Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File:                     k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier:          D01ihbCeKBkB1zJ2Wrz2XXVgeOxqLPyDUafjwRRtGPc=
Subject key identifier:   2F:24:58:16:F8:3C:CB:2A:FA:D6:3F:DC:76:B6:A3:EB:DD:2A:A7:6A
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer:       /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial:       0191FAECB12274ADE71D9017C75F1C583717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number:          F1
Signing time:             Mon 16 Sep 2024 13:01:41 +0000
Manifest this update:     Mon 16 Sep 2024 13:01:41 +0000
Manifest next update:     Tue 17 Sep 2024 13:01:41 +0000
Files and hashes:         1: huKOtgGt02ZY1frlYU6RtdUCNJ4.roa (hash: wqdiNUkTUCUL0bvwliDo1jsS1T49LH2rytzDcKyavEA=)
                          2: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: sxbY+npSj8KyhuglahuYGQHJ48+7kxCSleIsDo4aJBc=)
                          3: nf_gt-uFFwZdCQPvoCzArcOdCrk.roa (hash: DVxDdsHkr2411WAslPnPQ8q7DYGTBx1Rwm95ZhOJQUg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ec:b1:22:74:ad:e7:1d:90:17:c7:5f:1c:58:37:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
        Validity
            Not Before: Sep 16 13:01:41 2024 GMT
            Not After : Sep 17 13:01:41 2024 GMT
        Subject: CN=2f245816f83ccb2afad63fdc76b6a3ebdd2aa76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:15:bd:08:d5:73:60:6f:5f:11:ed:26:6a:
                    f6:ea:1d:7f:01:0c:3f:35:7c:3c:f2:28:c7:a0:27:
                    8d:66:62:e5:17:c4:df:85:ba:81:fe:0e:b9:33:9d:
                    f0:8d:fb:61:c9:c1:bd:ed:09:bc:ff:78:a6:1c:58:
                    de:3e:38:3e:62:d3:47:01:91:dc:33:97:30:a1:33:
                    f0:89:98:b3:5a:98:5c:38:2d:a4:f3:9b:56:fa:f2:
                    ba:e6:02:c0:c8:c6:e6:8b:8d:87:59:57:d3:4d:d2:
                    ad:25:28:36:b9:1e:fa:d6:b2:da:fe:d4:b3:82:47:
                    8d:2d:64:5d:58:c1:d2:c8:a5:a6:ed:ae:cb:44:fd:
                    1e:f5:1a:f1:0d:ae:fe:7b:f8:33:5b:64:ce:88:ab:
                    9e:89:e5:ab:39:b8:e0:78:85:dc:ed:1a:f5:04:1e:
                    ae:80:8e:e3:dc:0d:bc:a5:5b:21:14:68:95:e8:72:
                    6e:08:54:cd:ef:a4:22:c4:22:49:15:73:9c:b8:e7:
                    6b:c1:c6:10:a5:a1:f6:3f:e3:8c:a9:a9:33:cc:60:
                    f9:68:a6:27:fc:4b:de:6e:e2:08:09:c5:01:be:95:
                    d5:b3:27:77:e5:ab:ab:43:d2:d9:44:df:70:8d:94:
                    8b:b1:26:8d:44:0a:9d:00:ec:07:b1:52:29:6f:48:
                    90:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:24:58:16:F8:3C:CB:2A:FA:D6:3F:DC:76:B6:A3:EB:DD:2A:A7:6A
            X509v3 Authority Key Identifier:
                keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:37:7a:6c:2b:c5:e7:9f:26:87:a8:11:0c:d5:c6:4c:59:80:
         7b:88:a0:23:83:c4:2c:5d:aa:74:92:70:f9:4f:ff:6e:8c:12:
         92:6e:c9:42:2f:19:b6:48:bb:4b:8a:1e:91:5d:d4:21:3a:e1:
         d9:01:ec:d0:b6:f2:70:70:7e:06:e5:f3:98:65:31:cd:5c:2b:
         9f:fa:f4:b0:e0:39:5f:42:05:42:c1:74:b1:07:21:ac:75:2c:
         8b:6a:2e:28:e5:94:6b:56:bc:06:1a:e0:35:3a:66:62:e5:8f:
         88:4a:61:f0:24:0b:fc:ec:4c:42:80:db:1c:0c:6b:ce:44:54:
         29:79:34:db:59:0f:85:89:e3:bd:27:39:87:84:aa:17:a3:c5:
         c4:7a:00:a8:8a:75:a1:5f:c3:3a:f5:df:55:a8:33:ec:41:a8:
         5e:7a:ef:3a:81:63:23:03:0b:ba:d5:63:38:68:a4:5e:47:e5:
         6b:0e:6d:48:1d:d0:ec:06:a2:f7:53:bc:3f:b3:ec:4c:de:0e:
         c1:eb:f1:6f:8d:52:0a:78:cf:55:0b:f2:e8:3c:56:c7:51:3d:
         85:2d:6a:e4:1b:f4:61:96:05:a5:08:2e:f5:86:16:6c:a3:23:
         41:b7:79:64:13:16:2e:10:52:4c:4e:6d:30:43:f3:1f:02:07:
         69:15:13:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----