Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
File:                     iib0dtYIYlrR_gblK5dKn2bwFBo.mft (raw, json)
Hash identifier:          z+iSvwWHNTF0Tw11HMHlTwY1BG1ZrPv9Ydl1eQlnD1A=
Subject key identifier:   D4:E3:95:FC:7B:1D:19:07:A7:E0:74:9A:7C:84:21:75:FB:05:FD:17
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Certificate issuer:       /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial:       0193568A9BBAE9A2BA67F0381FC1F63F140E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 01:02:24 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:24 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:24 +0000
Files and hashes:         1: 0t9qxhfeKR6HiMiXGjmhWzSmyxU.roa (hash: f+92wicWkUe82RzoYNoqNr/jWD/a7CmFDd4kW49DZDM=)
                          2: T-gY9ak4rbVY5Y-DkpzjJTyaxeg.roa (hash: 1dzBpMdFrAohllcrhN+4b2vAr04G3zRkvuNc8NYazX0=)
                          3: iib0dtYIYlrR_gblK5dKn2bwFBo.crl (hash: TxMm2L9lY0N6ieOHhbXKBL0kEWCH1yejE0ipiHgtPEI=)
                          4: lXgnt0gq8LgxQA9NNaGF3dr-cFE.roa (hash: JwXK9WoZD+Ll2B0gk3nO0GTP2iubH4nqQeuuPUqA5+M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:9b:ba:e9:a2:ba:67:f0:38:1f:c1:f6:3f:14:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
        Validity
            Not Before: Nov 23 01:02:24 2024 GMT
            Not After : Nov 24 01:02:24 2024 GMT
        Subject: CN=d4e395fc7b1d1907a7e0749a7c842175fb05fd17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dc:6b:cc:ea:b2:12:e9:59:65:a9:b0:f9:a9:
                    58:04:51:b0:49:e0:27:17:aa:e9:13:a2:22:d6:82:
                    8c:10:20:84:12:8d:d0:fe:21:2b:9d:9b:93:1f:98:
                    3b:37:1d:eb:54:22:84:e0:7f:c0:48:4a:3e:b7:39:
                    d0:49:4c:86:c7:d3:4a:7e:f2:1c:83:96:44:f6:47:
                    b2:28:6c:74:70:af:d3:26:5d:ab:01:05:e8:4d:d5:
                    de:5e:74:1b:ff:13:cb:59:e9:23:e2:37:07:07:02:
                    ca:fd:fa:ae:77:9a:84:75:b6:f2:a3:64:0c:03:86:
                    eb:b3:ef:ba:4e:16:1e:dd:73:5e:28:7b:21:32:12:
                    22:cf:4b:09:ec:5a:af:3e:6f:20:cf:13:cf:c3:3e:
                    1d:73:07:a1:75:81:e2:08:63:80:f6:de:3c:47:7e:
                    15:96:7e:f1:fa:72:dc:ba:33:2e:b2:91:b6:e4:ae:
                    be:77:71:d8:82:56:ae:26:e5:be:0e:70:88:9c:2e:
                    69:80:d6:12:3c:23:37:13:b9:0a:dc:4b:50:aa:d0:
                    82:5a:5f:77:57:1a:34:08:a0:c6:b0:0b:38:c1:cd:
                    fa:64:59:3f:8e:8f:87:f3:68:31:fe:14:91:2f:ea:
                    a5:81:b8:93:d4:1f:f6:dd:11:35:91:ac:95:0d:c7:
                    c7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E3:95:FC:7B:1D:19:07:A7:E0:74:9A:7C:84:21:75:FB:05:FD:17
            X509v3 Authority Key Identifier:
                keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ef:72:e0:8d:c9:ab:83:ec:51:3a:45:f2:fb:ad:15:9b:21:
         b6:5c:1f:41:68:42:2d:4b:2e:73:39:eb:c2:98:9a:3a:bd:59:
         f5:52:c2:bb:3f:43:6b:aa:5f:69:ce:66:82:b5:59:a0:58:97:
         7a:50:23:0c:e1:6d:b7:eb:58:59:ea:2f:b8:ce:02:18:63:4e:
         47:e2:24:0a:df:b9:36:83:b6:b6:b0:ce:dc:8e:2e:21:00:72:
         f2:b5:88:e3:30:9f:52:ce:bd:b7:aa:cc:fc:45:e8:3a:5b:d2:
         66:4b:0a:f0:03:c0:77:b2:f8:e9:d6:87:cc:dd:de:18:05:0d:
         5a:ee:33:a1:80:32:f1:9c:5d:67:b8:61:df:ce:bf:98:bd:3e:
         d3:55:77:08:85:38:2e:3f:52:01:75:ed:6c:28:b6:61:31:42:
         44:2e:d6:f0:14:3e:8c:6e:c5:bc:72:03:30:1f:10:4e:98:33:
         af:68:e0:4e:1e:34:33:37:af:c5:91:6c:43:36:ca:0b:13:d8:
         f9:d9:97:a6:32:33:03:74:ed:c2:8e:2f:92:9b:58:5a:58:ae:
         76:6c:08:1a:d0:a5:4f:b3:40:d3:59:18:1d:02:ba:2c:ef:aa:
         b0:d4:60:5b:ed:f5:6d:7c:ea:17:35:fb:13:0f:5e:db:96:60:
         0a:79:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----