Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
File:                     jO6IBP9wN24q_iGr-T4ijVr91Qk.mft (raw, json)
Hash identifier:          H/bOaUfQ1ml5BIkBDZiX5dSEdCU5x0ZQoZ6z0D3sbzs=
Subject key identifier:   08:A6:7D:F5:7B:0A:91:DD:F5:EE:A0:AE:C3:60:13:70:04:C4:B3:B8
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Certificate issuer:       /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial:       0190313B7BECC001A87B0F38CB262572EC70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
Manifest number:          11CE
Signing time:             Wed 19 Jun 2024 16:01:40 +0000
Manifest this update:     Wed 19 Jun 2024 16:01:40 +0000
Manifest next update:     Thu 20 Jun 2024 16:01:40 +0000
Files and hashes:         1: 1OYBomsjCdV2FP2O5QRkkqfHx4E.roa (hash: IhWRwZCTjwvyFqzHa8+IPQYMZJ2KaULxkc2eQ4xPrcQ=)
                          2: by-wLUNNihC4Hb_uDZQssxnsRyw.roa (hash: jYa3e4ItypYJiozGZrbGLe90DjxGQc1Yo3etcVuJCqE=)
                          3: jO6IBP9wN24q_iGr-T4ijVr91Qk.crl (hash: JJI3LaHjd+Mu/L0JUmSJ1i1XovzWli9tWcA8/xJBlUg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 20 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:31:3b:7b:ec:c0:01:a8:7b:0f:38:cb:26:25:72:ec:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
        Validity
            Not Before: Jun 19 16:01:40 2024 GMT
            Not After : Jun 20 16:01:40 2024 GMT
        Subject: CN=08a67df57b0a91ddf5eea0aec360137004c4b3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ac:92:bf:84:bb:2c:fa:4a:22:34:1b:21:1f:
                    ac:8a:00:6b:b2:72:9f:83:07:85:ec:74:a6:5a:ff:
                    64:fc:5d:6a:0f:78:c1:82:1f:17:57:99:da:fb:d0:
                    cd:22:b5:10:c1:bb:1b:d8:81:b0:05:75:8c:62:88:
                    03:3c:72:51:07:74:af:38:34:7f:06:2d:be:4c:65:
                    58:99:03:12:52:a2:2e:f0:3b:9a:95:94:a0:e2:5b:
                    57:84:a0:7e:a5:25:25:94:f4:74:94:e8:8f:1a:7e:
                    67:b7:cb:04:e1:a1:9d:df:5b:36:1d:34:2a:0b:5f:
                    ef:ad:77:d5:27:cd:39:1f:55:55:85:cc:d5:56:f5:
                    5d:22:c4:19:f9:2a:56:a6:1a:b2:5f:03:50:6f:59:
                    15:96:f0:c7:5e:92:7f:29:f1:f4:43:e4:a0:6d:ad:
                    09:61:8d:25:c4:31:e5:4e:46:e1:73:ad:66:cb:a6:
                    58:6c:38:c2:2b:ac:e0:58:f8:00:8f:ee:8e:27:40:
                    22:38:11:a7:a2:ff:07:8b:65:93:af:00:5e:b0:e1:
                    62:fe:64:fb:49:0a:c5:96:08:85:83:3c:c6:36:f2:
                    96:78:4c:62:85:aa:e2:37:a8:57:f3:9e:29:18:b5:
                    1c:8e:c8:3f:a1:25:f5:f3:ac:e9:29:c7:ef:d7:dc:
                    2f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A6:7D:F5:7B:0A:91:DD:F5:EE:A0:AE:C3:60:13:70:04:C4:B3:B8
            X509v3 Authority Key Identifier:
                keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:59:6c:b2:fe:10:4c:6f:ba:5e:2e:b3:64:19:a3:3d:e3:ff:
         b2:fd:4c:74:5c:98:5e:f9:98:10:22:47:1f:7b:3a:a5:ad:4d:
         31:4d:bf:70:3b:56:64:89:dc:0d:23:40:3e:c3:2c:ed:54:95:
         1f:7c:0a:72:39:af:27:54:4a:a5:73:d9:c1:48:74:83:18:b5:
         5f:f5:52:eb:0a:9d:09:70:35:92:f4:96:6b:88:7d:75:f4:a3:
         a5:92:60:1f:3a:b9:9a:8e:64:7e:18:88:b7:a3:06:e3:da:b3:
         c0:23:26:f3:3d:e1:aa:66:cd:e3:98:91:fc:79:7a:f8:96:ed:
         3f:ed:1a:2d:f5:0e:49:d5:9a:c2:18:fe:61:2a:1b:a8:f0:8e:
         d4:ad:ac:dd:f0:a7:42:11:eb:e4:f2:df:df:75:c5:a6:8d:74:
         1a:9f:1c:92:2f:28:47:3f:0e:5c:ab:48:ea:c8:76:74:04:fb:
         11:9c:c9:f1:ef:4c:11:6b:51:d9:22:1d:99:d9:f9:ce:8b:ae:
         2c:c8:e6:2b:a7:96:51:cb:0b:fb:0a:11:13:3c:42:be:c8:09:
         f7:83:b0:15:9f:e8:06:2e:f1:97:7a:24:79:6e:25:69:ed:9a:
         54:8b:8e:30:e1:a1:08:d5:02:a5:a2:b5:77:d9:b5:ae:9e:66:
         31:3e:c3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----