Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File:                     XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier:          YbBknnlALIeYoXrDIlfH8waOahSkjPAD2jncKtkvZZM=
Subject key identifier:   92:B4:CE:2E:CD:DE:56:90:36:BD:09:28:D2:62:E6:07:77:55:F8:8E
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer:       /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial:       0193549C1F26539E21790455DC0A83FF1096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number:          0704
Signing time:             Fri 22 Nov 2024 16:02:17 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:17 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:17 +0000
Files and hashes:         1: 6RBKAqggjec7fqJu8S0b9OHUJqA.roa (hash: bGQSSKjplcMFq9Qj6W1umq13pl7ZIN4nO1Gz5RwQgx4=)
                          2: D-Gs-2SD1PY77eRssGfvbkWIrY4.roa (hash: gWNa7e2+Wwn2m/kpuBmue1RJNasRwh2ea6Un53QzB4M=)
                          3: DexpTYz9TRL_9xZ64_7hmiiZv38.roa (hash: fR27O1uUfqM71FqtrlvQgUMyt7i2COdDN0cmI8Q7Z6A=)
                          4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: rMKAtFjLkamLag9uXNe72Qien7lj8S7AaA/AoPdhjM4=)
                          5: mu7TvsuJqYdSpNUItYdo4FFUDhc.roa (hash: rz5WXPw5usbJ/nuOXs7HLweGW5GgFxOr9HbKzHDRwps=)
                          6: p9C5OmXhmyYk3I-pV0SEZsuVP4k.roa (hash: MfS9+u+DO9ViWOYzt78xK1takkhYVXYS1lbmc0npnmA=)
                          7: wVhNpsFOxUQNe8uxTDi4h38Gs9c.roa (hash: +/hnPOFf7hNwCCpdMJYdk1ev6cDqz6CkpB8jfLbmfR0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:1f:26:53:9e:21:79:04:55:dc:0a:83:ff:10:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
        Validity
            Not Before: Nov 22 16:02:17 2024 GMT
            Not After : Nov 23 16:02:17 2024 GMT
        Subject: CN=92b4ce2ecdde569036bd0928d262e6077755f88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:00:75:a5:11:77:32:b3:f7:b0:d9:2d:55:
                    92:ce:67:f3:7f:d6:1a:6c:42:c4:7e:af:28:24:d1:
                    c3:b4:cf:94:30:be:c0:b2:b8:bd:ad:b9:a9:8a:13:
                    28:1b:07:7d:98:72:86:eb:36:96:20:11:f0:52:cf:
                    af:dc:7c:dc:4f:61:33:2d:33:58:78:65:67:2e:bc:
                    5a:b0:cc:09:21:9c:45:7e:70:17:b5:3b:cb:27:5b:
                    8e:72:f7:eb:64:f0:60:6b:23:14:de:bc:41:11:cb:
                    69:06:15:b4:57:b5:0b:df:29:a6:ee:63:dd:6f:c2:
                    93:03:75:c9:6a:9d:9c:d8:5e:4f:14:ef:b3:12:ec:
                    b4:6e:f6:3b:79:66:6b:70:2a:d8:97:3c:5b:0c:d2:
                    a8:0d:95:97:dd:a8:2b:92:ed:46:bc:29:5f:86:5f:
                    f6:5a:fc:78:f3:03:35:47:d2:36:b3:3a:9b:6c:27:
                    7b:ff:e5:10:d1:6e:86:b0:34:75:38:f5:d8:2b:c0:
                    4f:a1:07:71:0b:18:49:4e:65:8d:cc:80:e8:84:cc:
                    f6:0f:7a:9e:42:89:6a:13:56:78:a6:f8:7b:a1:e8:
                    72:28:36:43:1a:19:05:4e:7b:c0:99:64:80:fc:41:
                    eb:2e:10:3d:85:11:f5:fd:dc:0a:1d:6b:a9:ab:dd:
                    b8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B4:CE:2E:CD:DE:56:90:36:BD:09:28:D2:62:E6:07:77:55:F8:8E
            X509v3 Authority Key Identifier:
                keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ff:f4:ff:2b:cb:1f:3a:0f:ac:f3:ad:78:a8:d8:59:96:1e:
         ae:da:6f:2e:b9:dc:3d:87:03:a6:7c:f7:b4:a9:f6:e7:58:07:
         ac:74:af:d4:f0:38:22:36:e2:07:3e:fa:ac:30:e8:8e:e6:a8:
         0f:b9:92:29:f9:8f:49:c7:c7:3d:3a:32:6a:61:3b:5b:59:ab:
         eb:29:db:ce:b3:25:4c:e4:66:ec:2e:a9:be:3d:2f:57:d4:73:
         59:fc:bb:6a:2e:47:7b:7b:1c:2d:20:c1:a9:4f:ac:55:b0:ac:
         3e:42:eb:c2:0b:5c:bb:24:8c:ca:79:76:6c:67:a7:b7:18:0b:
         d8:15:00:4d:08:60:20:0d:29:1e:af:c3:03:d6:ac:14:37:55:
         09:3c:31:62:a2:bc:ae:c5:4d:b4:f2:49:bc:86:81:5e:b3:da:
         99:c3:99:b1:9c:60:c2:fb:4f:60:14:59:8a:60:76:9b:70:4f:
         bd:82:a9:92:52:fe:f9:ab:ed:80:18:b3:4c:18:b4:00:ad:54:
         2e:f0:79:23:c7:24:6c:54:84:1e:12:b0:d6:e6:ed:78:ed:42:
         64:c6:a6:5f:41:60:df:83:b4:d0:97:d3:2e:83:6b:9c:8e:4c:
         46:b0:13:c7:25:e5:44:4e:0a:3c:a9:79:4a:b0:39:26:14:45:
         42:d9:61:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----