Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File:                     BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier:          abSKZe3afpJAuZRiLS7WlgEyPS9RHyyIheKUFAOhXEA=
Subject key identifier:   F4:53:1E:D0:D9:77:2D:30:2A:9F:FC:5B:BB:1B:69:3A:84:D6:B8:16
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer:       /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial:       019355E3E8CA05B215AB73F596A02F6678CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 22:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:19 +0000
Files and hashes:         1: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: wcOr6H583TnQWJ4IPWfRtepeTE0WjRDsuluiAyCgAm4=)
                          2: ibU6pDWbqBkDxTZNDRWc3tg9RXs.roa (hash: VJWotTfXivUwS+LqgheMrXL+/hpyIrB9X5QtamS7mac=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e3:e8:ca:05:b2:15:ab:73:f5:96:a0:2f:66:78:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
        Validity
            Not Before: Nov 22 22:00:19 2024 GMT
            Not After : Nov 23 22:00:19 2024 GMT
        Subject: CN=f4531ed0d9772d302a9ffc5bbb1b693a84d6b816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:4f:f4:49:49:72:f1:bb:7c:f3:e2:33:82:
                    a7:af:0a:18:cc:53:1a:75:1c:20:f4:99:42:1a:41:
                    cb:f6:39:5b:60:0b:b3:a2:3f:90:f6:da:b7:30:fc:
                    ef:47:e3:4a:37:f1:ef:b5:57:09:cb:fc:25:f7:07:
                    7e:b1:ea:5f:55:9b:f7:d9:ef:f7:b4:3d:ba:99:4a:
                    9d:5f:85:64:41:9d:11:0a:a7:fd:b1:78:3a:32:26:
                    d0:ec:9b:ac:d9:fe:82:04:bc:a3:b5:e8:93:a9:08:
                    91:16:bd:43:11:82:c2:c1:e6:d0:d1:d2:9a:f3:f1:
                    ad:32:48:33:59:30:3a:29:14:85:aa:5e:cb:c4:e3:
                    d6:6b:10:65:df:b5:fa:e6:2e:6c:81:00:1f:01:41:
                    0a:25:84:1a:1c:f5:cb:1c:c3:3c:25:8d:34:57:05:
                    cc:9a:25:55:ec:4a:aa:ed:9f:fa:73:e9:83:20:a4:
                    16:5a:fe:95:1f:36:bd:72:2b:94:9b:ac:bc:5d:ff:
                    cf:5c:92:44:0b:bc:be:de:bd:9d:6d:ac:e4:1b:d9:
                    bf:4f:91:95:c0:c1:db:22:80:49:d9:d3:bc:2b:43:
                    db:65:d9:20:f4:17:b1:9b:f7:18:aa:43:2d:a9:71:
                    6f:ec:ae:9e:35:9a:7b:75:47:70:14:d5:13:96:e2:
                    29:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:53:1E:D0:D9:77:2D:30:2A:9F:FC:5B:BB:1B:69:3A:84:D6:B8:16
            X509v3 Authority Key Identifier:
                keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:fb:06:a7:28:43:52:ac:4f:b6:ad:92:fd:df:3f:6d:32:
         2c:7e:a1:90:c8:70:41:38:fc:7f:33:f8:26:88:28:22:a5:44:
         72:07:9b:cc:7f:80:45:a1:d8:66:06:63:fc:35:8c:4a:0e:39:
         60:b0:24:7a:75:c0:69:20:42:93:16:97:8c:b9:fb:a5:1f:b1:
         65:30:32:c7:56:d6:d0:ec:a5:60:be:e9:12:4f:cf:18:df:2c:
         28:af:dc:f8:f4:aa:2c:17:4b:17:41:36:a7:4e:4e:63:7f:37:
         ea:f6:ab:ad:1d:1b:e0:a4:ea:df:c4:d5:3f:24:7f:2f:75:05:
         d7:34:8d:f6:07:a7:d7:ee:a3:3d:a3:d4:7e:aa:11:88:a5:11:
         98:07:2f:f4:0b:7f:4b:cf:1b:0b:df:6d:77:37:38:7d:43:6e:
         1c:78:33:c4:72:aa:58:45:d5:d1:23:ba:75:44:f0:7c:49:43:
         ea:db:85:2f:66:ab:3a:72:0d:42:9b:c3:7d:26:ea:77:a2:9a:
         82:e9:b0:65:97:0e:1b:83:ae:6d:0e:ec:df:97:6a:8a:55:ac:
         c4:12:98:88:9d:76:f0:f1:69:97:33:1c:e7:ec:bb:aa:44:ef:
         ca:a6:d2:b0:88:10:b1:12:c3:be:21:9d:cb:8b:37:90:9b:5b:
         bf:a9:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----