Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File:                     _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier:          t6C09ZmoO6koa1/UCqOudDoRP2KpedtlEQIR9RC3QG4=
Subject key identifier:   A5:FD:69:64:6D:C3:00:0E:32:B2:B0:0F:B9:1F:C2:F1:F5:CC:89:18
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer:       /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial:       0193568A1AA4594D89A57592EFEBFECB7F92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number:          0D91
Signing time:             Sat 23 Nov 2024 01:01:51 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:51 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:51 +0000
Files and hashes:         1: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: Q9pj2G3P0NM3Ky9ieuhsG1ewsH+qTSN0gwdorPfKYKU=)
                          2: kR5UVFXhuvScm7g_ZHv3sXadasE.roa (hash: TpEN3ZRuLDG8iuThhbwdgzSUP7PfeF9HJBoNN6jrfJE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:1a:a4:59:4d:89:a5:75:92:ef:eb:fe:cb:7f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
        Validity
            Not Before: Nov 23 01:01:51 2024 GMT
            Not After : Nov 24 01:01:51 2024 GMT
        Subject: CN=a5fd69646dc3000e32b2b00fb91fc2f1f5cc8918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:6f:80:1c:1f:c8:f9:8d:c9:70:5a:8f:a4:
                    fc:73:75:1c:9a:67:48:8a:34:de:d0:cd:0e:c3:df:
                    b8:c2:a9:01:79:aa:6d:6f:d7:d9:2f:b0:1a:df:4b:
                    46:a2:dc:0e:9f:2e:fa:f0:2e:16:0c:e0:45:12:00:
                    eb:a6:fc:6d:3c:0d:55:95:6f:89:2d:d3:e7:1c:2c:
                    63:35:f1:e1:f7:14:42:4a:24:d8:22:ff:1b:a5:29:
                    91:c9:d7:39:45:88:7e:e3:5e:45:ae:c6:ba:3e:95:
                    14:64:5a:62:9a:e1:4f:74:e7:4e:af:ac:b0:d1:5c:
                    fd:24:88:56:00:11:e9:ea:34:c4:7b:3c:c6:36:26:
                    0f:42:a4:a6:79:ae:59:c7:a2:12:00:ed:5d:e7:aa:
                    b4:30:92:38:91:9e:68:b8:b2:06:36:8c:9e:4a:d3:
                    7f:5d:ec:d1:2f:e5:9b:87:e8:cc:e8:c7:18:1a:70:
                    9c:fb:f0:43:64:20:ef:3a:6d:78:42:09:19:be:50:
                    43:b9:db:c1:2d:8d:e0:e7:bb:24:b1:f2:6f:d0:0a:
                    d0:eb:4a:15:54:c7:59:da:36:e2:b6:3e:33:33:24:
                    92:98:37:06:4b:cd:9f:5b:20:01:20:5e:b5:01:b7:
                    68:e5:a1:ac:bc:11:e0:d9:67:98:a8:b5:51:77:63:
                    ba:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FD:69:64:6D:C3:00:0E:32:B2:B0:0F:B9:1F:C2:F1:F5:CC:89:18
            X509v3 Authority Key Identifier:
                keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a3:90:06:27:ea:39:df:63:3a:6a:c2:39:50:69:73:b1:4e:
         30:10:4e:88:85:56:ac:cb:89:98:0f:de:f9:1f:1d:da:dc:3c:
         ea:a2:93:f0:32:ff:88:dd:0b:10:97:f6:32:a3:a4:e7:b0:7f:
         64:f2:bc:41:5a:a3:2f:0c:58:69:a5:a9:77:6f:bf:19:fe:41:
         de:ad:07:4d:71:d9:b3:22:da:65:32:82:14:13:62:f3:e1:9a:
         b8:a9:70:e8:a8:fc:f5:b5:fa:69:59:25:3d:f3:39:a9:9d:63:
         58:d0:58:19:c0:9e:f7:54:85:05:99:26:fd:10:9c:ad:98:ed:
         bb:da:04:e7:0c:d8:ba:15:fb:50:e6:1c:23:77:ec:46:79:52:
         f1:21:05:5f:87:15:7c:5b:4a:55:95:36:ff:69:f3:8e:38:ca:
         4d:ef:b5:47:ef:28:e5:f6:12:fb:44:c1:ba:06:fd:fb:c3:62:
         73:2f:33:78:d1:b3:6f:63:26:94:90:15:c4:97:bb:f7:d1:5e:
         14:2b:f0:2d:bd:d1:df:25:69:f4:8f:62:81:05:fe:e1:14:59:
         b7:42:49:b4:1c:83:bd:79:c1:4d:4d:e3:cf:98:14:9f:ff:97:
         73:6d:7c:56:89:05:55:1c:c9:c7:c1:ed:a4:62:a9:6f:f2:dc:
         03:19:4f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----