Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File:                     Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier:          26ScMlceNJYNc7Tpd0T9X8Nrfvt4/wXIGU+V41XGfSI=
Subject key identifier:   A5:E0:11:66:5A:24:7D:F2:BB:9D:10:5A:2F:A7:DA:FF:1B:A1:91:B2
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer:       /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial:       01935689BACC36052BA70338F1985D3DFFC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number:          0AFF
Signing time:             Sat 23 Nov 2024 01:01:27 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:27 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:27 +0000
Files and hashes:         1: GpPHyX2m5P2MdLf4YzELYaxFllk.roa (hash: sJjHc4PmDO5Ud9kVB7+h5AKhQPWcDnTT5MBdbZXiMGM=)
                          2: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: /VerW4qLWvcqZvurWa30oCiYbQuwlpfNpIXFNKRsvEI=)
                          3: Yu5W193XkBwhMpgPSb4RbQXDOnQ.roa (hash: nEjlXTFoVrUmrQU+GLT13BXivL5Igtj3yS3eb8TOfVs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:ba:cc:36:05:2b:a7:03:38:f1:98:5d:3d:ff:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
        Validity
            Not Before: Nov 23 01:01:27 2024 GMT
            Not After : Nov 24 01:01:27 2024 GMT
        Subject: CN=a5e011665a247df2bb9d105a2fa7daff1ba191b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:70:ea:ca:05:8c:dd:a4:9a:d8:a7:fe:cb:2e:
                    1b:9a:63:38:57:3d:0d:9f:e4:1b:55:20:0d:eb:2b:
                    e5:33:7d:13:d8:75:5e:5d:71:36:e6:42:1b:d9:9f:
                    26:d0:b8:6c:ed:22:83:c3:04:ae:4e:27:4c:d1:9a:
                    ea:d3:24:76:b0:cf:8f:a6:47:84:43:1e:98:9d:99:
                    b4:4e:29:1f:37:17:ad:ba:4f:b8:8b:fa:d5:59:c5:
                    f5:29:e0:e0:d0:b6:ab:7e:b1:58:55:2d:f8:1a:c3:
                    d9:cc:03:f4:3a:40:a7:55:da:3a:19:31:39:39:e4:
                    ed:81:a9:5a:df:8b:05:7f:2a:ae:a7:68:83:9f:ab:
                    30:d6:b2:11:c5:84:f2:88:6b:2b:53:fc:fa:f5:af:
                    28:bb:91:2c:52:c2:6f:9e:48:72:4b:11:0a:ad:22:
                    68:e1:61:0b:9a:78:58:c0:bb:e1:db:f3:1d:77:2e:
                    fd:c0:d0:e5:43:a0:0d:23:2f:de:54:69:df:1d:b5:
                    89:b5:aa:3c:6a:53:70:82:33:5f:42:db:2c:12:28:
                    96:87:12:69:db:4a:69:de:14:0a:6c:ed:f7:1e:cf:
                    8c:a2:3e:8b:e5:65:e7:23:5e:f2:f8:0c:54:da:b8:
                    49:e3:f8:49:60:ba:47:d5:9d:7f:5d:ea:df:06:27:
                    67:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E0:11:66:5A:24:7D:F2:BB:9D:10:5A:2F:A7:DA:FF:1B:A1:91:B2
            X509v3 Authority Key Identifier:
                keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:28:93:88:7f:c7:b7:3b:e3:41:5c:ed:42:7e:7b:50:48:45:
         7a:96:c0:17:32:7d:a4:e7:8f:14:8c:01:06:98:bd:6e:e4:15:
         ab:02:7c:b2:02:f2:be:fc:8b:c7:b6:28:fe:2c:24:36:ac:2b:
         bc:70:28:e0:e4:7c:de:4e:8c:cf:34:44:8c:d8:e9:e6:39:80:
         0f:e8:ea:d2:5c:d5:04:fb:b4:ad:49:14:9a:c4:cb:f5:76:69:
         5b:18:47:f1:d7:01:21:8d:2a:45:97:98:3b:f2:78:d4:09:26:
         3c:1c:af:4b:a6:e7:97:06:f9:90:e4:aa:3f:0a:bc:f3:37:38:
         1f:ce:94:f3:46:72:dd:78:c1:76:91:ae:e2:b6:ba:83:bb:2e:
         f9:0f:67:0f:16:59:3d:67:50:0e:49:dc:ec:13:f6:7b:c9:16:
         f6:ae:b1:f5:0a:53:6a:7b:ca:ff:30:45:c4:1c:14:e8:cd:e1:
         46:8e:7d:c6:b0:14:01:bc:f9:2c:5c:35:e5:89:4c:3f:d3:a2:
         cb:8a:88:20:d9:cc:b9:ae:27:47:6c:73:8f:52:15:fe:48:2a:
         6d:63:1c:03:ee:98:a1:78:fe:e0:75:82:63:39:8d:52:c6:de:
         3d:2f:53:d9:38:86:93:4f:95:b1:fd:81:84:51:cc:fa:3b:22:
         21:de:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----