Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File:                     PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier:          67MYG+xrNdh8mHPe/R5Il+pOPNULnhMeXlLjoHRCiaY=
Subject key identifier:   E5:A6:6D:27:CB:3A:31:E3:83:29:72:05:56:63:01:AB:2D:96:47:26
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer:       /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial:       01936AB4245EBFAA3F4366E4E1B20515C6BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 23:00:10 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:10 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:10 +0000
Files and hashes:         1: 9mviu7JST6AIvEKX9gHv8L_wXHY.roa (hash: sNtGVmRruhOkuzd1VXvV+YvrxaMCplBAyvla2w7+4Vc=)
                          2: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: 9nSIOfShZXqsmNlBvnwQKi0XCm3/vvwiYLYkRPgXg0w=)
                          3: ePVmukbUOzwmxyyVm5H20Via1fw.roa (hash: vJQk+gAZ6WQzTda/ofKWEYfW4iOsF6E/xJtNrCeY8Cc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:24:5e:bf:aa:3f:43:66:e4:e1:b2:05:15:c6:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
        Validity
            Not Before: Nov 26 23:00:10 2024 GMT
            Not After : Nov 27 23:00:10 2024 GMT
        Subject: CN=e5a66d27cb3a31e383297205566301ab2d964726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:6c:e4:cf:82:7f:a9:10:c7:52:88:65:cd:
                    de:af:d7:09:6e:b2:59:0d:bf:5c:c8:0d:9e:32:ff:
                    b6:9f:04:b1:3c:89:95:c6:36:8e:bc:b3:e1:17:7e:
                    7a:7d:4b:31:1e:7e:85:2d:3d:18:56:d3:00:6a:1b:
                    77:b2:04:e5:e0:bd:a7:64:5c:c5:77:d8:f8:6d:bd:
                    b9:ff:60:66:87:69:a2:41:dd:21:81:7c:90:11:2c:
                    7f:e1:ef:40:12:7c:f8:5c:64:21:65:8f:f1:a8:81:
                    0d:59:13:8c:9f:3e:a3:f6:97:61:99:c2:c8:36:58:
                    9d:27:bc:55:f0:bd:b4:89:76:d9:55:6e:9a:3d:59:
                    d9:00:ac:9e:62:f7:c2:d7:56:da:a2:29:f1:33:a2:
                    43:f1:be:9e:36:6e:e3:56:d2:f0:6e:a9:97:c1:94:
                    a5:3b:21:e8:05:61:9f:57:09:12:df:b9:9f:a6:c0:
                    b6:16:d6:c7:b9:62:81:c3:2b:d0:e9:e6:eb:70:cf:
                    3c:19:44:e6:79:ce:84:11:86:62:10:a5:14:0e:2a:
                    c2:33:46:21:87:83:00:b7:36:e9:1d:ae:7a:95:8d:
                    ac:25:76:29:4f:69:e7:ba:4a:ed:03:9d:29:01:ae:
                    1c:57:46:6f:9d:06:84:52:02:4e:bc:75:ab:80:9a:
                    6b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A6:6D:27:CB:3A:31:E3:83:29:72:05:56:63:01:AB:2D:96:47:26
            X509v3 Authority Key Identifier:
                keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:35:b5:0e:d4:d9:74:0f:27:16:af:c7:8f:7d:7a:08:9d:02:
         20:d6:43:db:af:d3:14:da:b6:04:5f:17:52:dc:88:09:69:47:
         c5:44:5e:7a:ae:a0:de:88:76:45:dd:4b:5d:d9:24:36:e5:e1:
         a2:f2:ef:7c:28:bf:64:40:ae:30:c6:68:d2:bc:8c:57:71:b4:
         d9:e5:bb:6e:e3:23:89:a0:88:a9:4a:c5:79:b8:b9:b4:31:60:
         7d:e5:7d:a1:f5:00:b0:0c:34:cd:8a:47:16:66:5a:2e:87:70:
         8c:e3:66:0f:39:75:44:c1:92:74:12:72:5d:58:46:7e:5d:2f:
         f0:1c:e9:cf:87:09:4d:10:8e:2b:d5:b1:5d:a5:da:b5:d8:fa:
         97:5a:5d:d9:9e:fa:ae:86:84:b6:5b:02:d3:52:08:4d:ad:43:
         c6:44:ae:27:78:81:16:4d:a7:56:14:8f:03:c0:33:06:44:13:
         39:18:09:2f:cd:44:e0:19:dc:1c:6f:9b:62:81:7c:a8:0d:11:
         0d:87:d7:b6:fa:a7:80:d2:37:17:1c:2c:5c:97:95:40:c3:fa:
         7d:b8:90:35:9b:99:70:8a:16:dd:fb:41:ab:8e:50:f0:6b:a2:
         e2:78:4b:3c:0a:21:3f:92:ec:5d:8d:0f:c1:75:f3:ff:59:41:
         79:41:36:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----