Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
File:                     9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json)
Hash identifier:          r48qKQkc429EW2f+3jjtwSVFVrbcq/XtzhTG8Amx3Yk=
Subject key identifier:   37:58:3F:BB:B0:5E:F0:E8:A6:AF:B7:44:DE:8B:EF:9A:5D:12:6E:71
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Certificate issuer:       /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial:       01936031A166D827B39193A2AFAFA777F83F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
Manifest number:          0CEE
Signing time:             Sun 24 Nov 2024 22:01:25 +0000
Manifest this update:     Sun 24 Nov 2024 22:01:25 +0000
Manifest next update:     Mon 25 Nov 2024 22:01:25 +0000
Files and hashes:         1: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: V+iGK8wYxi3Ai/SBGzDeaQDTSJr7QFONshuppA+ZSZ0=)
                          2: E40rcYJvh4ABfi8nQUF3Ua8Y3l0.roa (hash: +dxiWUD9SHUn6nQwazKHEKuahbt7roG6ojvutVPvzig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:31:a1:66:d8:27:b3:91:93:a2:af:af:a7:77:f8:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
        Validity
            Not Before: Nov 24 22:01:25 2024 GMT
            Not After : Nov 25 22:01:25 2024 GMT
        Subject: CN=37583fbbb05ef0e8a6afb744de8bef9a5d126e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:10:94:28:7c:33:94:1d:cf:95:24:83:98:
                    38:5d:4f:02:ee:65:77:84:4e:ec:a9:fa:d9:1e:29:
                    1c:a0:52:66:9a:de:3b:22:db:9d:ef:d3:ed:d7:6d:
                    ae:90:28:ac:ec:93:dd:5e:dc:de:7b:0d:12:9c:e0:
                    fd:b0:52:e8:a3:43:bc:9b:4d:28:dc:59:be:2f:af:
                    3d:57:63:1c:4a:41:11:77:f0:a3:9f:af:8c:93:e9:
                    d0:ee:51:51:3b:b0:de:02:1d:c6:1f:a9:21:e1:fc:
                    db:75:cd:b1:df:c2:0b:71:f2:35:04:0d:6b:bf:02:
                    82:00:f4:3e:c8:e8:6e:1d:3f:fd:18:0c:f2:b9:6e:
                    a1:52:1c:3b:cd:03:6a:36:3a:a5:cd:3d:83:c0:e3:
                    d5:7c:ee:8d:e9:d7:e4:89:90:57:1a:19:97:4e:65:
                    85:b8:9e:7a:68:f3:14:a5:e3:47:af:6b:42:52:93:
                    0d:34:5e:33:e6:67:95:62:77:d2:9f:a0:28:29:d7:
                    ba:39:b8:f3:0c:b8:86:24:14:bc:38:b4:33:0e:28:
                    f0:7e:f0:ac:3c:7b:7c:d4:49:f3:5b:2e:78:75:16:
                    c0:80:b7:5a:59:8d:c5:38:94:3a:71:1f:73:7f:02:
                    0e:15:d2:05:3d:9c:2d:91:d7:f2:35:c9:c5:f4:42:
                    bc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:58:3F:BB:B0:5E:F0:E8:A6:AF:B7:44:DE:8B:EF:9A:5D:12:6E:71
            X509v3 Authority Key Identifier:
                keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d9:3c:ca:b1:4c:03:e7:e7:89:aa:0d:ae:2d:21:91:f8:6d:
         35:36:81:8d:16:c5:73:15:4f:ce:f6:28:e3:c1:a4:40:90:37:
         dc:bb:04:be:5c:75:77:89:74:cb:e2:69:84:b0:e8:f7:2b:71:
         6a:2d:85:a3:3b:97:cd:46:0a:c0:e6:a3:88:fe:5a:ee:0b:03:
         fe:06:81:b9:1c:2a:e8:12:0f:38:53:93:13:21:4e:1f:fc:75:
         15:37:89:9e:f0:3b:c1:20:54:26:3d:a1:be:88:3a:e5:68:a9:
         ae:1f:94:16:c7:b6:13:87:39:69:eb:96:2f:bf:83:3e:61:b5:
         c0:5d:bd:b5:f1:bf:ea:8b:0b:29:45:80:55:62:9f:02:12:7c:
         62:47:8a:2d:c5:5e:54:eb:7d:ba:62:57:a7:f7:6e:1c:4b:9e:
         4a:98:9e:95:72:e0:ba:17:6a:f4:a8:17:25:c0:8f:70:54:64:
         c5:27:46:6c:28:3f:4a:91:9c:74:59:1a:4f:04:54:01:b2:2d:
         f4:65:c8:e2:44:40:15:e5:5c:24:69:c5:58:ed:91:c9:df:b6:
         ce:e6:c0:36:c0:ad:34:77:2b:b4:ea:8c:d1:39:1b:94:51:07:
         9a:64:9e:1d:c1:d3:8e:14:fd:a6:e8:2a:be:06:fd:9c:d2:8a:
         00:3f:41:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----