b9:fa:b3:d2:
         37:65:3c:64:96:92:a5:8b:48:ad:0c:9a:5b:bf:14:0d:36:8f:
         ea:0d:a7:8d:07:d2:ff:94:1e:8f:66:66:39:e7:70:8f:69:48:
         35:b8:41:8b:2d:86:8c:51:ba:c6:3a:4f:07:03:e1:7a:d4:c7:
         02:9c:9e:51:5c:3e:b5:77:b1:df:32:85:20:c7:f7:bb:87:bf:
         a3:31:9b:96:bd:ee:1e:f8:42:43:1e:e5:e0:24:5f:67:e1:6c:
         59:e7:82:1e:b6:1b:e7:b1:a3:6d:f0:0f:2e:8f:66:e8:1b:6d:
         5a:68:3f:8b:4a:5a:cb:34:d6:1b:2f:8a:b4:64:11:9d:f2:5b:
         0a:d0:f1:00:4f:f5:a5:9e:95:d5:6c:90:6a:93:91:30:c7:0e:
         07:d5:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----