Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
File:                     jO6IBP9wN24q_iGr-T4ijVr91Qk.mft (raw, json)
Hash identifier:          nBH79XMBUuucbqhERBcrpphtCRsE6r2OFMDsXQWT6mM=
Subject key identifier:   3E:4F:C1:24:4B:09:0D:82:96:67:E6:74:B3:D9:73:50:6A:8F:D6:38
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Certificate issuer:       /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial:       019357650539DAD64C013061E7FC7AF3948D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 05:00:58 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:58 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:58 +0000
Files and hashes:         1: 1OYBomsjCdV2FP2O5QRkkqfHx4E.roa (hash: IhWRwZCTjwvyFqzHa8+IPQYMZJ2KaULxkc2eQ4xPrcQ=)
                          2: ZngrGbSuprFgLT8B_wvheu8uewk.roa (hash: s+tKdctUX5kzOCncjnXJDjhTu9fzTKkqS3eahVyzdA8=)
                          3: jO6IBP9wN24q_iGr-T4ijVr91Qk.crl (hash: UtkXwaggnqBNSTN4MOpgWJBvB+G/bMfbVe9M4JEjlRI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:65:05:39:da:d6:4c:01:30:61:e7:fc:7a:f3:94:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
        Validity
            Not Before: Nov 23 05:00:58 2024 GMT
            Not After : Nov 24 05:00:58 2024 GMT
        Subject: CN=3e4fc1244b090d829667e674b3d973506a8fd638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:b0:2b:80:eb:05:87:ec:16:ec:2c:db:cb:
                    23:33:70:c2:a8:c9:1c:30:24:24:35:91:74:e1:62:
                    01:40:c9:66:77:21:b1:7f:99:77:8b:84:e6:0d:ea:
                    77:3c:7c:13:be:91:af:67:8e:f1:15:ca:d5:f0:ca:
                    07:37:45:7f:8d:32:9a:b8:89:45:15:49:96:39:c2:
                    4b:88:a9:37:f5:ad:b4:2a:36:23:50:97:16:1e:b8:
                    34:f3:18:95:28:30:9d:5a:48:8a:a1:c7:76:35:e5:
                    71:29:8d:77:47:a0:5f:fb:e6:6c:fd:14:46:b4:d2:
                    1e:22:f5:1c:74:e8:dd:76:cd:eb:a8:a1:58:a6:22:
                    31:e4:1c:b8:4b:48:b1:72:1d:13:42:0c:db:56:fb:
                    13:45:c5:26:18:24:47:7a:bb:20:60:4f:e4:27:b1:
                    42:73:b9:72:f9:c0:2f:d4:1c:cb:ee:b6:da:05:3b:
                    6c:97:2e:c4:f3:59:74:83:62:9c:0e:f9:2c:68:02:
                    e9:e7:b2:09:af:17:bf:46:7b:5d:e0:58:8e:ff:f2:
                    24:49:51:2a:e8:57:4d:33:9e:22:b9:be:f2:9c:e2:
                    58:23:89:3c:f6:e8:7c:cd:3b:27:04:d9:68:7b:75:
                    47:cc:f9:14:81:b9:8d:8a:65:94:f0:af:17:d7:0b:
                    3c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4F:C1:24:4B:09:0D:82:96:67:E6:74:B3:D9:73:50:6A:8F:D6:38
            X509v3 Authority Key Identifier:
                keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f1:17:72:7e:96:e4:39:87:4e:3b:ef:4c:88:29:9d:c2:27:
         73:eb:bc:66:84:15:73:f3:31:e6:7e:13:60:30:7a:fc:33:be:
         89:19:b8:c8:84:52:3c:92:65:ae:f7:6d:70:5e:c8:5b:94:a2:
         cd:81:af:d1:4a:7a:a1:65:03:e1:a5:92:d8:99:e7:9f:d6:07:
         1b:aa:1f:1f:81:93:6a:62:21:1c:a5:2c:4a:7c:d5:07:dc:09:
         55:fd:03:d7:f0:bb:97:e3:57:b0:e6:b2:3b:66:7d:12:65:ba:
         33:c6:2a:15:72:a9:af:65:d6:23:13:cb:ba:89:69:e2:1e:d4:
         0a:58:53:c0:d4:83:8b:3e:29:a6:71:82:bf:bc:85:a9:9b:3c:
         ce:b8:73:a6:42:0a:b5:e1:30:53:18:2f:3d:ff:79:c7:12:be:
         05:82:d6:f3:03:6f:e6:39:61:d5:a4:c9:29:4e:b2:f9:55:cb:
         41:75:eb:9c:63:17:a0:09:af:19:99:14:81:f3:52:3e:16:dc:
         27:96:79:e6:9d:ef:13:29:d4:f4:39:0e:b6:46:00:81:23:65:
         16:68:15:29:2d:7a:94:48:2f:14:4b:ca:69:b7:3a:fa:78:8a:
         fb:24:21:47:0e:10:f3:80:25:46:95:67:48:79:55:d6:eb:71:
         35:78:f1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----