Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File:                     5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier:          +BrcFDVO+lHxjXQvq6w9pyFHaFPUH2f5BKFBvd9SH3E=
Subject key identifier:   E9:0E:96:7A:76:FD:E6:F8:76:2C:3E:E0:C5:B4:DF:7E:81:EB:26:7C
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer:       /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial:       019355E48F7B05A37AB319672681F5052190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number:          0A67
Signing time:             Fri 22 Nov 2024 22:01:02 +0000
Manifest this update:     Fri 22 Nov 2024 22:01:02 +0000
Manifest next update:     Sat 23 Nov 2024 22:01:02 +0000
Files and hashes:         1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: uzN1CtxkfSaof8nlOclhXJqRormYLq3cIee3iymVPjk=)
                          2: LDDZckQu8etcoEliDlwcSGLi7Wg.roa (hash: 5cDxW24hT695hAk3sTvnzRnASpuCS2xwFxSE0g8f/+8=)
                          3: RMCegWbK44mDkBYwVAYKpKopYEs.roa (hash: zbZ4GAnGgdz4pVtHPNevbp6HO/aEDiIInWfMYePeoZ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:8f:7b:05:a3:7a:b3:19:67:26:81:f5:05:21:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
        Validity
            Not Before: Nov 22 22:01:02 2024 GMT
            Not After : Nov 23 22:01:02 2024 GMT
        Subject: CN=e90e967a76fde6f8762c3ee0c5b4df7e81eb267c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3a:02:ce:38:69:e1:79:d2:c3:99:ec:7a:46:
                    dc:a1:39:a5:4d:8c:e7:4c:00:f5:36:f3:b9:13:88:
                    3c:38:0a:90:da:6b:f1:78:0c:4b:54:47:ab:f9:a2:
                    93:43:68:a0:0f:cf:e4:87:36:85:5a:09:2f:87:d0:
                    eb:e4:0b:b4:89:65:2c:5d:4c:02:87:71:30:29:7d:
                    e3:17:d4:02:9b:85:6f:80:06:af:66:6e:9e:ac:94:
                    ac:3e:a0:85:ac:06:5e:4e:ec:19:a0:27:77:f3:3f:
                    52:01:2d:33:f0:99:1e:14:6c:ec:15:f6:10:8d:27:
                    72:2b:22:52:39:ed:89:26:03:a4:e8:11:03:aa:9d:
                    31:34:6d:75:dd:1a:c2:57:0b:d2:ca:7c:c0:98:7d:
                    40:00:a2:8e:7a:46:1a:a4:ba:e8:2d:3a:05:f0:d1:
                    3d:e6:a1:14:d8:63:41:d1:e6:ff:ce:6d:82:c8:b9:
                    eb:e6:6b:87:0b:1b:e3:54:2c:e7:71:70:b2:30:93:
                    21:45:33:dc:39:da:1c:58:ac:81:2a:1e:fa:28:05:
                    22:10:2b:fd:0c:c2:4d:56:66:d2:68:92:eb:d0:75:
                    0d:9a:7e:d7:7d:e9:0b:56:88:23:94:e9:53:c6:72:
                    10:c9:63:9c:53:0b:19:9d:38:b1:60:26:9a:fd:c7:
                    f2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0E:96:7A:76:FD:E6:F8:76:2C:3E:E0:C5:B4:DF:7E:81:EB:26:7C
            X509v3 Authority Key Identifier:
                keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d2:eb:1a:99:36:dd:13:96:47:a4:08:ce:dd:fc:5f:be:0d:
         91:4e:44:c6:f8:4b:cf:14:5d:3d:a6:28:6e:9d:36:d2:42:eb:
         61:01:74:66:1a:53:72:9e:0c:25:26:98:65:bd:f8:7b:78:11:
         e8:ea:18:4b:7d:0d:a3:d4:1b:4f:72:f3:d4:45:d6:89:48:15:
         ca:c9:b9:0c:56:d9:b4:6e:1e:63:45:d2:10:a7:4f:59:96:12:
         5b:01:5b:95:d2:6a:23:b6:b9:fb:02:fc:b8:16:21:67:ca:08:
         cd:7b:b1:9c:d4:0b:dd:cb:f5:91:45:d0:ae:d6:c8:b6:93:bd:
         d6:57:ba:f1:71:b9:62:c5:03:aa:22:41:5a:15:9a:8f:42:76:
         93:71:78:96:13:b3:39:74:26:50:ea:2c:cd:31:ec:57:30:9b:
         e7:be:8a:a7:5b:65:85:50:14:b6:0b:ca:e9:8b:0a:12:d0:f2:
         ea:c2:02:16:89:9a:75:d8:7d:25:5d:01:91:2f:dc:6f:3f:e4:
         9e:e9:80:37:68:20:1f:57:69:d8:52:94:e1:fa:02:17:fa:ae:
         b3:88:c2:19:a1:36:0b:8d:55:7b:5e:3c:56:4d:bf:23:6c:9a:
         75:53:60:3b:56:aa:28:08:26:f8:81:1e:ae:18:67:1c:ae:c3:
         98:ae:c5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----