Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File:                     B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier:          ZFx1LixwIkno1scvLTIl439e8Qe2p1l3xocI/l+qp5U=
Subject key identifier:   27:F0:25:80:E3:61:8A:67:8D:89:6E:58:20:C9:D9:43:C0:0C:13:DA
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer:       /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial:       019356BFA058BC098CF47722CD68B5D49BF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 02:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:19 +0000
Files and hashes:         1: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: cjf6Yy04b+nammWoTg8+pvRyN4ERnr8H/ivjMxYj7Mc=)
                          2: HdNzKwswUIZpPPz8JLkFXvEIOGI.roa (hash: 767lqXY4cMMh/KSKkPNZJ3Sz1GVHWVLlBXY6eIjaCj4=)
                          3: Kfn7vj2lehtw-yq0YJyUnWHmiag.roa (hash: owudEGJ2EuChpZ/DsT/aEBKu76ZNOLLr6AmcBwswM7I=)
                          4: WOO8FaZSXaA9M3VAXuIAZLWTk6w.roa (hash: ZrcpBQwHmOVIMJwt0GH3ZF5Z0HPGFTnlYrNkWrzLU/4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:a0:58:bc:09:8c:f4:77:22:cd:68:b5:d4:9b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
        Validity
            Not Before: Nov 23 02:00:19 2024 GMT
            Not After : Nov 24 02:00:19 2024 GMT
        Subject: CN=27f02580e3618a678d896e5820c9d943c00c13da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:4d:9b:d7:76:9c:71:34:3a:ec:b7:28:1c:
                    c9:67:69:4f:0c:0e:f9:3f:fc:8e:08:86:8f:3b:c4:
                    07:b6:3a:6f:8d:f5:0e:89:37:16:0e:cc:b7:db:27:
                    1c:d0:51:6b:8b:59:73:1f:0d:8e:91:74:c3:09:e4:
                    a9:58:64:07:93:62:16:3a:ce:de:49:dc:28:26:60:
                    a8:d2:f5:26:a6:13:fa:3b:25:2a:e2:d0:93:33:49:
                    c2:f7:ab:c3:e9:22:6f:82:04:23:99:86:08:e0:d2:
                    27:e4:d1:fc:95:ce:a7:98:30:40:54:f4:5c:69:c5:
                    d2:66:c6:0b:64:e5:38:78:4e:5d:ae:25:56:ae:22:
                    b5:b0:9e:eb:10:cb:49:0e:52:f0:15:91:59:fa:5c:
                    7c:5a:ac:d9:01:78:78:06:b7:74:d1:f1:8d:07:cb:
                    99:df:d2:7b:d7:37:36:71:50:cd:ca:88:0b:45:fb:
                    e2:e1:c7:a6:e2:ef:08:ec:60:12:8b:ed:9a:ee:7e:
                    63:6f:48:48:ed:b4:7c:9c:1f:2a:48:1c:f5:cb:31:
                    f9:bb:6a:e7:db:42:9f:1f:23:04:dc:76:4c:86:43:
                    6e:1d:66:43:71:79:75:fd:bb:5e:4f:a4:a3:93:f3:
                    a7:c2:6f:d4:96:7c:67:b8:2a:d0:c1:4f:83:8d:25:
                    3a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F0:25:80:E3:61:8A:67:8D:89:6E:58:20:C9:D9:43:C0:0C:13:DA
            X509v3 Authority Key Identifier:
                keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:27:ec:0e:41:36:e6:7d:a4:bb:39:f5:5c:cd:f3:85:5b:a6:
         2a:fb:33:e2:9f:2f:9c:b5:0c:8c:74:f7:2d:d1:7e:b1:a3:39:
         fa:e9:a1:2f:c9:13:ec:5e:f6:7a:f8:37:c9:a4:bc:3e:9d:5d:
         b9:84:40:36:fe:78:5b:70:36:5d:1e:11:1e:16:4b:a1:85:01:
         36:16:68:c6:07:0a:07:30:6f:fa:77:31:dd:2c:dc:5d:9d:23:
         4d:78:90:f9:c0:bc:9c:82:a6:51:ad:3b:f8:f4:b8:4a:fd:d2:
         d3:5b:47:77:b9:68:29:fc:7c:55:e3:6d:c0:c5:51:08:5b:2d:
         b5:0f:35:a6:a7:2e:c0:cf:51:54:72:97:b9:db:1e:e0:b5:31:
         c4:5a:3c:05:99:18:1a:2e:b5:4c:45:7b:62:85:72:db:3c:2c:
         61:2a:cb:63:70:0c:77:53:52:aa:66:95:15:94:d4:63:ee:7e:
         80:82:bf:d3:01:91:a7:b4:b9:92:28:db:e0:9a:c9:10:fc:a1:
         2c:dc:51:42:3d:bf:13:1c:fe:20:d6:21:1a:d3:33:f3:ed:99:
         d5:89:b5:53:84:e8:c5:62:90:e0:a0:ac:7d:15:fc:6f:41:71:
         f6:dc:c7:12:e8:52:ae:d3:57:94:6c:b1:71:cc:4d:54:4f:20:
         84:12:2f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----