Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
File:                     oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft (raw, json)
Hash identifier:          Y40J4ZrS8vR62NlhsLY2ujsrumyhBzETSRxsPWad7gc=
Subject key identifier:   D0:71:9B:F2:47:48:27:61:6F:A4:A9:E1:2C:25:19:40:B4:4B:6D:2F
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Certificate issuer:       /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial:       01935764B19431A544C471F05DC927D6D818
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
Manifest number:          5C
Signing time:             Sat 23 Nov 2024 05:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:37 +0000
Files and hashes:         1: NCMHt49-X911SswbKdxxu-8iwgM.roa (hash: T4Ldjjx+H+OOKh+TtNt7Ny1i5kKRD+TD4UDE8r2aNXE=)
                          2: oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl (hash: f0L9hC0ArPmZLTt12wEvHjaBp08c+YZwkByTXVvySG8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:b1:94:31:a5:44:c4:71:f0:5d:c9:27:d6:d8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
        Validity
            Not Before: Nov 23 05:00:37 2024 GMT
            Not After : Nov 24 05:00:37 2024 GMT
        Subject: CN=d0719bf2474827616fa4a9e12c251940b44b6d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:f0:31:f2:d5:cc:70:dc:aa:12:44:7d:9f:
                    9a:e4:a2:f3:ce:66:24:92:68:af:46:bb:d4:7e:94:
                    7e:0c:74:d6:1e:2b:21:9b:15:5f:49:36:59:5f:61:
                    da:e2:e9:d5:d4:e0:67:be:70:8d:b6:34:9f:86:b7:
                    0e:eb:4b:10:ff:6a:e7:63:62:6c:7f:f7:2d:4c:b6:
                    a6:8d:f4:28:b3:bd:75:f2:61:d3:79:ac:af:51:97:
                    c7:6c:00:1e:3c:05:dd:bf:3c:00:05:f1:3e:6d:65:
                    0d:5b:9f:0c:b4:2f:69:13:58:6d:a3:3c:c7:4b:1d:
                    b0:5c:b5:c2:31:78:2e:bd:7e:4d:7e:f9:a0:c2:9f:
                    99:d4:35:eb:f0:a4:6c:d1:c0:ac:08:63:97:84:b4:
                    50:e9:dd:b4:e5:af:d6:39:02:b2:e0:08:de:3e:89:
                    5a:3a:6f:0b:1b:74:94:dd:df:49:12:65:fb:0a:e8:
                    4a:42:b5:09:7f:8a:88:a8:ba:70:77:5d:33:65:d6:
                    d1:9e:c4:03:67:36:f2:21:51:75:d0:c4:9d:68:37:
                    d3:0f:84:0e:15:9e:86:78:61:36:0e:22:13:2e:82:
                    67:ce:cc:60:25:e1:87:d9:9c:fb:80:fd:c5:41:b3:
                    0e:e6:5f:9a:ed:d2:25:9d:8d:51:c6:f6:42:4e:32:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:71:9B:F2:47:48:27:61:6F:A4:A9:E1:2C:25:19:40:B4:4B:6D:2F
            X509v3 Authority Key Identifier:
                keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a8:8f:0e:1c:f2:7b:6a:fc:88:18:44:6b:f6:b5:4b:92:52:
         4f:46:70:d1:f4:13:da:59:fe:49:23:dd:9f:a1:ca:ca:d7:66:
         00:14:19:a4:16:84:0d:f5:f8:05:16:78:46:15:f2:ea:30:42:
         b8:15:fe:73:a3:95:22:bd:21:e1:76:e1:00:8a:d0:b1:e8:9b:
         72:3c:1a:19:1f:8c:10:f5:67:0e:87:98:5c:2b:06:31:a1:3c:
         d7:87:c9:29:39:f8:22:ec:ee:9c:df:1d:52:10:f6:b1:32:31:
         8f:8b:4c:23:eb:3e:4a:66:a1:cd:db:d3:df:fa:19:f7:08:78:
         63:88:2f:14:c1:8d:5c:08:c6:03:27:d6:b7:7a:bb:b6:26:38:
         d1:51:cb:44:5b:3d:52:e5:46:30:f1:51:a0:c3:8b:26:e7:48:
         bc:fb:46:a3:35:1e:c5:5b:ab:75:8c:9a:55:ea:63:eb:a4:38:
         50:d8:9c:36:95:7a:bc:c8:df:77:8f:c2:0e:bb:a1:e1:a3:26:
         c4:de:a4:45:75:43:58:07:15:c3:f3:44:55:d5:12:fc:e4:7c:
         ff:84:03:2a:27:e5:15:9c:04:90:cc:46:bd:28:18:de:1a:88:
         47:67:94:4b:2d:87:c7:67:f8:bb:fb:34:58:d0:14:71:c9:68:
         93:fb:08:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----