Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File:                     7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier:          o3ltvDNDbQcWLe5W60AU78ZM2FpotQdR0CYXY90mCKs=
Subject key identifier:   37:34:29:3B:98:4F:C5:F8:D0:4D:9F:1E:05:45:E0:69:95:E6:92:0A
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer:       /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial:       0193520799E6C70D11A666F6705A9BFE5E53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number:          136D
Signing time:             Fri 22 Nov 2024 04:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:49 +0000
Files and hashes:         1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: clS/7xXT08cIC1Hhfa4JdGmGkTH5L7B59aGBX+H4wps=)
                          2: TcxgpyuKmrkeaZ4z6fpQcufzP_A.roa (hash: sIJzganOXNme454OPq4R7JRICUkIZTkkpufACHGn038=)
                          3: rKRISH67faN0wFiXDU3DozAjq00.roa (hash: ohnSBGFtS9K2nRmmgFJCVLT1AY5SkJmXG8KfDI/5Usg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:99:e6:c7:0d:11:a6:66:f6:70:5a:9b:fe:5e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
        Validity
            Not Before: Nov 22 04:00:49 2024 GMT
            Not After : Nov 23 04:00:49 2024 GMT
        Subject: CN=3734293b984fc5f8d04d9f1e0545e06995e6920a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:28:41:30:d8:5e:75:f0:28:6e:94:4c:2d:
                    15:be:b8:c7:01:2a:04:4b:c3:cc:b3:24:06:7b:67:
                    f1:71:c7:27:d9:71:01:10:e5:86:57:9f:b8:e2:cc:
                    f1:14:5a:fb:fc:c0:a0:fe:5d:24:c0:f2:62:06:66:
                    23:fa:19:0b:d2:24:38:a8:40:92:77:a9:26:fa:f3:
                    82:b9:8d:33:b1:19:f8:fe:15:05:fd:43:90:ca:34:
                    a6:c4:3e:f8:be:95:0f:0d:96:29:9c:13:b3:8d:4b:
                    a1:54:1f:15:f4:78:2d:3a:72:d5:8e:f7:d1:a1:86:
                    62:b3:f5:2f:52:bb:3a:ca:5b:3f:6b:32:30:45:45:
                    8f:f0:c0:e9:c3:47:31:50:b0:ba:2a:8c:55:0e:5b:
                    55:cf:58:a7:97:2b:65:0d:3e:fe:92:29:9b:df:b3:
                    ce:2e:b9:4a:90:0c:f9:64:18:49:76:d1:a6:a9:9c:
                    53:95:00:72:0e:75:c6:8e:9d:e4:b3:c9:e1:cf:f1:
                    81:ec:04:c4:ef:98:62:d9:e0:30:10:5e:2a:64:ce:
                    83:63:85:28:a6:6f:87:e7:ec:25:3f:fe:44:11:3f:
                    b9:18:e6:8c:20:d1:86:b7:1a:06:83:91:42:7c:dd:
                    89:9c:f3:3c:8f:d7:07:2d:b2:4e:63:bb:87:77:50:
                    61:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:34:29:3B:98:4F:C5:F8:D0:4D:9F:1E:05:45:E0:69:95:E6:92:0A
            X509v3 Authority Key Identifier:
                keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ba:51:44:b0:a9:b3:67:56:81:4a:27:75:5e:33:80:53:b8:
         a7:84:1d:08:00:96:8e:2c:e5:a2:85:d4:ab:71:92:b0:79:85:
         53:71:54:5a:f7:49:0b:8a:92:d0:ed:c0:11:a3:61:7f:24:f2:
         1b:8a:b6:86:01:fb:14:5c:b6:a7:40:0f:1f:61:00:38:c8:c2:
         3a:e8:d3:ea:cd:01:75:9f:ff:8f:3f:30:f9:ef:f3:2e:df:6b:
         17:89:01:fb:e9:59:f7:65:5c:2a:1f:c2:4f:e6:4e:29:b1:19:
         81:93:ef:95:b2:47:43:b7:12:e0:86:99:ba:72:57:3a:98:4b:
         03:fa:69:24:49:26:fa:c2:18:bb:ca:ee:aa:4c:a6:c2:76:e1:
         81:d9:73:e7:9a:27:03:8b:ef:c8:64:e9:f5:4c:31:0a:18:59:
         68:51:fe:bd:b1:db:99:80:c3:94:50:9d:0e:b8:0a:ea:5f:d3:
         2b:3e:d2:85:f6:f0:b2:ac:5f:bc:4f:c3:71:ad:ca:55:4d:09:
         1f:8a:ec:e5:99:14:c2:75:aa:61:26:06:fd:17:78:ee:25:51:
         98:24:54:92:2f:42:ca:cc:ae:a3:bc:26:20:a2:9d:c0:e7:c1:
         a5:dd:64:ae:f7:41:1d:92:02:9e:25:d5:ee:8c:43:99:12:a0:
         c9:f3:62:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----